nss (2:3.114-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.113 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 23 Jul 2025 08:47:05 +0900

nss (2:3.112-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 11 Jun 2025 08:57:36 +0900

nss (2:3.111-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Mon, 26 May 2025 06:47:31 +0900

nss (2:3.110-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.110 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 02 Apr 2025 08:39:10 +0900

nss (2:3.109-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 05 Mar 2025 06:13:17 +0900

nss (2:3.108-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.107 (not a typo) and NSSUTIL_3.108
    symbol versions.

 -- Mike Hommey <glandium@debian.org>  Sun, 16 Feb 2025 05:02:59 +0900

nss (2:3.107-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 08 Jan 2025 07:35:40 +0900

nss (2:3.106-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Tue, 19 Nov 2024 07:29:02 +0900

nss (2:3.105-2) unstable; urgency=medium

  * debian/rules: Set OS_TEST properly on ppc64el.

 -- Mike Hommey <glandium@debian.org>  Wed, 02 Oct 2024 09:34:34 +0900

nss (2:3.105-1) unstable; urgency=medium

  * New upstream release.
  * debian/rules: Override OS_TEST and KERNEL even when not cross-compiling.
    Closes: #1083086

 -- Mike Hommey <glandium@debian.org>  Wed, 02 Oct 2024 07:06:03 +0900

nss (2:3.103-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 07 Aug 2024 07:53:53 +0900

nss (2:3.102-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 10 Jul 2024 08:54:51 +0900

nss (2:3.101-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.101 and NSSUTIL_3.101 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Wed, 12 Jun 2024 06:13:56 +0900

nss (2:3.100-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 15 May 2024 09:27:25 +0900

nss (2:3.99-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.99 symbol version for libsmime3.

 -- Mike Hommey <glandium@debian.org>  Wed, 20 Mar 2024 06:21:35 +0900

nss (2:3.98-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 21 Feb 2024 07:23:50 +0900

nss (2:3.96.1-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Tue, 19 Dec 2023 05:32:25 +0900

nss (2:3.95-1) unstable; urgency=medium

  * New upstream release. Closes: #1055112

 -- Mike Hommey <glandium@debian.org>  Tue, 28 Nov 2023 12:59:15 +0900

nss (2:3.94-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSSUTIL_3.94 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 25 Oct 2023 06:39:54 +0900

nss (2:3.93-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 27 Sep 2023 07:59:54 +0900

nss (2:3.92-1) unstable; urgency=medium

  * New upstream release. Closes: #1049979
  * nss/lib/dbm/include/mcom_db.h: Undo previous changes for hppa, the issue
    was fixed upstream.

 -- Mike Hommey <glandium@debian.org>  Fri, 18 Aug 2023 04:53:54 +0900

nss (2:3.91-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 05 Jul 2023 15:18:12 +0900

nss (2:3.90-3) unstable; urgency=medium

  * nss/lib/freebl/Makefile: Disable vale curve25519 code. It doesn't support
    CPUs older than Broadwell or Ryzen. bz#1839975. Closes: #1038889.

 -- Mike Hommey <glandium@debian.org>  Fri, 23 Jun 2023 08:01:22 +0900

nss (2:3.90-2) unstable; urgency=medium

  * nss/lib/freebl/Makefile: Apply upstream patch from bz#1836781 to fix FTBFS
    on non-x86_64 64-bits architectures.

 -- Mike Hommey <glandium@debian.org>  Thu, 22 Jun 2023 18:41:59 +0900

nss (2:3.90-1) unstable; urgency=medium

  * New upstream release. Closes: #1038859.
  * debian/libnss3.symbols: Add NSSUTIL_3.90 symbol version.
  * debian/libnss3.symbols, nss/lib/ssl/sslinfo.c, nss/lib/ssl/sslt.h,
    nss/gtests/nss_bogo_shim/nss_bogo_shim.cc: Bump dependency version
    for SSL_GetPreliminaryChannelInfo symbol and remove the previous
    workaround.

 -- Mike Hommey <glandium@debian.org>  Thu, 22 Jun 2023 14:30:11 +0900

nss (2:3.89-2) unstable; urgency=medium

  * nss/lib/ssl/sslinfo.c, nss/lib/ssl/sslt.h,
    nss/gtests/nss_bogo_shim/nss_bogo_shim.cc: Make
    SSL_GetPreliminaryChannelInfo ABI compatible with older versions by
    default. Nothing else than NSS itself currently uses the new field.

 -- Mike Hommey <glandium@debian.org>  Fri, 17 Mar 2023 08:46:46 +0900

nss (2:3.89-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.89 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 15 Mar 2023 07:59:49 +0900

nss (2:3.87.1-1) unstable; urgency=medium

  * New upstream release.
  * Fixes CVE-2023-0767: Arbitrary memory write via PKCS 12 in NSS.

 -- Mike Hommey <glandium@debian.org>  Wed, 15 Feb 2023 09:22:38 +0900

nss (2:3.87-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 18 Jan 2023 07:02:20 +0900

nss (2:3.85-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 16 Nov 2022 09:15:28 +0900

nss (2:3.83-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Sun, 18 Sep 2022 06:33:16 +0900

nss (2:3.82-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSSUTIL_3.82 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 24 Aug 2022 07:00:08 +0900

nss (2:3.81-2) unstable; urgency=medium

  * debian/rules: Disable -Werror on less mainline architectures.

 -- Mike Hommey <glandium@debian.org>  Sun, 14 Aug 2022 05:45:08 +0900

nss (2:3.81-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.80 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 27 Jul 2022 10:19:59 +0900

nss (2:3.79-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.79 symbol version.
  * debian/control: Bump nspr build dependency.

 -- Mike Hommey <glandium@debian.org>  Wed, 01 Jun 2022 06:30:56 +0900

nss (2:3.77-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.77 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 06 Apr 2022 09:18:22 +0900

nss (2:3.75-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 09 Feb 2022 08:46:51 +0900

nss (2:3.73.1-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Fri, 17 Dec 2021 06:16:55 +0900

nss (2:3.73-1) unstable; urgency=medium

  * New upstream release.
  * Fixes MFSA-2021-51, aka CVE-2021-43527: Memory corruption via DER-encoded
    DSA and RSA-PSS signatures.

 -- Mike Hommey <glandium@debian.org>  Thu, 02 Dec 2021 06:04:31 +0900

nss (2:3.72-2) unstable; urgency=medium

  * debian/control: libnss3-dev breaks libxmlsec1-dev (<< 1.2.33-1).
    Closes: #998733.

 -- Mike Hommey <glandium@debian.org>  Fri, 12 Nov 2021 06:21:05 +0900

nss (2:3.72-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols, nss/lib/ssl/sslinfo.c, nss/lib/ssl/sslt.h,
    nss/cmd/selfserv/selfserv.c, nss/cmd/strsclnt/strsclnt.c,
    nss/cmd/tstclnt/tstclnt.c: Bump dependency version for SSL_GetChannelInfo
    symbol and remove the previous workaround. Closes: #990058.
  * debian/libnss3.lintian-overrides.in, debian/rules,
    nss/cmd/shlibsign/shlibsign.c, nss/lib/pk11wrap/pk11load.c,
    nss/lib/util/secload.c, nss/cmd/shlibsign/Makefile,
    nss/cmd/shlibsign/manifest.mn: Stop putting freebl, softokn, etc. in a
    subdirectory. It's a deviation from upstream that is causing more problems
    than it's worth keeping. Closes: #737855, #846012, #979159.
  * debian/libnss3-dev.links.in: Remove xulrunner-nss.pc.
  * debian/rules: Stop forcing xz compression.
  * debian/copyright: Add dot for continuation.
  * debian/watch: Upgrade to version 4.
  * debian/control: Upgrade Standard-Version to 4.6.0:
    - debian/rules: Build with `make -s` when DEB_BUILD_OPTIONS contains
      terse.
    - debian/control: Add Rules-Requires-Root: no.
  * debian/control: Remove conflict with libnss3-1d. The last Debian version
    with libnss3-1d was jessie, and it had a newer version anyways.
  * debian/rules: Enable all hardening options.
  * debian/libnss3-symbols: Add Build-Depends-Package in symbols file.
  * debian/*.lintian-overrides*: Remove
    copyright-refers-to-versionless-license-file lintian overrides.
  * debian/libnss3.lintian-overrides.in:
    - s/shlib-without-versioned-soname/shared-library-lacks-version/.
    - Add lacks-unversioned-link-to-shared-library overrides.
  * debian/nss-config.in, debian/rules: Ship upstream nss-config instead of
    ours. Closes: #737855, #963136.
  * debian/rules, debian/control: Always set Multi-Arch: same.
  * debian/copyright:
    - Remove commas in `Files`.
    - Add missing license name for ifparser.
    - Add missing `Copyright`.
    - Remove copyright for mkdepend, which is not in the source tree anymore.
  * debian/upstream/metadata: Add upstream bug tracking metadata.

  [ Daniel Kahn Gillmor ]
  * debian/control: correct Homepage (old URL redirects to 404)

  [ Janitor ]
  * debian/changelog: Trim trailing whitespace.
  * debian/copyright: Use secure copyright file specification URI.
  * debian/compat, debian/control:
    - Bump debhelper from deprecated 9 to 13.
    - Set debhelper-compat version in Build-Depends.
  * debian/upstream/metadata: Set upstream metadata fields: Repository.
  * debian/rules: Drop transition for old debug package migration.

 -- Mike Hommey <glandium@debian.org>  Tue, 02 Nov 2021 06:57:06 +0900

nss (2:3.70-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 08 Sep 2021 08:31:23 +0900

nss (2:3.68-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Mon, 19 Jul 2021 06:23:39 +0900

nss (2:3.67-2) unstable; urgency=medium

  * nss/lib/ssl/sslinfo.c, nss/lib/ssl/sslt.h, nss/cmd/selfserv/selfserv.c,
    nss/cmd/strsclnt/strsclnt.c, nss/cmd/tstclnt/tstclnt.c: Make
    SSL_GetChannelInfo ABI compatible with older versions by default. Nothing
    else than NSS itself currently uses the new field. Closes: #990059.

 -- Mike Hommey <glandium@debian.org>  Mon, 05 Jul 2021 07:58:02 +0900

nss (2:3.67-1) unstable; urgency=medium

  * New upstream release. Fixes: #989410.

 -- Mike Hommey <glandium@debian.org>  Fri, 11 Jun 2021 09:58:51 +0900

nss (2:3.66-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.65/NSS_3.66 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Wed, 02 Jun 2021 05:53:44 +0900

nss (2:3.63-1) unstable; urgency=medium

  * New upstream release. Fixes: #984657.

 -- Mike Hommey <glandium@debian.org>  Wed, 24 Mar 2021 12:51:23 +0900

nss (2:3.61-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Mon, 08 Feb 2021 06:10:24 +0900

nss (2:3.60-1) unstable; urgency=medium

  * New upstream release. Fixes: #977723.

 -- Mike Hommey <glandium@debian.org>  Sun, 20 Dec 2020 06:36:28 +0900

nss (2:3.59-1) unstable; urgency=medium

  * New upstream release. Fixes: #972713.
  * debian/libnss3.symbols: Add NSS_3.59/NSSUTIL_3.59 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 18 Nov 2020 07:26:57 +0900

nss (2:3.58-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3_58 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 21 Oct 2020 08:04:53 +0900

nss (2:3.56-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Thu, 03 Sep 2020 10:55:04 +0900

nss (2:3.55-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3_55 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 29 Jul 2020 14:00:17 +0900

nss (2:3.53.1-1) unstable; urgency=medium

  * New upstream release.
  * Fixes CVE-2020-12402. Closes: #963152.

 -- Mike Hommey <glandium@debian.org>  Mon, 22 Jun 2020 06:09:24 +0900

nss (2:3.53-1) unstable; urgency=medium

  * New upstream release.
  * Fixes CVE-2020-12399. Closes: #961752.
  * debian/libnss3.symbols: Add NSS_3_53 symbol version.
  * nss/lib/freebl/Makefile, nss/lib/freebl/manifest.mn: Move seed.o back
    into freeblpriv3. bz#1642146.
  * nss/cmd/shlibsign/Makefile: Avoid infinite recursion when CHECKLOC is
    not set. bz#1642153.

 -- Mike Hommey <glandium@debian.org>  Sun, 31 May 2020 06:32:53 +0900

nss (2:3.52-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3_52 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 06 May 2020 06:06:43 +0900

nss (2:3.51-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 08 Apr 2020 11:14:44 +0900

nss (2:3.50-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 12 Feb 2020 09:06:51 +0900

nss (2:3.49.1-1) unstable; urgency=medium

  * New upstream release.
  * nss/lib/freebl/Makefile: Revert change from 2:3.48-1.
  * nss/coreconf/config.gypi, nss/lib/freebl/Makefile,
    nss/lib/freebl/aes-armv8.c, nss/lib/freebl/freebl.gyp,
    nss/lib/freebl/gcm-arm32-neon.c, nss/lib/freebl/gcm.c,
    nss/lib/freebl/rijndael.c: Fix freebl arm NEON code use, fixing FTBFS
    on armhf, and enabling runtime detection of NEON on armel. bz#1608327

 -- Mike Hommey <glandium@debian.org>  Wed, 22 Jan 2020 15:13:40 +0900

nss (2:3.49-1) unstable; urgency=medium

  * New upstream release.
  * Fixes CVE-2019-17023.

 -- Mike Hommey <glandium@debian.org>  Thu, 09 Jan 2020 13:46:11 +0900

nss (2:3.48-1) unstable; urgency=medium

  * New upstream release. Closes: #947131.
  * debian/control: Bump nspr build dependency to 4.24.
  * nss/lib/freebl/Makefile: Disable hardware AES on ARM softfloat to fix
    FTBFS on armel. Closes: #947246.

 -- Mike Hommey <glandium@debian.org>  Sun, 29 Dec 2019 07:40:46 +0900

nss (2:3.47.1-1) unstable; urgency=medium

  * New upstream release.
    - Fixes CVE-2019-11745.

 -- Mike Hommey <glandium@debian.org>  Wed, 04 Dec 2019 09:00:54 +0900

nss (2:3.47-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3_47 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 23 Oct 2019 11:19:59 +0900

nss (2:3.45-1) unstable; urgency=medium

  * New upstream release.
    - Fixes CVE-2019-11727 and CVE-2019-11719.
  * debian/libnss3.symbols: Add NSS_3_45 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 10 Jul 2019 07:34:18 +0900

nss (2:3.44+really3.42.1-2) unstable; urgency=medium

  * debian/rules: Fix version exposed in nss-config and nss.pc.

 -- Mike Hommey <glandium@debian.org>  Wed, 05 Jun 2019 06:36:00 +0900

nss (2:3.44.0-1) experimental; urgency=medium

  * debian/libnss3.symbols:
    - Update the version needed for
    SSL_Get{CipherSuite,Channel,PreliminaryChannel}Info.
    - Adjust versions so that 3.44+really3.42.1-1 is considered older where it
    matters.

 -- Mike Hommey <glandium@debian.org>  Sun, 02 Jun 2019 13:06:26 +0900

nss (2:3.44+really3.42.1-1) unstable; urgency=medium

  * Reverse to 3.42.1. Building against 3.44 induces some behavior
    differences when running against older versions, which could normally
    be solved with updates to the symbols file, but since 3.44 is not meant
    to ship in Buster, avoid disruption for nss reverse dependencies until
    Buster is released by going back to previous version.

 -- Mike Hommey <glandium@debian.org>  Sun, 02 Jun 2019 12:42:20 +0900

nss (2:3.44-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3_43 and NSS_3_44 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Sat, 01 Jun 2019 11:12:17 +0900

nss (2:3.42.1-1) unstable; urgency=medium

  * New upstream release.
    - Fixes CVE-2018-18508. Closes: #921614.

 -- Mike Hommey <glandium@debian.org>  Wed, 13 Feb 2019 13:19:39 +0900

nss (2:3.42-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 30 Jan 2019 16:47:58 +0900

nss (2:3.41-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 12 Dec 2018 14:13:39 +0900

nss (2:3.40-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Fri, 02 Nov 2018 14:44:19 +0900

nss (2:3.39-1) unstable; urgency=medium

  * New upstream release.
    - Fixes CVE-2018-12384. Closes: #908332.
  * debian/libnss3.symbols: Add NSS_3_39 and NSSUTIL_3_39 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Sun, 09 Sep 2018 08:03:39 +0900

nss (2:3.38-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSSUTIL_3_38 symbol version.

 -- Mike Hommey <glandium@debian.org>  Mon, 25 Jun 2018 07:26:21 +0900

nss (2:3.37.1-1) unstable; urgency=medium

  * New upstream release.
  * nss/lib/freebl/Makefile: Build FStar.c when not building with int128
    support. bz#1459739. Closes: #900227

 -- Mike Hommey <glandium@debian.org>  Mon, 28 May 2018 07:58:44 +0900

nss (2:3.37-1) unstable; urgency=medium

  * New upstream release. Fixes: #898496.
  * debian/control, debian/rules: Generate dbgsym package.AA
  * debian/copyright: Switch to machine-readable format.
  * debian/control: Bump Standards-Version to 4.1.4.

 -- Mike Hommey <glandium@debian.org>  Mon, 14 May 2018 07:15:21 +0900

nss (2:3.36.1-1) unstable; urgency=medium

  * New upstream release.
  * debian/control: Update Maintainer and Vcs fields, moving off alioth.

 -- Mike Hommey <glandium@debian.org>  Tue, 10 Apr 2018 14:55:14 +0900

nss (2:3.36-1) unstable; urgency=medium

  * New upstream release. Closes: #894981.

 -- Mike Hommey <glandium@debian.org>  Sun, 08 Apr 2018 06:53:15 +0900

nss (2:3.35-2) unstable; urgency=medium

  * nss/lib/freebl/Makefile: Build Hacl_Poly1305_64.o on arm64.

 -- Mike Hommey <glandium@debian.org>  Mon, 29 Jan 2018 13:51:18 +0900

nss (2:3.35-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Mon, 29 Jan 2018 10:59:06 +0900

nss (2:3.34.1-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Fri, 05 Jan 2018 20:15:40 +0900

nss (2:3.34-1) unstable; urgency=medium

  * New upstream release:
    - Really build without -maes on i386. Closes: #875694.
  * debian/libnss3.symbols: Add NSS_3_34 symbol version.

 -- Mike Hommey <glandium@debian.org>  Sat, 18 Nov 2017 14:58:01 +0900

nss (2:3.33-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3_33 and NSSUTIL_3.33 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Fri, 29 Sep 2017 06:49:26 +0900

nss (2:3.32-2) unstable; urgency=medium

  * nss/gtests/ssl_gtest/ssl_ecdh_unittest.cc: Fix possibly uninitialized
    value 'curve'. bz#1389263. Closes: #871691.
  * lib/freebl/Makefile: Only build gcm.c and rijndael.c with -maes.
    Closes: #871700.

 -- Mike Hommey <glandium@debian.org>  Mon, 28 Aug 2017 07:39:59 +0900

nss (2:3.32-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Thu, 10 Aug 2017 15:29:40 +0900

nss (2:3.31-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3_31 and NSSUTIL_3.31 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Sat, 17 Jun 2017 06:41:41 +0900

nss (2:3.30.2-1) experimental; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Fri, 19 May 2017 14:06:03 +0900

nss (2:3.30.1-1) experimental; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 19 Apr 2017 20:09:48 +0900

nss (2:3.30-1) experimental; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.30 and NSS_3.30.0.1 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Sat, 18 Mar 2017 15:34:23 +0900

nss (2:3.29.1-1) experimental; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Sat, 25 Feb 2017 09:27:44 +0900

nss (2:3.29-1) experimental; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSSUTIL_3.25 symbol version.

 -- Mike Hommey <glandium@debian.org>  Mon, 13 Feb 2017 07:42:36 +0900

nss (2:3.28.1-1) experimental; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.28 symbol version.

 -- Mike Hommey <glandium@debian.org>  Sun, 05 Feb 2017 15:01:47 +0900

nss (2:3.27.1-1) experimental; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.27 symbol version.

 -- Mike Hommey <glandium@debian.org>  Sat, 19 Nov 2016 08:29:17 +0900

nss (2:3.26.2-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Sun, 30 Oct 2016 07:20:34 +0900

nss (2:3.26-2) unstable; urgency=medium

  * debian/libnss3.symbols: SSL_GetCipherSuiteInfo and SSL_GetChannelInfo need
    newer versions despite the symbol versions.

 -- Mike Hommey <glandium@debian.org>  Wed, 21 Sep 2016 10:02:23 +0900

nss (2:3.26-1) unstable; urgency=medium

  * New upstream release.
  * debian/watch: Update such that uscan --download-version works.
  * debian/control, debian/libnss3-1d.*, debian/libnss3.symbols: Remove the
    libnss3-1d* transitional packages.
  * debian/rules:
    - Always set CCC to CXX. Thanks Helmut Grohne. Closes: #806292.
    - Override KERNEL when cross building for a different OS. Closes: #810579.
  * debian/control: Split Depends/Build-Depends/Conflicts. Thanks Guido Günther.
    Closes: #806634.

 -- Mike Hommey <glandium@debian.org>  Tue, 16 Aug 2016 16:33:15 +0900

nss (2:3.25-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols, debian/rules: Add the new libfreeblpriv3 library.
  * debian/libnss3.symbols: Add NSS_3.24 and NSSUTIL_3.24 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Wed, 03 Aug 2016 10:23:13 +0900

nss (2:3.23-2) unstable; urgency=medium

  * debian/control, debian/rules: Leave it to dh_makeshlibs to do the right
    thing wrt ldconfig. This requires debhelper 9.20160403. Closes: #811124.

 -- Mike Hommey <glandium@debian.org>  Sun, 03 Apr 2016 18:29:02 +0900

nss (2:3.23-1) unstable; urgency=medium

  * New upstream release.
  * Fixes mfsa2016-{35-36} also known as CVE-2016-1950 and CVE-2016-1979.
  * debian/control: Bump nspr build dependency to 2:4.12.
  * debian/libnss3.symbols: Add NSS_3.22 and NSS_3.23 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Wed, 09 Mar 2016 13:52:06 +0900

nss (2:3.21-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix FTBFS on x32. Closes: #699217
  * Fix FTBFS on hppa. Closes: #808990

 -- Adam Borowski <kilobyte@angband.pl>  Sun, 14 Feb 2016 14:46:40 +0100
nss (2:3.21-1) unstable; urgency=medium

  * New upstream release.
  * nss/lib/ssl/sslsock.c: Disable transitional scheme for SSL renegotiation.
    5 years after the transition started, it shouldn't be necessary anymore.
  * nss/lib/ckfw/builtins/certdata.txt: Remove the SPI CA.
  * nss/lib/util/secload.c: Fix a warning introduced by our patch to this file.
  * debian/libnss3.symbols: Add NSS_3.21 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Wed, 25 Nov 2015 09:18:30 +0900

nss (2:3.20.1-1) unstable; urgency=high

  * New upstream release.
  * Fixes mfsa2015-133. also known as CVE-2015-7181 and CVE-2015-7182.

 -- Mike Hommey <glandium@debian.org>  Wed, 04 Nov 2015 09:53:32 +0900

nss (2:3.20-1) unstable; urgency=medium

  * New upstream release.
  * Removed patch for __DATE__ and __TIME__ references from 2:3.19.1-1 because
    the parts that matter were applied upstream.
  * debian/rules: Move USE_64 to common make flags, and always use
    DEB_HOST_ARCH_BITS since it's even supported by dpkg in oldstable, now.
  * debian/libnss3.symbols: Add NSS_3.20 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Sat, 22 Aug 2015 09:02:11 +0900

nss (2:3.19.2-1) unstable; urgency=medium

  * New upstream release.
  * debian/rules: Force set OS_TEST to DEB_HOST_GNU_CPU to avoid it defaulting
    to `uname -m`. Thanks Helmut Grohne. Closes: #788452

 -- Mike Hommey <glandium@debian.org>  Sun, 21 Jun 2015 06:30:13 +0900

nss (2:3.19.1-2) unstable; urgency=medium

  * debian/control: Fix Vcs-Git url.
  * nss/cmd/shlibsign/manifest.mn: Fix missing LIBRARY_VERSION.
  * nss/cmd/shlibsign/shlibsign.c: Fix shlibsign on arm64.

 -- Mike Hommey <glandium@debian.org>  Mon, 01 Jun 2015 16:25:07 +0900

nss (2:3.19.1-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols:
    - Add NSS_3.19.1 symbol versions.
    - Reorder and replace *@ with (symver).
  * debian/rules:
    - Pass multi-arch dir for NSPR_LIB_DIR. Closes: #722811.
    - Set umask when calling shlibsign, and rearrange how it's being called.
    - Build nsinstall separately and set things up for cross-compilations.
    - Use native shlibsign when cross-compiling.
    - Do not run FIPS check on cross-builds.
  * debian/control: Build depend on native libnss3-tools for cross builds.
    Closes: #682926.
  * debian/libnss3-tools.manpages, debian/rules: Install the manpages that
    are now provided upstream. Closes: #505382.
  * debian/control: Update Vcs-* urls.
  * debian/control: Bump Standards-Version to 3.9.6.0. No changes required.
  * nss/lib/ckfw/builtins/binst.c, nss/lib/ckfw/builtins/ckbiver.c,
    nss/lib/ckfw/builtins/manifest.mn, nss/lib/ckfw/capi/ckcapiver.c,
    nss/lib/ckfw/capi/manifest.mn, nss/lib/ckfw/nssmkey/ckmkver.c,
    nss/lib/ckfw/nssmkey/manifest.mn, nss/lib/freebl/freeblver.c,
    nss/lib/freebl/ldvector.c, nss/lib/freebl/manifest.mn,
    nss/lib/nss/manifest.mn, nss/lib/nss/nssinit.c, nss/lib/nss/nssver.c,
    nss/lib/smime/manifest.mn, nss/lib/smime/smimeutil.c,
    nss/lib/smime/smimever.c, nss/lib/softoken/legacydb/lginit.c,
    nss/lib/softoken/manifest.mn, nss/lib/softoken/pkcs11.c,
    nss/lib/softoken/softkver.c, nss/lib/ssl/manifest.mn,
    nss/lib/ssl/sslcon.c, nss/lib/ssl/sslver.c, nss/lib/util/secoid.c: Remove
    __DATE__ and __TIME__ references.
  * nss/cmd/shlibsign/Makefile, nss/cmd/shlibsign/manifest.mn,
    nss/cmd/shlibsign/shlibsign.c: Fix shlibsign to properly load the sotfoken
    module.
  * debian/rules: Remove debian/libnss3/usr/lib/$(DEB_HOST_MULTIARCH)/nss from
    LD_LIBRARY_PATH when executing shlibsign, which can be done now with the
    fix above.

 -- Mike Hommey <glandium@debian.org>  Mon, 01 Jun 2015 09:47:58 +0900

nss (2:3.19-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.19 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Wed, 13 May 2015 10:47:10 +0900

nss (2:3.18-1) experimental; urgency=medium

  * New upstream release. Closes: #782874.
  * debian/libnss3.symbols: Add NSS_3.18 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Mon, 20 Apr 2015 08:50:46 +0900

nss (2:3.17.4-1) experimental; urgency=medium

  * New upstream release.
  * Acknowledge NMU.

 -- Mike Hommey <glandium@debian.org>  Wed, 25 Feb 2015 16:52:33 +0900

nss (2:3.17.2-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix CVE-2014-1569. Closes: #773625.

 -- Matt Kraai <kraai@debian.org>  Sun, 21 Dec 2014 19:46:52 -0800

nss (2:3.17.2-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Sat, 18 Oct 2014 13:22:04 +0900

nss (2:3.17.1-1) unstable; urgency=high

  * New upstream release.
    - Fixes CVE-2014-1568.
    - Add support for ppc64el, with a non-broken patch. Closes: #745757.
  * debian/libnss3.symbols: Add NSSUTIL_3.17.1 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Wed, 24 Sep 2014 22:16:32 +0900

nss (2:3.17-1) unstable; urgency=medium

  * New upstream release.
  * nss/coreconf/Linux.mk: Actually add support for ppc64el. Closes: #745757.

 -- Mike Hommey <glandium@debian.org>  Sun, 24 Aug 2014 08:41:37 +0900

nss (2:3.16.3-1.1) unstable; urgency=low

  * Non-maintainer upload to delayed.
  * Add support for ppc64el. Closes: #745757

 -- Andreas Barth <aba@ayous.org>  Mon, 18 Aug 2014 20:01:00 +0000

nss (2:3.16.3-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.16.2 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Sun, 13 Jul 2014 09:24:12 +0900

nss (2:3.16.1-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.16.1 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Sat, 07 Jun 2014 17:24:57 +0900

nss (2:3.16-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.16 symbol versions.
  * nss/lib/ckfw/builtins/certdata.txt: Remove CACert root certificates.

 -- Mike Hommey <glandium@debian.org>  Fri, 21 Mar 2014 08:10:24 +0900

nss (2:3.15.4-2) unstable; urgency=high

  * Upstream release 3.15.4 fixed MFSA-2014-12, also known as CVE-2014-1490
    and CVE-2014-1491. Bumping urgency as such.
  * debian/control, debian/libnss3-nssdb.*, debian/pkcs11.txt, debian/rules:
    Revert changes from 2:3.15.4-1. Reopens: #537866, Closes: #735329, #736061.

 -- Mike Hommey <glandium@debian.org>  Wed, 05 Feb 2014 16:26:06 +0900

nss (2:3.15.4-1) unstable; urgency=low

  * New upstream release.
  * Acknowledge NMU.
  * debian/rules: Avoid long one-liner with semi-colons.
  * debian/patches/*:  Refresh patches.
  * debian/copyright: Update. Closes: #730428.
  * debian/control, debian/libnss3-nssdb.*, debian/pkcs11.txt, debian/rules:
    Add shared cert and key databases. Thanks Timo Aaltonen. Closes: #537866.
  * debian/rules: Use DEB_HOST_ARCH instead of DEB_BUILD_ARCH.
  * debian/control: Mark libnss3-dev as Multi-Arch: same. Thanks Shawn
    Landden. Closes: #682925.
  * debian/libnss3.symbols: Add NSS_3.15.4 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Mon, 13 Jan 2014 10:46:04 +0900

nss (2:3.15.3.1-1.1) unstable; urgency=low

  * Non-Maintainer Upload
   - ship extra NSS utilities (Closes: #701141)

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Sat, 04 Jan 2014 11:34:41 -0500

nss (2:3.15.3.1-1) unstable; urgency=high

  * New upstream release.
    - Distrusts AC DG Tresor SSL CA.

 -- Mike Hommey <glandium@debian.org>  Sun, 15 Dec 2013 10:09:48 +0900

nss (2:3.15.3-1) unstable; urgency=high

  * New upstream release.
    - Fixes CVE-2013-1741, CVE-2013-5605, CVE-2013-5606.

 -- Mike Hommey <glandium@debian.org>  Sat, 16 Nov 2013 08:50:45 +0900

nss (2:3.15.2-1) unstable; urgency=low

  * New upstream release.
    - Fixes CVE-2013-1739. Closes: #726473.

 -- Mike Hommey <glandium@debian.org>  Mon, 21 Oct 2013 08:05:24 +0900

nss (2:3.15.1-1) unstable; urgency=low

  * New upstream release.
  * debian/patches/*:  Refresh patches.
  * debian/patches/lower-dhe-priority.patch: Removed, as it was only necessary
    for Iceweasel 3.5, which is long gone.

 -- Mike Hommey <glandium@debian.org>  Mon, 05 Aug 2013 14:41:14 +0900

nss (2:3.15-1) unstable; urgency=low

  * New upstream release.
  * debian/patches/*: Refresh patches and removed unused ones.
  * debian/rules: Adjusted to the new source layout.
  * debian/libnss3.symbols: Add NSS*_3.15 symbol versions.
  * debian/control: Bump nspr build dependency.

 -- Mike Hommey <glandium@debian.org>  Sat, 15 Jun 2013 19:23:12 +0900

nss (2:3.14.3-1) unstable; urgency=high

  * New upstream release.
    - Fixes TLS timing attack (luck 13). Closes: #699888.
  * debian/libnss3.symbols: Add NSS_3.14.3 symbol version.
  * debian/control: Unbump sqlite3 build dependency, 3.14.3 lifted the need
    for sqlite 3.7.15.

 -- Mike Hommey <glandium@debian.org>  Sun, 17 Mar 2013 15:01:06 +0100

nss (2:3.14.2-1) unstable; urgency=low

  * New upstream release.
  * debian/control: Bump sqlite3 build dependency.
  * debian/rules: Avoid installing freebl, softokn, nssckbi and nssdbm in two
    places.
  * debian/libnss3-1d.lintian-overrides.in: Stop preprocessing, it has nothing
    to preprocess anymore.
  * debian/libnss3.lintian-overrides.in: Fix not to contain a reference to the
    libnss3-1d package.

 -- Mike Hommey <glandium@debian.org>  Fri, 15 Feb 2013 10:06:59 +0100

nss (2:3.14.1.with.ckbi.1.93-1) unstable; urgency=low

  * New upstream release.
    - Explicitly distrust two intermediate CA certificates mis-issued by
      TURKTRUST.
  * debian/patches/95_add_spi+cacert_ca_certs.patch: Refreshed.

 -- Mike Hommey <glandium@debian.org>  Fri, 04 Jan 2013 11:16:33 +0100

nss (2:3.14.1-1) unstable; urgency=low

  * New upstream release.
  * debian/patches: Removed patches applied upstream, and refreshed
    the others.
  * debian/libnss3.symbols: Updated for new symbols.

 -- Mike Hommey <glandium@debian.org>  Sun, 23 Dec 2012 17:40:21 +0100

nss (2:3.14-2) unstable; urgency=low

  * debian/nss-config.in: Fix nss-config when version is in the x.y form
    instead of x.y.z.

 -- Mike Hommey <glandium@debian.org>  Fri, 07 Dec 2012 17:07:05 +0100

nss (2:3.14-1) unstable; urgency=low

  * New upstream release.
  * debian/patches: Removed patches applied upstream, and refreshed
    the others.
  * debian/libnss3.symbols: Updated for new symbols.

 -- Mike Hommey <glandium@debian.org>  Thu, 01 Nov 2012 10:37:39 +0100

nss (2:3.13.6-1) unstable; urgency=low

  * New upstream release.
  * debian/rules: Use xz compression for binary packages.
    Thanks Ansgar Burchardt. Closes: #683835.

 -- Mike Hommey <glandium@debian.org>  Fri, 31 Aug 2012 09:56:53 +0200

nss (2:3.13.5-1) unstable; urgency=low

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Fri, 15 Jun 2012 09:40:00 +0200

nss (2:3.13.4-3) unstable; urgency=low

  * debian/rules: Skip epoch when getting upstream version number.

 -- Mike Hommey <glandium@debian.org>  Sun, 20 May 2012 07:36:11 +0200

nss (2:3.13.4-2) unstable; urgency=low

  * debian/control, debian/libnss3*, debian/rules,
    mozilla/security/coreconf/*, mozilla/security/nss/lib/*/manifest.mn:
    Move to unversioned library. ABI compatibility is ensured upstream, and
    the SO version, if it needed a change at any time, would be a change in
    the library name. There is no reason to keep making compatibility more
    difficult with other distros and upstream binary releases. While previous
    versions were one-way compatible (binaries built against other distros or
    upstream nspr could work on Debian), this approach works both ways.
  * debian/control:
    - Bump Standards-Version to 3.9.3.0. No changes required.
    - Force to build against libnspr4-dev >= 2:4.9
  * Removed unapplied patches.
  * Adding an epoch to match the old libnss3 package that used to be in
    the Debian archive.

 -- Mike Hommey <glandium@debian.org>  Thu, 17 May 2012 09:45:36 +0200

nss (3.13.4-1) unstable; urgency=low

  * New upstream release.
    - Changed __GNUC_MINOR__ use in pkcs11n.h. Closes: #650319.
  * mozilla/security/nss/cmd/certcgi/certcgi.c,
    mozilla/security/nss/cmd/digest/digest.c,
    mozilla/security/nss/cmd/signver/pk7print.c: Import patch from Moritz
    Muehlenhoff for hardened format strings.
  * debian/make.mk, debian/rules, debian/control: Enable hardening.
    Closes: #657325.
  * debian/libnss3-1d.lintian-overrides.in, debian/rules: Use wildcards in
    lintian override. Closes: #670013.
  * debian/compat, debian/control: Bump debian/compat to 9. This has the
    effect of using build-id for debug files, thus Closes: #670015.
  * debian/libnss3-1d.symbols: Add symbols for /usr/lib/nss/ libraries.

 -- Mike Hommey <glandium@debian.org>  Sun, 29 Apr 2012 09:48:58 +0200

nss (3.13.3-1) unstable; urgency=low

  * New upstream release.
  * debian/libnss3-1d.symbols: Updated to fit new upstream.

 -- Mike Hommey <glandium@debian.org>  Fri, 24 Feb 2012 09:56:10 +0100

nss (3.13.2~beta1-3) experimental; urgency=low

  * debian/libnss3-1d.symbols: Fix symbol version for the symbol added in
    -2.

 -- Mike Hommey <glandium@debian.org>  Fri, 23 Dec 2011 19:20:23 +0100

nss (3.13.2~beta1-2) experimental; urgency=low

  * mozilla/security/nss/lib/ssl/*,
    mozilla/security/nss/cmd/tstclnt/tstclnt.c,
    mozilla/security/nss/tests/ssl/ssl.sh: Apply patches from bz#542832,
    required for Iceweasel 11.
  * debian/libnss3-1d.symbols: Add corresponding symbol.

 -- Mike Hommey <glandium@debian.org>  Fri, 23 Dec 2011 17:54:03 +0100

nss (3.13.2~beta1-1) experimental; urgency=low

  * New upstream snapshot, picked from NSS_3_13_2_BETA1 cvs tag.
  * debian/libnss3-1d.symbols: Add NSS 3.13.2 symbols.

 -- Mike Hommey <glandium@debian.org>  Fri, 23 Dec 2011 16:22:05 +0100

nss (3.13.1.with.ckbi.1.88-1) unstable; urgency=low

  * New upstream release.
    - Distrusts malaysian Digicert Sdn. Bhd CA certificate.
    - Addresses CVE-2011-3640 (Untrusted search path vulnerability).
      Closes: #647614.
  * debian/patches/*: Refreshed patches.
  * debian/libnss3-1d.symbols: Add NSS 3.13 symbols.

 -- Mike Hommey <glandium@debian.org>  Sat, 05 Nov 2011 17:05:26 +0100

nss (3.12.11-3) unstable; urgency=high

  * mozilla/security/nss/lib/ckfw/builtins/certdata.*:
    Explicitely distrust various DigiNotar CAs:
    - DigiNotar Root CA
    - DigiNotar Services 1024 CA
    - DigiNotar Cyber CA
    - DigiNotar Cyber CA 2nd
    - DigiNotar PKIoverheid
    - DigiNotar PKIoverheid G2

 -- Mike Hommey <glandium@debian.org>  Sat, 03 Sep 2011 09:33:28 +0200

nss (3.12.11-2) unstable; urgency=high

  * mozilla/security/nss/lib/ckfw/builtins/certdata.*:
    Remove DigiNotar Root CA.

 -- Mike Hommey <glandium@debian.org>  Wed, 31 Aug 2011 08:49:00 +0200

nss (3.12.11-1) unstable; urgency=low

  * New upstream release.
  * mozilla/security/nss/lib/ckfw/builtins/certdata.*,
  * mozilla/security/coreconf/{config,Linux}.mk: Refreshed.
  * debian/copyright: Update dbm license according to that in the source.
    Closes: #624310

 -- Mike Hommey <glandium@debian.org>  Fri, 12 Aug 2011 12:45:08 +0200

nss (3.12.10-3) unstable; urgency=low

  * debian/nss-config.in, debian/nss.pc.in, debian/rules: Return the multiarch
    path in nss-config and nss.pc.

 -- Mike Hommey <glandium@debian.org>  Thu, 21 Jul 2011 18:08:48 +0200

nss (3.12.10-2) unstable; urgency=low

  * debian/control, debian/libnss3-1d.dirs,
    debian/libnss3-1d.lintian-overrides.in, debian/libnss3-dev.dirs,
    debian/libnss3-1d.links.in, debian/libnss3-dev.links.in,
    debian/rules: Switch to multi-arch while keeping backports easy.
    Closes: #497088.

 -- Mike Hommey <glandium@debian.org>  Mon, 04 Jul 2011 11:24:18 +0200

nss (3.12.10-1) unstable; urgency=low

  * New upstream release.
  * mozilla/security/nss/lib/ckfw/builtins/certdata.*: Refreshed.
  * debian/control: Build depend on libnspr4-dev >= 4.8.8.
  * debian/libnss3-1d.symbols: Add new symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 25 May 2011 10:20:59 +0200

nss (3.12.9.with.ckbi.1.82-1) unstable; urgency=low

  * New upstream release.
    - Marks fraudulent Comodo certificates as untrusted.
  * mozilla/security/nss/lib/ckfw/builtins/certdata.*: Refreshed.

 -- Mike Hommey <glandium@debian.org>  Thu, 24 Mar 2011 16:37:46 +0100

nss (3.12.9-2) unstable; urgency=low

  * Upload to unstable.
  * debian/rules: Fallback to DEB_BUILD_ARCH when dpkg-architecture does't
    support DEB_BUILD_ARCH_BITS.
  * debian/control: Lower build depends on dpkg-dev to (>= 1.13.19), which
    was the previous value.
  * mozilla/security/nss/lib/freebl/unix_rand.c: We don't need to prevent
    using netstat for entropy seeding. The seeding will stop before netstat
    if it could get data from /dev/urandom.
  * mozilla/security/coreconf/Linux.mk: We shouldn't need to special case
    mips64 anymore.
  * mozilla/security/nss/cmd/shlibsign/Makefile, debian/rules: Don't rely
    on patching the source to not create .chk files during build.

 -- Mike Hommey <glandium@debian.org>  Sun, 06 Mar 2011 09:58:41 +0100

nss (3.12.9-1) experimental; urgency=low

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Sat, 15 Jan 2011 11:33:35 +0100

nss (3.12.9~beta2-1) experimental; urgency=low

  * New upstream snapshot, picked from NSS_3_12_9_BETA2 cvs tag.
  * debian/patches/*: Refresh patches.
  * debian/libnss3-1d.symbols: Add new symbol versions.
  * debian/rules: Bump shlibs.

 -- Mike Hommey <glandium@debian.org>  Fri, 17 Dec 2010 15:01:31 +0100

nss (3.12.8-1) unstable; urgency=low

  * New upstream release.
  * debian/patches/*: Refresh patches.
  * debian/patches/series:
    + lower-dhe-priority.patch: Upstream patch from bz#583337 to lower DHE
      priority. Closes: #592315.

 -- Mike Hommey <glandium@debian.org>  Thu, 07 Oct 2010 08:50:48 +0200

nss (3.12.8~b2-1) experimental; urgency=low

  * New upstream snapshot, picked from NSS_3_12_8_BETA2 cvs tag.
  * debian/patches/*: Refresh patches.

 -- Mike Hommey <glandium@debian.org>  Mon, 23 Aug 2010 18:11:12 +0200

nss (3.12.7-1) unstable; urgency=low

  * New upstream release.
  * debian/patches/*: Refresh patches.
  * debian/control:
    - Bump Standards-Version to 3.9.1.0.
    - Build depend on libnspr4-dev >= 4.8.6.
  * debian/libnss3-1d.symbols: Simplify symbols file and add new symbols.
  * debian/rules: Bump shlibs.

 -- Mike Hommey <glandium@debian.org>  Fri, 06 Aug 2010 13:55:14 +0200

nss (3.12.6-3) unstable; urgency=low

  * debian/rules:
    + Sign libnssdbm3.so. Closes: #588806.
    + Test that the FIPS mode can be properly enabled during build.
  * debian/control:
    + Remove conflicts with very old packages.
    + Bump Standards-Version to 3.9.0.0.

 -- Mike Hommey <glandium@debian.org>  Mon, 12 Jul 2010 15:12:24 +0200

nss (3.12.6-2) unstable; urgency=low

  * debian/patches/series:
    + 00_ckbi_1.79.patch: New patch to update CKBI to 1.79.
    + 95_add_spi+cacert_ca_certs.patch: Refreshed against CKBI 1.79.

 -- Mike Hommey <glandium@debian.org>  Fri, 09 Apr 2010 10:45:01 +0200

nss (3.12.6-1) unstable; urgency=low

  * New upstream release.
  * debian/patches/*: Refresh patches.
  * debian/libnss3-1d.symbols, debian/rules: Update symbols file with new
    symbols and bump shlibs.
  * debian/patches/97_SSL_RENEGOTIATE_TRANSITIONAL.patch,
    debian/patches/series: Enable transitional scheme for ssl renegotiation.
    Closes: #561918.
  * debian/control:
    + Bump Standards-Version to 3.8.4.0.
    + Drop libnss3-1d dependency on dpkg. The versions it didn't really like
      were between oldstable and stable.
    + Don't allow different versions of libnss3-1d, libnss3-1d-dbg and
      libnss3-tools to be installed at the same time.
    + Add ${misc:Depends} to libnss3-1d-dbg dependencies.
  * debian/rules: Revert workaround for gcc 4.4 bug on powerpc with -Os.
  * debian/rules, debian/control, debian/compat: Simplify debian/rules by
    using dh.

 -- Mike Hommey <glandium@debian.org>  Wed, 17 Mar 2010 20:33:32 +0100

nss (3.12.5-2) unstable; urgency=low

  * debian/control:
    + Remove build dependency on autotools-dev, we don't use it.
    + libnss3-dev depends on libnspr4-dev >= 4.6.6-1. 4.6.6-1 was the first
      version where the pkg-config file was nspr.pc instead of
      xulrunner-nspr.pc. Closes: #567134.
  * debian/patches/96_NSS_VersionCheck.patch, debian/patches/series:
    Remove runtime check of NSPR version in NSS_VersionCheck, which seems to
    be pointless. Closes: #567136.

 -- Mike Hommey <glandium@debian.org>  Thu, 28 Jan 2010 12:12:35 +0100

nss (3.12.5-1) unstable; urgency=low

  * New upstream release.
  * debian/copyright: Modify with new location for the embedded copy of zlib.
  * debian/patches/*:
    + Adapt patches to new upstream.
    + Switch to quilt format
  * debian/source/format: Switch to 3.0 (quilt) format.
  * debian/rules, debian/control: Stop using dpatch.
  * debian/patches/38_intel_aes_executable_stack.patch: Removed. An upstream
    change in version 3.12.4 obsoleted it.
  * debian/rules:
    + Remove DEB_{BUILD,HOST}_* variables, they are not used.
    + Use DEB_BUILD_ARCH_BITS to determine whether to build with USE_64 or not.
    + Ship more tools in libnss3-tools. Closes: #526267.
    + Work around gcc 4.4 bug on powerpc with -Os.
    + Force non parallel build. There are too many race conditions in the
      build system to support parallel builds. Closes: #536248.
    + Bump shlibs.
  * debian/control:
    + Bump Standards-Version to 3.8.3.0.
    + Build-depend on dpkg-dev (>= 1.15.4) for DEB_BUILD_ARCH_BITS.
    + Stricter dependency between libnss3-dev and libnss3-1d.
  * debian/libnss3-1d.symbols:
    + Add new symbols.
    + Remove debian revision for symbols added in 3.12.4.
  * debian/patches/38_hurd.patch: Fix FTBFS on Hurd due to PATH_MAX usage in
    unix_rand.c. Closes: #550995.

 -- Mike Hommey <glandium@debian.org>  Fri, 18 Dec 2009 11:48:14 +0100

nss (3.12.4-1) unstable; urgency=low

  * New upstream release.
  * debian/patches/38_kbsd.dpatch:
    + Use CHECK_FORK_PTHREAD on kfreebsd and hurd. Closes: #547301.
    + Adapt to upstream changes.
  * debian/patches/95_add_spi+cacert_ca_certs.dpatch,
  * debian/patches/81_sonames.dpatch: Adapt to upstream changes.
  * debian/libnss3-1d.symbols: Update symbols file with new symbols.
  * debian/rules: Bumped shlibs.

 -- Mike Hommey <glandium@debian.org>  Sun, 11 Oct 2009 01:26:14 +0200

nss (3.12.3.1-1) unstable; urgency=low

  * New upstream release.
  * debian/patches/95_add_spi+cacert_ca_certs.dpatch, Adapted to upstream
    changes.

 -- Mike Hommey <glandium@debian.org>  Fri, 21 Aug 2009 23:47:24 +0200

nss (3.12.3-1) unstable; urgency=low

  * New upstream release.
  * debian/watch: Updated to catch new upstream .bz2 tarballs.
  * debian/copyright: Add information about
    mozilla/security/corecond/mkdepend.
  * debian/patches/38_hurd.dpatch, debian/patches/38_kbsd.dpatch: Adapted
    to upstream changes.
  * debian/patches/85_security_load.dpatch: Load libsoftokn3.so from
    /usr/lib/nss when unable to load it from standard ld.so paths in
    shlibsign.
  * debian/rules:
    + Add debian/libnss3-1d/usr/lib/nss to LD_LIBRARY_PATH when running
      shlibsign during build.
    + Bumped shlibs.
  * debian/libnss3-1d.symbols: Update symbols file with new symbols.
  * debian/control:
    + Bumped Standards-Version to 3.8.1.0. No changes needed.
    + Put the libnss3-1d-dbg package in the "debug" section.
    + Correct libnss3-1d-dbg short description.
    + Remove redundant section on libnss3-1d.
    + Build-depend on proper version of debhelper for dh_lintian.
  * debian/*.lintian-overrides, debian/rules: Install some Lintian
    overrides with dh_lintian.
  * debian/patches/38_intel_aes_executable_stack.dpatch: Indicate that
    we don't need executable stack in intel-aes.s.
  * debian/patches/00list: Updated accordingly.

 -- Mike Hommey <glandium@debian.org>  Sat, 18 Apr 2009 09:37:31 +0200

nss (3.12.2.with.ckbi.1.73-2) unstable; urgency=low

  * mozilla/security/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.h:
    Apply patch from upstream to fix alignment issues on sparc and ia64.
    Closes: #509930.

 -- Mike Hommey <glandium@debian.org>  Mon, 06 Apr 2009 20:24:01 +0200

nss (3.12.2.with.ckbi.1.73-1) unstable; urgency=low

  * debian/patches/38_kbsd.dpatch: Brown paper bag fix for regression
    in previous release that led to FTBFS on i386 only. Closes: #513101.
    Thanks Steffen Joeris, Sebastian Andrzej Siewior and Petr Salinger.
  * debian/patches/95_add_spi+cacert_ca_certs.dpatch,
    debian/patches/80_security_tools.dpatch: Adapted to upstream changes.
  * debian/libnss3-1d.symbols: Update symbols file with new symbols.
  * debian/rules: Bumped shlibs.

 -- Mike Hommey <glandium@debian.org>  Sat, 31 Jan 2009 16:41:26 +0100

nss (3.12.1-1) unstable; urgency=low

  * New upstream release.
  * debian/patches/95_add_spi+cacert_ca_certs.dpatch,
    debian/patches/38_mips64_build.dpatch,
    debian/patches/38_kbsd.dpatch: Adapted to upstream changes.
  * debian/libnss3-1d.symbols: Update symbols file with new symbols.
  * debian/rules: Bumped shlibs.

 -- Mike Hommey <glandium@debian.org>  Sat, 20 Dec 2008 12:11:28 +0100

nss (3.12.0-5) unstable; urgency=low

  * debian/control:
    + Conflict with libnss3-0d >= 3.11.5, that has conflicting files in
      /usr/lib/nss. Older versions (those from etch) don't conflict.
      This makes updates from old testing smoother. Closes: #492332.
    + Build-depend on libsqlite3-dev >= 3.3.9, since API introduced in this
      version is used. Closes: #493191.

 -- Mike Hommey <glandium@debian.org>  Sun, 03 Aug 2008 09:42:03 +0200

nss (3.12.0-4) unstable; urgency=low

  * debian/control: Remove conflict with libnss3-0d, it was only useful when
    libnss3-0d was a transitional package. Closes: #490995.

 -- Mike Hommey <glandium@debian.org>  Wed, 16 Jul 2008 21:29:19 +0200

nss (3.12.0-3) unstable; urgency=low

  * debian/rules:
    + Enable ECC cypher suite. Closes: #490826.
    + Build with the same optimization level as upstream.

 -- Mike Hommey <glandium@debian.org>  Mon, 14 Jul 2008 17:35:25 +0200

nss (3.12.0-2) unstable; urgency=low

  * debian/patches/95_add_spi+cacert_ca_certs.dpatch:
    + Add CAcert root and class 3 certificates to nssckbi module.
    + Add SPI Inc. certificate to nssckbi module.
    Thanks to Martin F Krafft for these. Closes: #309564.
  * debian/patches/00list: Updated accordingly.

 -- Mike Hommey <glandium@debian.org>  Sat, 12 Jul 2008 18:26:09 +0200

nss (3.12.0-1) unstable; urgency=low

  * New upstream release.
  * debian/patches/92_ocsp.dpatch: Removed, as applied upstream.
  * debian/patches/00list: Updated accordingly.
  * debian/control:
    + Bumped Standards-Version to 3.8.0.1. No changes needed.
    + Added Vcs-Browser and Vcs-Git fields.
    + libnss3-dev don't need explicit version dependency on libnss3-1d.
    + libnss3-dev depends on libnspr4-dev. Closes: #488402.
    + Make the -dbg package less a hassle for manual installations with dpkg.
    + libnss3-1d depends on version of dpkg that either don't support symbols
      files or has fix for #474079.
  * debian/patches/85_security_load.dpatch: Load files from /usr/lib/nss if
    given reference path is only a filename, which happens when freebl is
    statically linked in a binary executable, such as signtool, and the
    executable is run from $PATH. When the executable is run using a full
    path, we must replace /bin/ in the path with /lib/ to find the libraries.
    Closes: #483774.
  * debian/libnss3-1d.symbols: Re-enable symbols file.

 -- Mike Hommey <glandium@debian.org>  Sat, 05 Jul 2008 10:19:53 +0200

nss (3.12.0~rc3-3) unstable; urgency=low

  * debian/control: Make libnss3-0d conflict with old libnss3, which can
    still be installed on some systems, though it hasn't been in the archive
    since sarge. Closes: #485080.

 -- Mike Hommey <glandium@debian.org>  Sun, 08 Jun 2008 14:11:13 +0200

nss (3.12.0~rc3-2) unstable; urgency=low

  * debian/patches/92_ocsp.dpatch: Apply patches from bz433594 and bz#433386,
    which are applied in upstream RC4 (and are the only changes), to fix
    crashes under some conditions with OCSP checks.
  * debian/patches/00list: Updated accordingly.
  * debian/libnss3-dev.links, debian/libnss3-1d.links: Don't install so
    files in the -dev package but in the library package. It will allow
    external applications linked against upstream nss to work on Debian with
    system nss libraries, and will avoid all browsers to have to implement
    symlinks themselves to allow some external plugins to work properly.
  * debian/control: Make libnss3-1d conflict with older versions of
    libnss3-dev and libnss3-dev need newer libnss3-1d accordingly.

 -- Mike Hommey <glandium@debian.org>  Sat, 07 Jun 2008 11:57:55 +0200

nss (3.12.0~rc3-1) unstable; urgency=low

  * New upstream snapshot, picked from NSS_3_12_RC3 cvs tag.

 -- Mike Hommey <glandium@debian.org>  Sun, 11 May 2008 16:58:17 +0200

nss (3.12.0~beta3-1) unstable; urgency=low

  * New upstream snapshot, picked from NSS_3_12_BETA3 cvs tag.
  * debian/control: Turn Homepage indications in descriptions into a
    control field.
  * debian/patches/91_build_pwdecrypt.dpatch: Enable building and installing
    pwdecrypt. Thanks Paul Wise. Closes: #472303.
  * debian/patches/00list: Updated accordingly.
  * debian/libnss3-1d.symbols: Update symbols file with new symbols and rename
    the file, so that it isn't used, as a workaround to #474079.
    Closes: #474007.
  * debian/rules: Bumped shlibs.

 -- Mike Hommey <glandium@debian.org>  Tue, 08 Apr 2008 21:23:53 +0200

nss (3.12.0~beta2-1) unstable; urgency=low

  * New upstream snapshot, picked from NSS_3_12_BETA2 cvs tag.
  * debian/patches/10_3.11.7_symbol_fix.dpatch: Removed, as applied upstream.
  * debian/patches/38_kbsd.dpatch: Adapted to upstream changes.
  * debian/patches/81_sonames.dpatch: Add SO_VERSION to libnssutil3.
  * debian/libnss3-dev.links: Add link for libnssutil3.
  * debian/libnss3-1d.symbols: Update symbols file with new symbols. Note that
    SEC_StringToOID disappeared (well, was moved to nssutil), compared to
    version 3.12.0~1.9b1, but it was a new symbol, and isn't used anywhere.
  * debian/nss.pc.in, debian/nss-config.in: Add libnssutil3 support.
  * debian/rules:
    + Bumped shlibs.
    + Don't generate libsoftokn3.so.0d.
  * debian/control:
    + Remove transitional libnss3-0d package.
    + Bumped Standards-Version to 3.7.3.0. No changes needed.
    + Build depend on libnspr4-dev >= 4.7.0 (we *do* need the RTM version, and
      not the preceding betas)
  * debian/libnss3-0d.*: Removed.
  * debian/patches/85_security_load.dpatch: Load files from $ORIGIN/nss before
    those of $ORIGIN. Closes: #469079.
  * debian/patches/38_hurd.dpatch: Fix FTBFS on Hurd because of MAXPATHLEN.
    Closes: #419529.
  * debian/patches/00list: Updated accordingly.

 -- Mike Hommey <glandium@debian.org>  Fri, 07 Mar 2008 21:27:54 +0100

nss (3.12.0~1.9b1-2) unstable; urgency=low

  * debian/control: libnss3-1-dbg needs to conflict with older libnss3-0d-dbg,
    as it overwrites so of its files. Closes: #455875.
  * debian/patches/90_realpath.dpatch: Use realpath() in
    loader_GetOriginalPathname, so that symlinks are properly followed when
    determining where the current library lives.
  * debian/patches/00list: Updated accordingly.
  * debian/patches/85_security_load.dpatch: When the module given by the
    caller contains a directory name, remove it so that the module can be
    properly loaded. Closes: #456296.

 -- Mike Hommey <glandium@debian.org>  Sun, 16 Dec 2007 11:06:03 +0100

nss (3.12.0~1.9b1-1) unstable; urgency=low

  * New upstream snapshot, picked from FIREFOX_3_0b1_RELEASE cvs tag.
  * debian/copyright: Add licensing information about the recently added
    sqlite copy in the source tree.
  * debian/control:
    + Build depend on libsqlite3-dev.
    + Rename all -0d packages to -1d, but keep a transitional -0d package,
      since all libraries are compatible (except for the removed one).
    + Make libnss3-1d conflict with older libnss3-0d.
  * debian/patches/38_kbsd.dpatch, debian/patches/81_sonames.dpatch:
    Adapted to upstream changes.
  * debian/patches/81_sonames.dpatch:
    + Remove SO version from libsoftokn3, now it is not linked against
      anymore, but dlloaded.
    + Remove the hacks to have shlibsign and the signature verification code
      handle the SO version in the file name.
    + Bump SO version to 1d.
  * debian/rules:
    + Add NSS_USE_SYSTEM_SQLITE=1 to the make options.
    + Install libsoftokn3 and the new libnssdbm3 in /usr/lib/nss.
    + Run shlibsign on libsoftokn3 in /usr/lib/nss, without a SO version.
    + For some reason, build-stamp was missing in install-stamp dependencies.
    + Bumped shlibs because of new symbols, and pass -c4 to dpkg-gensymbols,
      so that it fails in all cases where the symbols file is not up to date.
    + Adapt upstream version pattern matching so that the ~1.9b1 part is
      removed.
    + Install .1d libraries in -1d packages.
    + Create a dummy libsoftokn3.so.0d library, installed in the libnss3-0d
      package.
  * debian/libnss3-0d.links:
    + Remove links in /usr/lib/xulrunner. The workaround they were
      implementing is going to be done another way.
    + Add .0d links to .1d libraries.
  * debian/libnss3-dev.links:
    + Don't put a symlink for libsoftokn3.
    + .so files now link to .1d libraries.
  * debian/patches/80_security_build.dpatch: Remove the hack to load libfreebl
    from /usr/lib/nss.
  * debian/patches/85_security_load.dpatch: Load modules from $ORIGIN/nss.
  * debian/patches/10_3.11.7_symbol_fix.dpatch: Fix a symbol version. Stolen
    from bz#325672.
  * debian/patches/00list: Updated accordingly.
  * debian/libnss3-0d.dirs: Renamed to libnss3-1d.dirs.

 -- Mike Hommey <glandium@debian.org>  Sat, 08 Dec 2007 10:53:02 +0100

nss (3.11.7-1) unstable; urgency=low

  * New upstream release, picked from NSS_3_11_7_RTM cvs tag.
  * debian/patches/38_kbsd.dpatch: Also add support for the Hurd.
    Closes: #419529.
  * debian/rules:
    + Don't fail on clean with unpatched ruleset. Closes: #421542.
    + Bumped shlibs because of new symbols.
  * debian/patches/81_sonames.dpatch: Adapted to upstream changes.

 -- Mike Hommey <glandium@debian.org>  Sun, 01 Jul 2007 11:29:06 +0200

nss (3.11.5-3) unstable; urgency=low

  * Upload to unstable.

 -- Mike Hommey <glandium@debian.org>  Mon, 09 Apr 2007 20:37:25 +0200

nss (3.11.5-2) experimental; urgency=low

  * debian/rules:
    + Cleaner way to set the NSPR location.
    + Install libcrmf.a files in libnss3-dev.
    + binary-indep now does nothing.
  * debian/control: Make libnss3-dev an Arch: any package.
  * debian/nss.pc.in:
    + Remove libsoftokn3 from ld libraries.
    + Improvement in directories setting.
  * debian/libnss3-dev.dirs: Create /usr/bin.
  * debian/nss-config.in, debian/rules: Install a nss-config script into
    libnss3-dev.

 -- Mike Hommey <glandium@debian.org>  Tue, 27 Mar 2007 20:41:11 +0200

nss (3.11.5-1) experimental; urgency=low

  * Initial release. (Closes: #416151)

 -- Mike Hommey <glandium@debian.org>  Sun, 25 Mar 2007 23:56:17 +0200