~ubuntu-branches/ubuntu/lucid/nss/lucid-security

From Revision 34 to 15

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
34		* SECURITY UPDATE: possible arbitrary code execution via rac... * SECURITY UPDATE: possible arbitrary code execution via race condition   - debian/patches/CVE-2014-1544.patch: prevent     nssTrustDomain_AddCertsToCache from freeing the CERTCertificate     associated with the NSSCertificate in nss/lib/pk11wrap/pk11cert.c.   - CVE-2014-1544	Marc Deslauriers	3.15.4-0ubuntu0.10.04.3	9 years ago
33		* SECURITY UPDATE: incorrect IDNA wildcard handling * SECURITY UPDATE: incorrect IDNA wildcard handling   - debian/patches/CVE-2014-1492.patch: conform to RFC 6125 in     nss/lib/certdb/certdb.c.   - CVE-2014-1492	Marc Deslauriers	3.15.4-0ubuntu0.10.04.2	10 years ago
32		* SECURITY UPDATE: MITM attack via TLS False Start * SECURITY UPDATE: MITM attack via TLS False Start   - CVE-2013-1740 * Adjusted packaging for new upstream release 3.15.4:   - debian/patches/*: refreshed.   - debian/libnss3-1d.symbols: added new symbols.	Marc Deslauriers	3.15.4-0ubuntu0.10.04.1	10 years ago
31		* SECURITY UPDATE: New upstream release (LP: #1263135) * SECURITY UPDATE: New upstream release (LP: #1263135)   - Distrusts AC DG Tresor SSL CA	Marc Deslauriers	3.15.3.1-0ubuntu0.10.04.1	10 years ago
30		* SECURITY UPDATE: New upstream release to fix multiple secu... * SECURITY UPDATE: New upstream release to fix multiple security issues   and add TLSv1.2 support.   - CVE-2013-1739   - CVE-2013-1741   - CVE-2013-5605   - CVE-2013-5606 * Adjusted packaging for 3.15.3:   - debian/patches/*: refreshed.   - debian/patches/01_dont_build_nspr.patch: removed, changed build     options in debian/rules instead.   - debian/libnss3-1d.symbols: added new symbols.   - debian/rules: updated for new source layout.	Marc Deslauriers	3.15.3-0ubuntu0.10.04.1	10 years ago
29		* SECURITY UPDATE: New upstream release to fix TLS timing si... * SECURITY UPDATE: New upstream release to fix TLS timing side-channel   attacks   - CVE-2013-1620 * Remaining changes:   - 98_ckbi-1.93.patch: Dropped (included upstream)   - 01_dont_build_nspr.patch   - 38_kbsd.patch: refresh/update   - 80_security_build.patch   - 85_security_load.patch   - 97_SSL_RENEGOTIATE_TRANSITIONAL.patch * debian/libnss3.symbols: add NSS_3.14.3 symbols	Jamie Strandboge	3.14.3-0ubuntu0.10.04.1	11 years ago
28		* New upstream release. Dropped the following patches: * New upstream release. Dropped the following patches:   - debian/patches/25_entropy.patch (was bz51429 obsoleted by fix for     bz174993)   - debian/patches/38_mips64_build.patch (we don't build on mips)   - debian/patches/90_realpath.patch (included upstream)     upstream)   - debian/patches/diginotar.patch (included upstream)   - debian/patches/CVE-2012-0441.patch (included upstream) * debian/patches/01_dont_build_nspr.patch: refresh * debian/patches/38_kbsd.patch: refresh/update based on Debian * debian/patches/80_security_build.patch: refresh * debian/patches/85_security_load.patch: refresh/update based on Debian * debian/patches/97_SSL_RENEGOTIATE_TRANSITIONAL.patch: refresh/update based   on Debian * SECURITY UPDATE: distrust improperly issued TURKTRUST intermediate CAs   - debian/patches/94_ckbi-1.9.patch: update to CKBI 1.93 by using     mozilla/security/nss/lib/ckfw/builtins/certdata.txt from upstream and     updating mozilla/security/nss/lib/ckfw/builtins/nssckbi.h. Apply this     before 95_add_spi+cacert_ca_certs.patch since it keeps this patch clean     and underscores that SPI and CACERT are not part of upstream Roots.   - CVE-2013-0743 * debian/libnss3-0d.symbols: updated for *_3.12.10 through *_3.14.1	Jamie Strandboge	3.14.1-0ckbi1.93ubuntu.0.10.04.1	11 years ago
27		* SECURITY UPDATE: denial of service in QuickDER decoder * SECURITY UPDATE: denial of service in QuickDER decoder   - debian/patches/CVE-2012-0441.patch: properly handle zero-length basic     constraints and zero-length fields in     nss/mozilla/security/nss/lib/softoken/legacydb/keydb.c,     nss/mozilla/security/nss/lib/softoken/legacydb/lgcreate.c,     nss/mozilla/security/nss/lib/softoken/legacydb/lowkey.c,     nss/mozilla/security/nss/lib/softoken/legacydb/lowkeyti.h,     nss/mozilla/security/nss/lib/util/quickder.c.   - CVE-2012-0441 * debian/rules: added a workaround to get package built on more recent   kernels.	Marc Deslauriers	3.12.9+ckbi-1.82-0ubuntu0.10.04.4	11 years ago
26		* SECURITY UPDATE: Add patch from Debian version 3.12.11-3 r... * SECURITY UPDATE: Add patch from Debian version 3.12.11-3 rebased against    3.12.9 to remove the DigiNotar certificates and actively distrust them;   Thanks to Mike Hommey from Debian for the original patch (LP: #837557)   - mozilla/security/nss/lib/ckfw/builtins/certdata.*:     Explicitely distrust various DigiNotar CAs:     - DigiNotar Root CA     - DigiNotar Services 1024 CA     - DigiNotar Cyber CA     - DigiNotar Cyber CA 2nd     - DigiNotar PKIoverheid     - DigiNotar PKIoverheid G2   - mozilla/security/nss/lib/ckfw/builtins/certdata.*:     Remove DigiNotar Root CA.	Micah Gersten	3.12.9+ckbi-1.82-0ubuntu0.10.04.3	12 years ago
25		* New upstream release v3.12.9 with updated ckbi module * New upstream release v3.12.9 with updated ckbi module   (NSS_3_12_9_WITH_CKBI_1_82_RTM)   - SECURITY UPDATE: Update "builtin certificates" module (ckbi) to     explicitly mark the recently issued and revoked fraudulent certificates     as explicitly not trusted; NSS will report SEC_ERROR_UNTRUSTED_CERT when     attempting to verify one of these fraudulent certificates (LP: #741729) * Add new symbols   - update debian/libnss3-1d.symbols	Micah Gersten	3.12.9+ckbi-1.82-0ubuntu0.10.04.1	13 years ago
24		* New upstream release v3.12.8 (NSS_3_12_8_RTM) * New upstream release v3.12.8 (NSS_3_12_8_RTM)   - Fix browser wildcard certificate validation issue   - Update root certs   - Fix SSL deadlocks * Refresh patches:   - update debian/patches/38_kbsd.patch   - update debian/patches/97_SSL_RENEGOTIATE_TRANSITIONAL.patch * Bump minimum nspr version to 4.8.6   - update debian/control * Add new API to symbols file   - update debian/libnss3-1d.symbols	Chris Coulson	3.12.8-0ubuntu0.10.04.1	13 years ago
23		* Generate missing checksum for libnssdbm3.so to make FIPS m... * Generate missing checksum for libnssdbm3.so to make FIPS mode   work again (LP: #559881)   - update debian/rules	Chris Coulson	3.12.6-0ubuntu3	14 years ago
22		* Enable transitional scheme for SSL renegotiation (LP: #553... * Enable transitional scheme for SSL renegotiation (LP: #553251)   - add 97_SSL_RENEGOTIATE_TRANSITIONAL.patch   - update debian/patches/series	Chris Coulson	3.12.6-0ubuntu2	14 years ago
21		* New upstream release 3.12.6 RTM (NSS_3_12_6_RTM) * New upstream release 3.12.6 RTM (NSS_3_12_6_RTM)   - fixes CVE-2009-3555 aka US-CERT VU#120541 * Adjust patches to changed upstream code base   - update debian/patches/38_kbsd.patch   - update debian/patches/38_mips64_build.patch   - update debian/patches/85_security_load.patch * Remove patches that are merged upstream   - delete debian/patches/91_nonexec_stack.patch   - update debian/patches/series * Bump nspr dependency to 4.8   - update debian/control * Add new symbols for 3.12.6   - update debian/libnss3-1d.symbols	Chris Coulson	3.12.6-0ubuntu1	14 years ago
20		rebuild rest of main for armel armv7/thumb2 optimization; rebuild rest of main for armel armv7/thumb2 optimization; UbuntuSpec:mobile-lucid-arm-gcc-v7-thumb2	Alexander Sack	3.12.3.1-0ubuntu3	14 years ago
19		Add 91_nonexec_stack.patch: fix regression in stack memory Add 91_nonexec_stack.patch: fix regression in stack memory protectons caused by unmarked assembly (LP: #409864).	Kees Cook	3.12.3.1-0ubuntu2	14 years ago
18		* new upstream release 3.12.3.1 RTM (NSS_3_12_3_1_RTM) (LP: ... * new upstream release 3.12.3.1 RTM (NSS_3_12_3_1_RTM) (LP: #407549)   - see USN-810-1	Alexander Sack	3.12.3.1-0ubuntu1	14 years ago
17		* new upstream release 3.12.3 RTM (NSS_3_12_3_RTM) (LP: #387... * new upstream release 3.12.3 RTM (NSS_3_12_3_RTM) (LP: #387751) * adjust patches to changed upstream code base   - update debian/patches/38_kbsd.patch * needs nspr >= 4.7.4   - update debian/control * update 85_security_load.patch to latest debian version   - update debian/patches/85_security_load.patch * add new symbols for 3.12.3   - update debian/libnss3-1d.symbols * LP: #388350 - nss 3.12.3-0ubuntu2 ftbfs in karmic - shlibsign crashes; we add   debian/libnss3-1d/usr/lib/nss to LD_LIBRARY_PATH for the shlibsign invocation   used to sign libs in debian/rules   - update debian/rules * append LD_LIBRARY_PATH to shlibsign invocation to make fakeroot builds happy   - update debian/rules	Alexander Sack	3.12.3-0ubuntu2	14 years ago
16		* new upstream release 3.12.3 RTM (NSS_3_12_3_RTM) (LP: #387... * new upstream release 3.12.3 RTM (NSS_3_12_3_RTM) (LP: #387751) * adjust patches to changed upstream code base   - update debian/patches/38_kbsd.patch * needs nspr >= 4.7.4   - update debian/control * update 85_security_load.patch to latest debian version   - update debian/patches/85_security_load.patch * add new symbols for 3.12.3   - update debian/libnss3-1d.symbols	Alexander Sack	3.12.3-0ubuntu1	14 years ago
15		* LP: #316452 - ldconfig breaks/removes legacy links for * LP: #316452 - ldconfig breaks/removes legacy links for   previously versioned library names during upgrade; the fix   prevents ldconfig from treating the transitional/backup files   as "libs" by using a prefix ("XNOLDCONFIG_")   - debian/libnspr4-0d.postinst   - debian/libnspr4-0d.postrm   - debian/libnspr4-0d.preinst   - debian/libnspr4-0d.prerm	Alexander Sack	3.12.2~rc1-0ubuntu2	15 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1