lp:~mozillateam/nss/nss.natty

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #837557: fraudulent DigiNotar certificate issuance

Medium

Fix Released

Link a bug report

Related blueprints

128. By Micah Gersten on 2011-09-07

releasing version 3.12.9+ckbi-1.82-0ubuntu2.1

127. By Micah Gersten on 2011-09-07

* SECURITY UPDATE: Add patch from Debian version 3.12.11-3 rebased against
  3.12.9 to remove the DigiNotar certificates and actively distrust them;
  Thanks to Mike Hommey from Debian for the original patch (LP: #837557)
  - mozilla/security/nss/lib/ckfw/builtins/certdata.*:
    Explicitely distrust various DigiNotar CAs:
    - DigiNotar Root CA
    - DigiNotar Services 1024 CA
    - DigiNotar Cyber CA
    - DigiNotar Cyber CA 2nd
    - DigiNotar PKIoverheid
    - DigiNotar PKIoverheid G2
  - mozilla/security/nss/lib/ckfw/builtins/certdata.*:
    Remove DigiNotar Root CA.

126. By Chris Coulson on 2011-04-20

releasing version 3.12.9+ckbi-1.82-0ubuntu2

125. By Chris Coulson on 2011-03-24

releasing version 3.12.9+ckbi-1.82-0ubuntu1

124. By Chris Coulson on 2011-03-24

New upstream release v3.12.9 with updated ckbi module
(NSS_3_12_9_WITH_CKBI_1_82_RTM )

123. By Chris Coulson on 2011-01-11

releasing version 3.12.9~b2-0ubuntu1

122. By Chris Coulson on 2011-01-11

* Merge in changelog from maverick-security, which is currently what is in natty

121. By Chris Coulson on 2011-01-11

* Drop the link shuffeling now, as all upgraders to this version will be
  using a fixed package anyway
  - remove debian/libnss3-1d.postinst
  - remove debian/libnss3-1d.postrm
  - remove debian/libnss3-1d.preinst
  - remove debian/libnss3-1d.prerm
* Ship the main SO files in an unversioned binary, as we don't have
  versioned SO's in Ubuntu. Maintain a transitional versioned binary
  package containing the versioned symlinks, to maintain compatibility with
  Debian
  - update debian/control
  - mass rename debian/libnss3-1d* => debian/libnss3*
  - update debian/rules
* Fix postinst-must-call-ldconfig - dh_makeshlibs doesn't seem to add
  the maintainer script hooks with the unversioned SO files, so add them
  manually
  - add debian/libnss3.postinst
  - add debian/libnss3.postrm
* Drop libnss3-0d now
  - remove debian/libnss3-0d.dirs
  - remove debian/libnss3-0d.links
  - update debian/control
* Bump libnspr4-dev build-dependency to 4.8.7
  - update debian/control
* Update symbols
  - update debian/libnss3.symbols

120. By Chris Coulson on 2011-01-11

New upstream release v3.12.9beta2 (NSS_3_12_9_BETA2)

119. By Chris Coulson on 2010-10-04

* New upstream release v3.12.8 (NSS_3_12_8_RTM)
* Refresh patches:
  - update debian/patches/38_kbsd.patch
  - update debian/patches/97_SSL_RENEGOTIATE_TRANSITIONAL.patch