ELEA-2017-1977

ELEA-2017-1977 - nss bug fix and enhancement update

Type:	ENHANCEMENT
Severity:	NA
Release Date:	2017-08-08

Description

nss
[3.28.4-8]
- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5

[3.28.4-7]
- Update nss-pk12util.patch to include fix from mozbz#1353724.

[3.28.4-6]
- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.

[3.28.4-5]
- Fix zero-length record treatment for stream ciphers and SSLv2

[3.28.4-4]
- Correctly set policy file location when building

[3.28.4-3]
- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9

[3.28.4-2]
- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325

[3.28.3-5]
- Switch default hash algorithm used by tools from SHA-1 to SHA-256
- Avoid race condition in nssSlot_IsTokenPresent()
- Enable SHA-2 and AES in pk12util
- Disable RSA-PSS for now

[3.28.3-4]
- Utilize CKA_NSS_MOZILLA_CA_POLICY attribute, patch by Kai Engert
- Backport changes adding SSL alert callbacks from upstream
- Add nss-check-policy-file.patch from Fedora
- Install policy config in /etc/pki/nss-legacy/nss-rhel7.config

[3.28.3-3]
- Make sure 32bit nss-pem always be installed with 32bit nss in
multlib environment, patch by Kamil Dudka
- Enable new algorithms supported by the new nss-softokn

[3.28.3-2]
- Rebase to NSS 3.28.3
- Bump required version of nss-softokn

[3.28.2-3]
- Remove %nss_cycles setting, which was also mistakenly added
- Re-enable BUILD_OPT, mistakenly disabled in the previous build
- Prevent ABI incompatibilty of SECKEYECPublicKey
- Disable TLS_ECDHE_{RSA,ECDSA}_WITH_AES_128_CBC_SHA256 by default
- Enable 4 AES_256_GCM_SHA384 ciphersuites, enabled by the downstream
patch in the previous release
- Fix crash with tstclnt -W
- Always enable gtests for supported features
- Add patch to fix bash syntax error in tests/ssl.sh
- Build with support for SSLKEYLOGFILE
- Disable the use of RSA-PSS with SSL/TLS

[3.28.2-2]
- Decouple nss-pem from the nss package
- Resolves: #1316546

[3.28.2-1.1]
- Remove mistakenly added R: nss-pem

[3.28.2-1.0]
- Rebase to NSS 3.28.2
- Remove NSS_ENABLE_ECC and NSS_ECC_MORE_THAN_SUITE_B setting, which
is no-op now
- Enable gtests when requested
- Remove nss-646045.patch and fix-nss-test-filtering.patch, which are
not necessary
- Remove sslauth-no-v2.patch and
nss-sslstress-txt-ssl3-lower-value-in-range.patch, as SSLv2 is
already disabled in upstream
- Remove ssl-server-min-key-sizes.patch, as we decided to support DH
key size greater than 1023 bits
- Remove local patches for SHA384 cipher suites (now supported in
upstream): dhe-sha384-dss-support.patch,
client_auth_for_sha384_prf_support.patch,
nss-fix-client-auth-init-hashes.patch, nss-map-oid-to-hashalg.patch,
nss-enable-384-cipher-tests.patch, nss-fix-signature-and-hash.patch,
fix-allowed-sig-alg.patch, tests-extra.patch
- Remove upstreamed patches: rh1238290.patch,
fix-reuse-of-session-cache-entry.patch, flexible-certverify.patch,
call-restartmodules-in-nssinit.patch

[3.21.3-1]
- Rebase to NSS 3.21.3
- Resolves: #1383887

[3.21.0-17]
- remove additional false duplicates from sha384 downstream patches

[3.21.0-16]
- enable ssl_gtests (without extended master secret tests), Bug 1298692
- call SECMOD_RestartModules in nss_Init, Bug 1317691

[3.21.0-15]
- escape all percent characters in all changelog comments

[3.21.0-14]
- Support TLS 1.2 certificate_verify hashes other than PRF,
backported fix from NSS 3.25 (upstream bug 1179338).

[3.21.0-13]
- Fix reuse of session cache entry
- Resolves: Bug 1241172 - Certificate verification fails with multiple https urls

[3.21.0-12]
- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856

[3.21.0-11]
- Cleanup: Remove unnecessary %posttrans script from nss.spec
- Resolves: Bug 1174201

[3.21.0-10]
- Merge fixes from the rhel-7.2 branch
- Fix a bogus %changelog entry
- Resolves: Bug 1297941

[3.21.0-9]
- Rebuild to require the latest nss-util build and nss-softokn build.

[3.21.0-8]
- Update the minimum nss-softokn build required at runtime.

[3.21.0-7]
- Delete duplicates from one table

[3.21.0-6]
- Fix missing support for sha384/dsa in certificate_request

[3.21.0-5]
- Merge fixes from the rhel-7.2 branch
- Fix the SigAlgs sent in certificate_request
- Ensure all ssl.sh tests are executed
- Update sslauth test patch to run additional tests

[3.21.0-2]
- Fix sha384 support and testing patches

[3.21.0-1]
- Rebase to NSS-3.21

[3.19.1-19]
- Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
- Fix a mockbuild reported bad %if condition when using the __isa_bits macro instead of list of 64-bit architectures
- Change the test to %if 0%{__isa_bits} == 64 as required for building the srpm which is noarch
- Resolves: Bug 1289884

[3.19.1-18]
- Rebuild against updated NSPR

[3.19.1-17]
- Change the required_softokn_build_version back to -13
- Ensure we use nss-softokn-3.16.2.3-13.el7_1

[3.19.1-16]
- Fix check for public key size of DSA certificates
- Use size of prime P not the size of dsa.publicValue

[3.19.1-15]
- Reorder the cipher suites and enable two more by default

[3.19.1-14]
- Update the required_softokn_build_version to -14
- Add references to bugs filed upstream for new patches
- Merge ocsp stapling and sslauth sni tests patches into one

[3.19.1-13]
- Reorder the cipher suites and enable two more by default
- Fix some of the ssauth sni and ocsp stapling tests

[3.19.1-12]
- Support TLS > 1.0 by support while still allowing to connect to SSL3 only servers
- Enable ECDSA cipher suites by default, a subset of the ones requested

[3.19.1-11]
- Support TLS > 1.0 by support while still allowing to connect to SSL3 only servers

[3.19.1-10]
- Fix to correctly report integrity mechanism for TLS_RSA_WITH_AES_256_GCM_SHA384

[3.19.1-9]
- Fix checks to skip ssl2/export cipher suites tests to not skip needed tests
- Fix libssl ssl2/export disabling patch to handle NULL cipher cases
- Enable additional cipher suites by default

[3.19.1-8]
- Add links to filed upstream bugs to better track patches in spec file

[3.19.1-7]
- Package listsuites as part of the unsupported tools

[3.19.1-6]
- Bump the release tag

[3.19.1-5]
- Incremental patches to fix SSL/TLS test suite execution,
fix the earlier SHA384 patch, and inform clients to use SHA384 with
certificate_verify if required by NSS.

[3.19.1-4]
- Add support for sha384 tls cipher suites
- Add support for server-side hde key exchange
- Add support for DSS+SHA256 ciphersuites

[3.19.1-3]
- Reenable a patch that had been mistakenly disabled

[3.19.1-2]
- Build against nss-softokn-3.16.2.3-9

[3.19.1-1]
- Rebase to nss-3.19.1
- Resolves: Bug 1228913 - Rebase to nss-3.19.1 for CVE-2015-4000 [RHEL-7.1]

[3.18.0-6]
- Backport mozbz#1155922 to support SHA512 signatures with TLS 1.2

[3.18.0-5]
- Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)

[3.18.0-4]
- Update and reeneable nss-646045.patch on account of the rebase
- Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]

[3.18.0-3]
- Fix shell syntax error on nss/tests/all.sh
- Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]

[3.18.0-2]
- Replace expired PayPal test certificate that breaks the build
- Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]

[3.18.0-1]
- Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]

[3.16.2.3-5]
- Reverse the sense of a test in patch to fix pk12util segfault
- Resolves: Bug 1174527 - Segfault in pk12util when using -l option with certain .p12 files

[3.16.2.3-4]
- Fix race condition
- Resolves: Bug 1094468 - 389-ds-base server reported crash in stan_GetCERTCertificate
- under the replication replay failure condition

[3.16.2.3-3]
- Resolves: Bug 1174527 - Segfault in pk12util when using -l option with certain .p12 files

[3.16.2.3-2]
- Restore patch for certutil man page
- supply missing options descriptions
- Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3

[3.16.2-10]
- Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
- Support TLS_FALLBACK_SCSV in tstclnt and ssltap

[3.16.2-9]
- Resolves: Bug 1145434 - CVE-2014-1568
- Using a release number higher than on rhel-7.0 branch

[3.16.2-4]
- Fix crash in stan_GetCERTCertificate
- Resolves: Bug 1094468

[3.16.2-3]
- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1125619 - nss fails to build on arch: ppc64le (missing dependencies)
- Fix contributed by Peter Robinson

[3.16.2-2]
- Fix libssl and test patches that disable ssl2 support
- Resolves: Bug 1123435
- Replace expired PayPal test certificate with current one

[3.16.2-1]
- Rebase to nss-3.16.2
- Resolves: Bug 1103252 - Rebase RHEL 7.1 to at least NSS 3.16.1 (FF 31)
- Fix test failure detection in the %check section
- Move removal of unwanted source directories to the end of the %prep section
- Update various patches on account of the rebase
- Remove unused patches rendered obsolete by the rebase

[3.15.4-6]
- Disallow disabling the internal module
- Resolves: Bug 1056036 - nss segfaults with opencryptoki module

[3.15.4-5]
- Pick up a fix from rhel-6 and fix an rpm conflict
- Don't hold issuer cert handles in crl cache
- Resolves: Bug 1034409 - deadlock in trust domain and object lock
- Move nss shared db files to the main package
- Resolves: Bug 1050163 - Same files in two packages create rpm conflict

[3.15.4-4]
- Update pem sources to latest from nss-pem upstream
- Pick up pem module fixes verified on RHEL and applied upstream
- Remove no loger needed pem patches on acccount on this update
- Add comments documenting the iquote.patch
- Resolves: Bug 1054457 - CVE-2013-1740

[3.15.4-3]
- Remove spurious man5 wildcard entry as all manpages are listed by name
- Resolves: Bug 1050163 - Same files in two packages create rpm conflict

[3.15.4-2]
- Mass rebuild 2014-01-24

[3.15.3-9]
- Rebase to nss-3.15.4
- Resolves: Bug 1054457 - CVE-2013-1740 nss: false start PR_Recv information disclosure security issue
- Remove no longer needed patches for manpages that were applied upstream
- Remove no longer needed patch to disable ocsp stapling tests
- Update iquote.patch on account of upstream changes
- Update and rename patch to pem/rsawrapr.c on account of upstream changes
- Use the pristine upstream sources for nss without repackaging
- Avoid unneeded manual step which may introduce errors

[3.15.3-8]
- Fix the spec file to apply the nss ecc list patch for bug 752980
- Resolves: Bug 752980 - Support ECDSA algorithm in the nss package via puggable ecc

[3.15.3-7]
- Move several nss-sysinit manpages tar archives to the %files
- Resolves: Bug 1050163 - Same files in two packages create rpm conflict

[3.15.3-6]
- Fix a coverity scan compile time warning for the pem module
- Resolves: Bug 1002271 - NSS pem module should not require unique base file names

[3.15.3-5]
- Resolves: Bug 1002271 - NSS pem module should not require unique base file names

[3.15.3-4]
- Improve pluggable ECC support for ECDSA
- Resolves: Bug 752980 - [7.0 FEAT] Support ECDSA algorithm in the nss package

[3.15.3-3]
- Mass rebuild 2013-12-27

[3.15.3-2]
- Revoke trust in one mis-issued anssi certificate
- Resolves: Bug 1040284 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-7.0]

[3.15.3-1]
- Update to NSS_3_15_3_RTM
- Resolves: Bug 1031463 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741

[3.15.2-10]
- Fix path to script and remove -- from some options in nss-sysinit man page
- Resolves: rhbz#982723 - man page of nss-sysinit worong path and other flaws

[3.15.2-9]
- Fix certutil man page options names to be consistent with help
- Resolves: rhbz#948495 - man page scan results for nss
- Remove incorrect count argument in status description in nss-sysinit man page
- Resolves: rhbz#982723 - man page of nss-sysinit incorrect option descriptions

[3.15.2-8]
- Fix patch for disabling ssl2 in ssl to correctly set error code
- Fix syntax error reported in the build.log even tough it succeeds
- Add patch top ignore setpolicy result
- Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites
- Resolves: rhbz#1026677 - Attempt to run ipa-client-install fails

[3.15.2-7]
- Fix bash syntax error in patch for disabling ssl2 tests
- Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites

[3.15.2-6]
- Fix errors in ssl disabling patches for both library and tests
- Add s390x to the multilib_arches definition used for alt_ckbi
- Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites

[3.15.2-5]
- Fix errors in nss-sysinit manpage options descriptions
- Resolves: rhbz#982723

[3.15.2-4]
- Enable fips when system is in fips mode
- Resolves: rhbz#852023 - FIPS mode detection does not work

[3.15.2-3]
- Remove unused and obsoleted patches
- Related: rhbz#1012656

[3.15.2-2]
- Add description of the certutil's --email option to it's manpage
- Resolves: rhbz#Bug 948495 - Man page scan results for nss

[3.15.2-1]
- Rebase to nss-3.15.2
- Resolves: rhbz#1012656 - pick up NSS 3.15.2 to fix CVE-2013-1739 and disable MD5 in OCSP/CRL

[3.15.1-4]
- Install symlink to nss-sysinit.sh without the .sh suffix
- Resolves: rhbz#982723 - nss-sysinit man page has wrong path for the script

[3.15.1-3]
- Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites

[3.15.1-2]
- Add upstream bug URL for a patch subitted upstream and remove obsolete script

[3.15.1-2]
- Update to NSS_3_15_1_RTM
- Apply various fixes to the man pages and add new ones
- Enable the iquote.patch to access newly introduced types
- Add man page for pkcs11.txt configuration file and cert and key databases
- Add missing option descriptions for {cert|cms|crl}util
- Resolves: rhbz#948495 - Man page scan results for nss
- Resolves: rhbz#982723 - Fix path to script in man page for nss-sysinit

[3.15-6]
- Use the unstripped source tar ball

[3.15-5]
- Install man pages for nss-tools and the nss-config and setup-nsssysinit scripts
- Resolves: rhbz#606020 - nss security tools lack man pages

[3.15-4]
- Build nss without softoken or util sources in the tree
- Resolves: rhbz#689918

[3.15-3]
- Update ssl-cbc-random-iv-by-default.patch

[3.15-2]
- Fix generation of NSS_VMAJOR, NSS_VMINOR, and NSS_VPATCH for nss-config

[3.15-1]
- Update to NSS_3_15_RTM

[3.14.3-13.0]
- Reactivate nss-ssl-cbc-random-iv-off-by-default.patch

[3.14.3-12.0]
- Add upstream patch to fix rhbz#872761

[3.14.3-11]
- Update expired test certificates (fixed in upstream bug 852781)

[3.14.3-10]
- Fix incorrect post/postun scripts. Fix broken links in posttrans.

[3.14.3-9]
- Configure libnssckbi.so to use the alternatives system
in order to prepare for a drop in replacement.

[3.14.3-1]
- Update to NSS_3_14_3_RTM
- sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
- Resolves: rhbz#908257 - CVE-2013-1620 nss: TLS CBC padding timing attack
- Resolves: rhbz#896651 - PEM module trashes private keys if login fails
- Resolves: rhbz#909775 - specfile support for AArch64
- Resolves: rhbz#910584 - certutil -a does not produce ASCII output

[3.14.2-2]
- Allow building nss against older system sqlite

[3.14.2-1]
- Update to NSS_3_14_2_RTM

[3.14.1-3]
- Update to NSS_3_14_1_WITH_CKBI_1_93_RTM

[3.14.1-2]
- Require nspr >= 4.9.4
- Fix changelog invalid dates

[3.14.1-1]
- Update to NSS_3_14_1_RTM

[3.14-12]
- Bug 879978 - Install the nssck.api header template where mod_revocator can access it
- Install nssck.api in /usr/includes/nss3/templates

[3.14-11]
- Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it
- Install nssck.api in /usr/includes/nss3

[3.14-10]
- Bug 870864 - Add support in NSS for Secure Boot

[3.14-9]
- Disable bypass code at build time and return failure on attempts to enable at runtime
- Bug 806588 - Disable SSL PKCS #11 bypass at build time

[3.14-8]
- Fix pk11wrap locking which fixes 'fedpkg new-sources' and 'fedpkg update' hangs
- Bug 872124 - nss-3.14 breaks fedpkg new-sources
- Fix should be considered preliminary since the patch may change upon upstream approval

[3.14-7]
- Add a dummy source file for testing /preventing fedpkg breakage
- Helps test the fedpkg new-sources and upload commands for breakage by nss updates
- Related to Bug 872124 - nss 3.14 breaks fedpkg new-sources

[3.14-6]
- Fix a previous unwanted merge from f18
- Update the SS_SSL_CBC_RANDOM_IV patch to match new sources while
- Keeping the patch disabled while we are still in rawhide and
- State in comment that patch is needed for both stable and beta branches
- Update .gitignore to download only the new sources

[3.14-5]
- Fix the spec file so sechash.h gets installed
- Resolves: rhbz#871882 - missing header: sechash.h in nss 3.14

[3.14-4]
- Update the license to MPLv2.0

[3.14-3]
- Use only -f when removing unwanted headers

[3.14-2]
- Add secmodt.h to the headers installed by nss-devel
- nss-devel must install secmodt.h which moved from softoken to pk11wrap with nss-3.14

[3.14-1]
- Update to NSS_3_14_RTM

[3.14-0.1.rc.1]
- Update to NSS_3_14_RC1
- update nss-589636.patch to apply to httpdserv
- turn off ocsp tests for now
- remove no longer needed patches
- remove headers shipped by nss-util

[3.13.6-1]
- Update to NSS_3_13_6_RTM

[3.13.5-8]
- Rebase pem sources to fedora-hosted upstream to pick up two fixes from rhel-6.3
- Resolves: rhbz#847460 - Fix invalid read and free on invalid cert load
- Resolves: rhbz#847462 - PEM module may attempt to free uninitialized pointer
- Remove unneeded fix gcc 4.7 c++ issue in secmodt.h that actually undoes the upstream fix

[3.13.5-7]
- Fix pluggable ecc support

[3.13.5-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[3.13.5-5]
- Fix checkin comment to prevent unwanted expansions of percents

[3.13.5-4]
- Resolves: Bug 830410 - Missing Requires %{?_isa}
- Use Requires: %{name}%{?_isa} = %{version}-%{release} on tools
- Drop zlib requires which rpmlint reports as error E: explicit-lib-dependency zlib
- Enable sha224 portion of powerup selftest when running test suites
- Require nspr 4.9.1

[3.13.5-3]
- Resolves: rhbz#833529 - revert unwanted change to nss.pc.in

[3.13.5-2]
- Resolves: rhbz#833529 - Remove unwanted space from the Libs: line on nss.pc.in

[3.13.5-1]
- Update to NSS_3_13_5_RTM

[3.13.4-3]
- Resolves: Bug 812423 - nss_Init leaks memory, fix from RHEL 6.3

[3.13.4-2]
- Resolves: Bug 805723 - Library needs partial RELRO support added
- Patch coreconf/Linux.mk as done on RHEL 6.2

[3.13.4-1]
- Update to NSS_3_13_4_RTM
- Update the nss-pem source archive to the latest version
- Remove no longer needed patches
- Resolves: Bug 806043 - use pem files interchangeably in a single process
- Resolves: Bug 806051 - PEM various flaws detected by Coverity
- Resolves: Bug 806058 - PEM pem_CreateObject leaks memory given a non-existing file name

[3.13.3-4]
- Resolves: Bug 805723 - Library needs partial RELRO support added

[3.13.3-3]
- Cleanup of the spec file
- Add references to the upstream bugs
- Fix typo in Summary for sysinit

[3.13.3-2]
- Pick up fixes from RHEL
- Resolves: rhbz#800674 - Unable to contact LDAP Server during winsync
- Resolves: rhbz#800682 - Qpid AMQP daemon fails to load after nss update
- Resolves: rhbz#800676 - NSS workaround for freebl bug that causes openswan to drop connections

[3.13.3-1]
- Update to NSS_3_13_3_RTM

[3.13.1-13]
- fix issue with gcc 4.7 in secmodt.h and C++11 user-defined literals

[3.13.1-12]
- Resolves: Bug 784672 - nss should protect against being called before nss_Init

[3.13.1-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[3.13.1-11]
- Deactivate a patch currently meant for stable branches only

[3.13.1-10]
- Resolves: Bug 770682 - nss update breaks pidgin-sipe connectivity
- NSS_SSL_CBC_RANDOM_IV set to 0 by default and changed to 1 on user request

[3.13.1-9]
- Revert to using current nss_softokn_version
- Patch to deal with lack of sha224 is no longer needed

[3.13.1-8]
- Resolves: Bug 754771 - [PEM] an unregistered callback causes a SIGSEGV

[3.13.1-7]
- Resolves: Bug 750376 - nss 3.13 breaks sssd TLS
- Fix how pem is built so that nss-3.13.x works with nss-softokn-3.12.y
- Only patch blapitest for the lack of sha224 on system freebl
- Completed the patch to make pem link against system freebl

[3.13.1-6]
- Removed unwanted /usr/include/nss3 in front of the normal cflags include path
- Removed unnecessary patch dealing with CERTDB_TERMINAL_RECORD, it's visible

[3.13.1-5]
- Statically link the pem module against system freebl found in buildroot
- Disabling sha224-related powerup selftest until we update softokn
- Disable sha224 and pss tests which nss-softokn 3.12.x doesn't support

[3.13.1-4]
- Rebuild with nss-softokn from 3.12 in the buildroot
- Allows the pem module to statically link against 3.12.x freebl
- Required for using nss-3.13.x with nss-softokn-3.12.y for a merge inrto rhel git repo
- Build will be temprarily placed on buildroot override but not pushed in bodhi

[3.13.1-2]
- Fix broken dependencies by updating the nss-util and nss-softokn versions

[3.13.1-1]
- Update to NSS_3_13_1_RTM
- Update builtin certs to those from NSSCKBI_1_88_RTM

[3.13-1]
- Update to NSS_3_13_RTM

[3.13-0.1.rc0.1]
- Update to NSS_3_13_RC0

[3.12.11-3]
- Fix attempt to free initilized pointer (#717338)
- Fix leak on pem_CreateObject when given non-existing file name (#734760)
- Fix pem_Initialize to return CKR_CANT_LOCK on multi-treaded calls (#736410)

[3.12.11-2]
- Update builtins certs to those from NSSCKBI_1_87_RTM

[3.12.11-1]
- Update to NSS_3_12_11_RTM

[3.12.10-6]
- Indicate the provenance of stripped source tarball (#688015)

[3.12.10-5]
- Provide virtual -static package to meet guidelines (#609612).

[3.12.10-4]
- Enable pluggable ecc support (#712556)
- Disable the nssdb write-access-on-read-only-dir tests when user is root (#646045)

[3.12.10-3]
- make the testsuite non fatal on arm arches

[3.12.10-2]
- Fix crmf hard-coded maximum size for wrapped private keys (#703656)

[3.12.10-1]
- Update to NSS_3_12_10_RTM

[3.12.10-0.1.beta1]
- Update to NSS_3_12_10_BETA1

[3.12.9-15]
- Implement PEM logging using NSPR's own (#695011)

[3.12.9-14]
- Update to NSS_3.12.9_WITH_CKBI_1_82_RTM

[3.12.9-13]
- Short-term fix for ssl test suites hangs on ipv6 type connections (#539183)

[3.12.9-12]
- Add a missing requires for pkcs11-devel (#675196)

[3.12.9-11]
- Run the test suites in the check section (#677809)

[3.12.9-10]
- Fix cms headers to not use c++ reserved words (#676036)
- Reenabling Bug 499444 patches
- Fix to swap internal key slot on fips mode switches

[3.12.9-9]
- Revert patches for 499444 until all c++ reserved words are found and extirpated

[3.12.9-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[3.12.9-7]
- Fix cms header to not use c++ reserved word (#676036)
- Reenable patches for bug 499444

[3.12.9-6]
- Revert patches for 499444 as they use a C++ reserved word and
cause compilation of Firefox to fail

[3.12.9-5]
- Fix the earlier infinite recursion patch (#499444)
- Remove a header that now nss-softokn-freebl-devel ships

[3.12.9-4]
- Fix infinite recursion when encoding NSS enveloped/digested data (#499444)

[3.12.9-3]
- Update the cacert trust patch per upstream review requests (#633043)

[3.12.9-2]
- Fix to honor the user's cert trust preferences (#633043)
- Remove obsoleted patch

[3.12.9-1]
- Update to 3.12.9

[3.12.9-0.1.beta2]
- Rebuilt according to fedora pre-release package naming guidelines

[3.12.8.99.2-1]
- Update to NSS_3_12_9_BETA2
- Fix libpnsspem crash when cacert dir contains other directories (#642433)

[3.12.8.99.1-1]
- Update to NSS_3_12_9_BETA1

[3.12.8-9]
- Update pem source tar with fixes for 614532 and 596674
- Remove no longer needed patches

[3.12.8-8]
- Update PayPalEE.cert test certificate which had expired

[3.12.8-7]
- Tell rpm not to verify md5, size, and modtime of configurations file

[3.12.8-6]
- Fix certificates trust order (#643134)
- Apply nss-sysinit-userdb-first.patch last

[3.12.8-5]
- Move triggerpostun -n nss-sysinit script ahead of the other ones (#639248)

[3.12.8-4]
- Fix invalid %postun scriptlet (#639248)

[3.12.8-3]
- Replace posttrans sysinit scriptlet with a triggerpostun one (#636787)
- Fix and cleanup the setup-nsssysinit.sh script (#636792, #636801)

[3.12.8-2]
- Add posttrans scriptlet (#636787)

[3.12.8-1]
- Update to 3.12.8
- Prevent disabling of nss-sysinit on package upgrade (#636787)
- Create pkcs11.txt with correct permissions regardless of umask (#636792)
- Setup-nsssysinit.sh reports whether nss-sysinit is turned on or off (#636801)
- Added provides pkcs11-devel-static to comply with packaging guidelines (#609612)

[3.12.7.99.4-1]
- NSS 3.12.8 RC0

[3.12.7.99.3-2]
- Fix nss-util_version and nss_softokn_version required to be 3.12.7.99.3

[3.12.7.99.3-1]
- NSS 3.12.8 Beta3
- Fix unclosed comment in renegotiate-transitional.patch

[3.12.7-3]
- Change BuildRequries to available version of nss-util-devel

[3.12.7-2]
- Define NSS_USE_SYSTEM_SQLITE and remove unneeded patch
- Add comments regarding an unversioned provides which triggers rpmlint warning
- Build requires nss-softokn-devel >= 3.12.7

[3.12.7-1]
- Update to 3.12.7

[3.12.6-12]
- Apply the patches to fix rhbz#614532

[3.12.6-11]
- Removed pem sourecs as they are in the cache

[3.12.6-10]
- Add support for PKCS#8 encoded PEM RSA private key files (#614532)

[3.12.6-9]
- Fix nsssysinit to return userdb ahead of systemdb (#603313)

[3.12.6-8]
- Require and BuildRequire >= the listed version not =

[3.12.6-7]
- Require nss-softoken 3.12.6

[3.12.6-6]
- Fix SIGSEGV within CreateObject (#596674)

[3.12.6-5]
- Update pem source tar to pick up the following bug fixes:
- PEM - Allow collect objects to search through all objects
- PEM - Make CopyObject return a new shallow copy
- PEM - Fix memory leak in pem_mdCryptoOperationRSAPriv

[3.12.6-4]
- Update the test cert in the setup phase

[3.12.6-3]
- Add sed to sysinit requires as setup-nsssysinit.sh requires it (#576071)
- Update PayPalEE test cert with unexpired one (#580207)

[3.12.6-2]
- Fix ns.spec to not require nss-softokn (#575001)

[3.12.6-1.2]
- rebuilt with all tests enabled

[3.12.6-1.1]
- Using SSL_RENEGOTIATE_TRANSITIONAL as default while on transition period
- Disabling ssl tests suites until bug 539183 is resolved

[3.12.6-1]
- Update to 3.12.6
- Reactivate all tests
- Patch tools to validate command line options arguments

[3.12.5-8]
- Fix curl related regression and general patch code clean up

[3.12.5-5]
- retagging

[3.12.5-1.1]
- Fix SIGSEGV on call of NSS_Initialize (#553638)

[3.12.5-1.13.2]
- New version of patch to allow root to modify ystem database (#547860)

[3.12.5-1.13.1]
- Temporarily disabling the ssl tests

[3.12.5-1.13]
- Fix nsssysinit to allow root to modify the nss system database (#547860)

[3.12.5-1.11]
- Fix an error introduced when adapting the patch for rhbz #546211

[3.12.5-1.9]
- Remove left over trace statements from nsssysinit patching

[3.12.5-2.7]
- Fix a misconstructed patch

[3.12.5-1.6]
- Fix nsssysinit to enable apps to use system cert store, patch contributed by David Woodhouse (#546221)
- Fix spec so sysinit requires coreutils for post install scriplet (#547067)
- Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)

[3.12.5-1.5]
- Fix nsssysinit to set the default flags on the crypto module (#545779)
- Remove redundant header from the pem module

[3.12.5-1.1]
- Remove unneeded patch

[3.12.5-1.1]
- Retagging to include missing patch

[3.12.5-1]
- Update to 3.12.5
- Patch to allow ssl/tls clients to interoperate with servers that require renogiation

[3.12.4-14.1]
- Retagging

[3.12.4-13.1]
- Require nss-softoken of same architecture as nss (#527867)
- Merge setup-nsssysinit.sh improvements from F-12 (#527051)

[3.12.4-13]
- User no longer prompted for a password when listing keys an empty system db (#527048)
- Fix setup-nsssysinit to handle more general formats (#527051)

[3.12.4-12]
- Fix syntax error in setup-nsssysinit.sh

[3.12.4-11]
- Fix sysinit to be under mozilla/security/nss/lib

[3.12.4-10]
- Add nss-sysinit activation/deactivation script

[3.12.4-9]
- Install blank databases and configuration file for system shared database
- nsssysinit queries system for fips mode before relying on environment variable

[3.12.4-8]
- Restoring nssutil and -rpath-link to nss-config for now - 522477

[3.12.4-7]
- Add the nss-sysinit subpackage

[3.12.4-6]
- Installing shared libraries to %{_libdir}

[3.12.4-5]
- Retagging to pick up new sources

[3.12.4-4]
- Update pem enabling source tar with latest fixes (509705, 51209)

[3.12.4-3]
- PEM module implements memory management for internal objects - 509705
- PEM module doesn't crash when processing malformed key files - 512019

[3.12.4-2]
- Remove symbolic links to shared libraries from devel - 521155
- No rpath-link in nss-softokn-config

[3.12.4-1]
- Update to 3.12.4

[3.12.3.99.3-30]
- Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
- Fixed requires and buildrequires as per recommendations in spec file review

[3.12.3.99.3-29]
- Restoring patches 2 and 7 as we still compile all sources
- Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems

[3.12.3.99.3-28]
- restore require sqlite

[3.12.3.99.3-27]
- Don't require sqlite for nss

[3.12.3.99.3-26]
- Ensure versions in the requires match those used when creating nss.pc

[3.12.3.99.3-25]
- Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
- Add a temprary hack to nss.pc.in to unblock builds

[3.12.3.99.3-24]
- caolan's nss.pc patch

[3.12.3.99.3-23]
- Bump the release number for a chained build of nss-util, nss-softokn and nss

[3.12.3.99.3-22]
- Fix nss-config not to include nssutil
- Add BuildRequires on nss-softokn and nss-util since build also runs the test suite

[3.12.3.99.3-21]
- disabling all tests while we investigate a buffer overflow bug

[3.12.3.99.3-20]
- disabling some tests while we investigate a buffer overflow bug - 519766

[3.12.3.99.3-19]
- remove patches that are now in nss-softokn and
- remove spurious exec-permissions for nss.pc per rpmlint
- single requires line in nss.pc.in

[3.12.3.99.3-18]
- Fix BuildRequires: nss-softokn-devel release number

[3.12.3.99.3-17]
- fix nss.pc.in to have one single requires line

[3.12.3.99.3-16]
- cleanups for softokn

[3.12.3.99.3-15]
- remove the softokn subpackages

[3.12.3.99.3-14]
- don install the nss-util pkgconfig bits

[3.12.3.99.3-13]
- remove from -devel the 3 headers that ship in nss-util-devel

[3.12.3.99.3-12]
- kill off the nss-util nss-util-devel subpackages

[3.12.3.99.3-11]
- split off nss-softokn and nss-util as subpackages with their own rpms
- first phase of splitting nss-softokn and nss-util as their own packages

[3.12.3.99.3-10]
- must install libnssutil3.since nss-util is untagged at the moment
- preserve time stamps when installing various files

[3.12.3.99.3-9]
- dont install libnssutil3.so since its now in nss-util

[3.12.3.99.3-7.1]
- Fix spec file problems uncovered by Fedora_12_Mass_Rebuild

[3.12.3.99.3-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[3.12.3.99.3-6]
- removed two patch files which are no longer needed and fixed previous change log number

[3.12.3.99.3-5]
- updated pem module incorporates various patches
- fix off-by-one error when computing size to reduce memory leak. (483855)
- fix data type to work on x86_64 systems. (429175)
- fix various memory leaks and free internal objects on module unload. (501080)
- fix to not clone internal objects in collect_objects(). (501118)
- fix to not bypass initialization if module arguments are omitted. (501058)
- fix numerous gcc warnings. (500815)
- fix to support arbitrarily long password while loading a private key. (500180)
- fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)

[3.12.3.99.3-4]
- add patch for bug 502133 upstream bug 496997

[3.12.3.99.3-3]
- rebuild with higher release number for upgrade sanity

[3.12.3.99.3-2]
- updated to NSS_3_12_4_FIPS1_WITH_CKBI_1_75

[3.12.3-7]
- re-enable test suite
- add patch for upstream bug 488646 and add newer paypal
certs in order to make the test suite pass

[3.12.3-4]
- add conflicts info in order to fix bug 499436

[3.12.3-3]
- ship .chk files instead of running shlibsign at install time
- include .chk file in softokn-freebl subpackage
- add patch for upstream nss bug 488350

[3.12.3-2]
- Update to NSS 3.12.3

[3.12.2.99.3-7]
- temporarily disable the test suite because of bug 494266

[3.12.2.99.3-6]
- fix softokn-freebl dependency for multilib (bug 494122)

[3.12.2.99.3-5]
- introduce separate nss-softokn-freebl package

[3.12.2.99.3-4]
- disable execstack when building freebl

[3.12.2.99.3-3]
- add upstream patch to fix bug 483855

[3.12.2.99.3-2]
- build nspr-less freebl library

[3.12.2.99.3-1]
- Update to NSS_3_12_3_BETA4

[3.12.2.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

[3.12.2.0-3]
- update to NSS_3_12_2_RC1
- use system zlib

[3.12.1.1-4]
- add sparc64 to the list of 64 bit arches

[3.12.1.1-3]
- bug 456847, move pkgconfig requirement to devel package

[3.12.1.1-2]
- Update to NSS_3_12_1_RC2

[3.12.1.0-2]
- NSS 3.12.1 RC1

[3.12.0.3-7]
- fix bug bug 429175 in libpem module

[3.12.0.3-6]
- bug 456847, add Requires: pkgconfig

[3.12.0.3-3]
- nss package should own /etc/prelink.conf.d folder, rhbz#452062
- use upstream patch to fix test suite abort

[3.12.0.3-2]
- Update to NSS_3_12_RC4

[3.12.0.1-1]
- Update to NSS_3_12_RC2

[3.11.99.5-2]
- Zapping old Obsoletes/Provides. No longer needed, causes multilib headache.

[3.11.99.5-1]
- Update to NSS_3_12_BETA3

[3.11.99.4-1]
- NSS 3.12 Beta 2
- Use /usr/lib{64} as devel libdir, create symbolic links.

[3.11.99.3-6]
- Apply upstream patch for bug 417664, enable test suite on pcc.

[3.11.99.3-5]
- Support concurrent runs of the test suite on a single build host.

[3.11.99.3-4]
- disable test suite on ppc

[3.11.99.3-3]
- disable test suite on ppc64

[3.11.99.3-2]
- Build against gcc 4.3.0, use workaround for bug 432146
- Run the test suite after the build and abort on failures.

[3.11.99.3-1]
* NSS 3.12 Beta 1

[3.11.99.2b-3]
- move .so files to /lib

[3.11.99.2b-2]
- NSS 3.12 alpha 2b

[3.11.99.2-2]
- upstream patches to avoid calling netstat for random data

[3.11.99.2-1]
- NSS 3.12 alpha 2

[3.11.7-10]
- Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
our signed libraries and protect them from modification.

[3.11.7-9]
- Fix off-by-one error in the PEM module

[3.11.7-8]
- fix a C++ mode compilation error

[3.11.7-7]
- Add 3.12 ckfw and libnsspem

[3.11.7-6]
- Updated license tag

[3.11.7-5]
- Ensure the workaround for mozilla bug 51429 really get's built.

[3.11.7-4]
- Better approach to ship freebl/softokn based on 3.11.5
- Remove link time dependency on softokn

[3.11.7-3]
- Fix unowned directories, rhbz#233890

[3.11.7-2]
- Update to 3.11.7, but freebl/softokn remain at 3.11.5.
- Use a workaround to avoid mozilla bug 51429.

[3.11.5-2]
- Fix rhbz#230545, failure to enable FIPS mode
- Fix rhbz#220542, make NSS more tolerant of resets when in the
middle of prompting for a user password.

[3.11.5-1]
- Update to 3.11.5
- This update fixes two security vulnerabilities with SSL 2
- Do not use -rpath link option
- Added several unsupported tools to tools package

[3.11.4-4]
- disable ECC, cleanout dead code

[3.11.4-1]
- Update to 3.11.4

[3.11.3-2]
- Revert the attempt to require latest NSPR, as it is not yet available
in the build infrastructure.

[3.11.3-1]
- Update to 3.11.3

[3.11.2-2]
- Add /etc/pki/nssdb

[3.11.2-1.1]
- rebuild

[3.11.2-1]
- Update to 3.11.2
- Enable executable bit on shared libs, also fixes debug info.

[3.11.1-2]
- Enable Elliptic Curve Cryptography (ECC)

[3.11.1-1]
- Update to 3.11.1
- Include upstream patch to limit curves

[3.11-4]
- add --noexecstack when compiling assembler on x86_64

[3.11-3.2]
- bump again for double-long bug on ppc(64)

[3.11-3.1]
- rebuilt for new gcc4.1 snapshot and glibc changes

[3.11-3]
- rebuild

[3.11-2]
- Update file list for the devel packages

[3.11-1]
- Update to 3.11

[3.11-0.cvs.2]
- Add patch to allow building on ppc*
- Update the pkgconfig file to Require nspr

[3.11-0.cvs]
- Initial import into Fedora Core, based on a CVS snapshot of
the NSS_3_11_RTM tag
- Fix up the pkcs11-devel subpackage to contain the proper headers
- Build with RPM_OPT_FLAGS
- No need to have rpath of /usr/lib in the pc file
- Adressed review comments by Wan-Teh Chang, Bob Relyea,
Christopher Aillon.

[3.10-1]
- Initial build

nss-pem
[1.0.3-4]
- fix missing prototypes detected by Covscan

[1.0.3-3]
- remove implementation of the WaitForSlotEvent callback (#1445384)

[1.0.3-2]
- require at least the version of nss that nss-pem was built against (#1428965)

[1.0.3-1]
- update to latest upstream bugfix release (#1427917)

[1.0.2-2]
- explicitly conflict with all nss builds with bundled nss-pem

[1.0.2-1]
- imported into RHEL-7

nss-softokn
[3.28.3-6]
- restore nss-softokn-3.16-add_encrypt_derive.patch

[3.28.3-5]
- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)

[3.28.3-4]
- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.

[3.28.3-3]
- Fix RSA-PSS corner case when the modulus is not of size multiple of 8

[3.28.3-2]
- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue

nss-util
[3.28.4-3]
- Backport patch to allow empty line at the end of policy file

[3.28.4-2]
- Rebase to nss-3.28.4

[3.28.3-3]
- Backport necessary constant definitions

[3.28.3-2]
- Rebase to nss-3.28.3

[3.28.2-1.1]
- Prevent ABI incompatibility of SECKEYECPublicKey structure

[3.28.2-1.0]
- Rebase to nss-3.28.1
- Remove upstreamed build-nss-util-only.patch
- Package new header eccutil.h

[3.21.3-1]
- Rebase to nss-3.21.3
- Remove patch for CVE-2016-1950, which is included in the release
- Related: Bug 1347908

[3.21.0-4]
- Manual merge from the rhel-7.2 branch
- Fix one alias for naming compatibility with prior release
- Remove an unused patch

[3.21.0-3]
- Added upstream patch for CVE-2016-1950

[3.21.0-1]
- Rebase to nss-util from nss 3.21
- Resolves: Bug 1297940 - Rebase RHEL 7.3 to NSS-util 3.21 in preparation for Firefox 45

[3.19.1-5]
- Merge security fix from the RHEL-7.1 branch
- Resolves: Bug 1269358 - CVE-2015-7182 CVE-2015-7181

[3.19.1-4]
- Add links to filed upstream bugs to better track patches in spec file

[3.19.1-3]
- Remove unused patch

[3.19.1-2]
- Add support for TLS 1.2 SHA384 per PKCS #11 v2.40

[3.19.1-1]
- Resolves: Bug 1228913: Rebase to nss-3.19.1 for CVE-2015-4000 [RHEL-7.1]

[3.18.0-1]
- Resolves: Bug 1200931 - [RHEL7.1] nss-util 3.18 rebase required for firefox 38 ESR

[3.16.2.3-2]
- Bump the release number to be higher than the one for rhel-7.0
- Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3

[3.16.2.3-1]
- Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3

[3.16.2-3]
- Resolves: bug 1145434 - CVE-2014-1568

[3.16.2-2]
- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126244 - Ensure nss-util is built for 64 bit on ppc64le
- Fix contributed by Peter Robinson

[3.16.2-1]
- Update to nss-3.16.2
- Resolves: Bug 1103251

[3.15.4-2]
- Mass rebuild 2014-01-24

[3.15.3-4]
- Update to nss-3.15.4
- Modified the nss-split-util script to use the nss upstream pristine sources
- Resolves: Bug 1054457 - CVE-2013-1740 nss: false start PR_Recv information disclosure security issue [rhel-7.0]

[3.15.3-3]
- Add the nss-util portion of a fix for a bug in nss and nss-util
- Resolves: Bug 752980 - Support ECDSA via pluggable ECC in the nss package

[3.15.3-2]
- Mass rebuild 2013-12-27

[3.15.3-1]
- Update to NSS_3_15_3_RTM
- Resolves: Bug 1031463 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741

[3.15.1-2]
- Remove an obsolete script and adjust sources numbering accordingly.

[3.15.1-1]
- Update to NSS_3_15_1_RTM

[3.15-2]
- Produce source tar ball from the unstripped nss source tar ball

[3.15-1]
- Update to NSS_3_15_RTM

[3.15-0.1.beta1.2]
- Don't include prtypes.h from hasht.t
- Resolves: rhbz#953277 - rawhide build of glibc fails due to fatal error from nss3/hasht.h

[3.15.beta1-0.1.beta.1]
- Update to NSS_3_15_BETA1
- Update spec file, patches, and helper scripts on account of a shallower source tree

[3.14.3-1]
- Update to NSS_3_14_3_RTM
- Resolves: rhbz#909782 - specfile support for AArch64

[3.14.2-2]
- Retagging to prevent nvr update problems with f18

[3.14.2-1]
- Update to NSS_3_14_2_RTM

[3.14.1-2]
- Install templates.c in /usr/includes/nss3/templates
- Fix bogus date warnings

[3.14.1-1]
- Update to NSS_3_14_1_RTM

[3.14-2]
- Update the license to MPLv2.0

[3.14-1]
- Update to NSS_3_14_RTM

[3.14-0.1.rc1.1]
- Update to NSS_3_14_RC1
- The hasht.h from now on is provided by nss-util-devel

[3.13.5-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[3.13.5-3]
- Resolves: rhbz#833529 - revert unwanted change to nss-util.pc.in

[3.13.5-2]
- Resolves: rhbz#833529 - Remove space from Libs: line in nss-util.pc.in

[3.13.5-1]
- Update to NSS_3_13_5_RTM

[3.13.4-2]
- Resolves: Bug 805716 - Library needs partial RELRO support added
- Patch coreconf/Linux.mk as done on RHEL 6.2

[3.13.4-1]
- Update to NSS_3_13_4

[3.13.4-0.1.beta.1]
- Update to NSS_3_13_4_BETA1
- Improve steps to splitting off util from the nss
- Add executable attribute to the splitting script

[3.13.3-4]
- Resolves: Bug 805716 - Library needs partial RELRO support added

[3.13.3-3]
- Update the release tag to be higher than in f16

[3.13.3-2]
- Require nspr 4.9

[3.13.1-4]
- Update to NSS_3_13_3_RTM

[3.13.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[3.13.1-2]
- Fix a gnuc def typo

[3.13.1-1]
- Update to NSS_3_13_1_RTM

[3.13-1]
- Update to NSS_3_13_RTM

[3.13-0.1.rc0.1]
- Update to NSS_3_13_RC0

[3.12.11-2]
- Avoid %post/un shell invocations and dependencies.

[3.12.11-1]
- Update to NSS_3_12_11_RTM

[3.12.10-1]
- Update to NSS_3_12_10_RTM

[3.12.10-0.1.beta1]
- Update to NSS_3_12_10_BETA1

[3.12.9-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[3.12.9-1]
- Update to 3.12.9

[3.12.9-0.1beta2]
- Rebuilt according to fedora pre-release package naming guidelines

[3.12.8.99.2-1]
- Update to NSS_3_12_9_BETA2

[3.12.8.99.1-1]
- Update to NSS_3_12_9_BETA1

[3.12.8-2]
- Rebuilt for gcc bug 634757

[3.12.8-1]
- Update to 3.12.8

[3.12.7.99.4-1]
- NSS 3.12.8 RC0

[3.12.7.99.3-1]
- NSS 3.12.8 Beta 3

[3.12.7-2]
- Define NSS_USE_SYSTEM_SQLITE and remove nolocalsql patch

[3.12.7-1]
- Update to 3.12.7

[3.12.6-1]
- Update to 3.12.6

[3.12.5-2]
- Fix in nss-util-config.in

[3.12.5-1]
- Update to 3.12.5

[3.12.4-8]
- Retagging for a chained build with nss-softokn and nss

[3.12.4-5]
- Restoring -rpath-link to nss-util-config

[3.12.4-4]
- Installing shared libraries to %{_libdir}

[3.12.4-3]
- Remove symbolic links to shared libraries from devel - 521155
- Apply nss-nolocalsql patch subset for nss-util
- No rpath-link in nss-util-config

[3.12.4-2]
- Retagging for a chained build

[3.12.4-1]
- Update to 3.12.4
- Don't require sqlite

[3.12.3.99.3-15]
- Bump the release number for a chained build of nss-util, nss-softokn and nss

[3.12.3.99.3-14]
- Cleanup nss-util-config.in

[3.12.3.99.3-13]
- nss-util-devel doesn't require nss-devel

[3.12.3.99.3-12]
- bump to unique nvr

[3.12.3.99.3-11]
- Remove spurious executable permissions from nss-util-config
- Shorten some descriptions to keep rpmlint happy

[3.12.3.99.3-10]
- dont include the headers in nss-util only in the -devel package
- nss-util-devel Requires nss-devel since its only providing a subset of the headers.

[3.12.3.99.3-9]
- Provide nss-devel since we obsolete it

[3.12.3.99.3-8.1]
- nss-util-devel obsoletes nss-devel < 3.12.3.99.3-8

[3.12.3.99.3-8]
- Initial build

Updated Packages

Release/Architecture

Filename

MD5sum

Superseded By Advisory

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team