Changelog for mozilla-nss-3.13.5-1.1.i586.rpm :
Fri Jun 1 14:00:00 2012 wrAATTrosenauer.org
- update to 3.13.5 RTM

Fri Apr 13 14:00:00 2012 wrAATTrosenauer.org
- update to 3.13.4 RTM

* fixed some bugs

* fixed cert verification regression in PKIX mode (bmo#737802)
introduced in 3.13.2

Thu Feb 23 13:00:00 2012 wrAATTrosenauer.org
- update to 3.13.3 RTM
- distrust Trustwave\'s MITM certificates (bmo#724929)
- fix generic blacklisting mechanism (bmo#727204)

Thu Feb 16 13:00:00 2012 wrAATTrosenauer.org
- update to 3.13.2 RTM

* requirement with Gecko >= 11
- removed obsolete patches

* ckbi-1.88

* pkcs11n-header-fix.patch

Sun Dec 18 13:00:00 2011 adrianAATTsuse.de
- fix spec file syntax for qemu-workaround

Mon Nov 14 13:00:00 2011 johnAATTredux.org.uk
- Added a patch to fix errors in the pkcs11n.h header file.
(bmo#702090)

Sat Nov 5 13:00:00 2011 wolfgangAATTrosenauer.org
- update to 3.13.1 RTM

* better SHA-224 support (bmo#647706)

* fixed a regression (causing hangs in some situations)
introduced in 3.13 (bmo#693228)
- update to 3.13.0 RTM

* SSL 2.0 is disabled by default

* A defense against the SSL 3.0 and TLS 1.0 CBC chosen plaintext
attack demonstrated by Rizzo and Duong (CVE-2011-3389) is
enabled by default. Set the SSL_CBC_RANDOM_IV SSL option to
PR_FALSE to disable it.

* SHA-224 is supported

* Ported to iOS. (Requires NSPR 4.9.)

* Added PORT_ErrorToString and PORT_ErrorToName to return the
error message and symbolic name of an NSS error code

* Added NSS_GetVersion to return the NSS version string

* Added experimental support of RSA-PSS to the softoken only

* NSS_NoDB_Init does not try to open /pkcs11.txt and /secmod.db
anymore (bmo#641052, bnc#726096)

Sat Nov 5 13:00:00 2011 wrAATTrosenauer.org
- explicitely distrust DigiCert Sdn. Bhd (bnc#728520, bmo#698753)
- make sure NSS_NoDB_Init does not try to use wrong certificate
databases (CVE-2011-3640, bnc#726096, bmo#641052)

Fri Sep 30 14:00:00 2011 crrodriguezAATTopensuse.org
- Workaround qemu-arm bugs.

Fri Sep 9 14:00:00 2011 wrAATTrosenauer.org
- explicitely distrust/override DigiNotar certs (bmo#683261)
(trustdb version 1.87)

Fri Sep 2 14:00:00 2011 pcernyAATTsuse.com
- removed DigiNotar root certificate from trusted db
(bmo#682927, bnc#714931)

Wed Aug 24 14:00:00 2011 andrea.turriniAATTgmail.com
- fixed typo in summary of mozilla-nss (libsoftokn3)

Fri Aug 12 14:00:00 2011 wrAATTrosenauer.org
- update to 3.12.11 RTM

* no upstream release notes available

Wed Jul 13 14:00:00 2011 meissnerAATTsuse.de
- Linux3.0 is the new Linux2.6 (make it build)

Mon May 23 14:00:00 2011 crrodriguezAATTopensuse.org
- Do not include build dates in binaries, messes up
build compare

Thu May 19 14:00:00 2011 wrAATTrosenauer.org
- update to 3.12.10 RTM

* no changes except internal release information

Thu Apr 28 14:00:00 2011 wrAATTrosenauer.org
- update to 3.12.10beta1

* root CA changes

* filter certain bogus certs (bmo#642815)

* fix minor memory leaks

* other bugfixes

Sun Jan 9 13:00:00 2011 wrAATTrosenauer.org
- update to 3.12.9rc0

* fix minor memory leaks (bmo#619268)

* fix crash in nss_cms_decoder_work_data (bmo#607058)

* fix crash in certutil (bmo#620908)

* handle invalid argument in JPAKE (bmo#609068)

Thu Dec 9 13:00:00 2010 wrAATTrosenauer.org
- update to 3.12.9beta2

* J-PAKE support (API requirement for Firefox >= 4.0b8)

Tue Nov 9 13:00:00 2010 wrAATTrosenauer.org
- replaced expired PayPal test certificate (fixing testsuite)

Sat Sep 25 14:00:00 2010 wrAATTrosenauer.org
- update to 3.12.8 RTM release

* support TLS false start (needed for Firefox4) (bmo#525092)

* fix wildcard matching for IP addresses (bnc#637290, bmo#578697)
(CVE-2010-3170)

* bugfixes

Fri Jul 23 14:00:00 2010 wrAATTrosenauer.org
- update to 3.12.7 RTM release

* bugfix release

* updated root CA list
- removed obsolete patches

Fri Jul 9 14:00:00 2010 jengelhAATTmedozas.de
- Disable testsuite on SPARC. Some tests fails, probably due to
just bad timing/luck.

Thu Jun 3 14:00:00 2010 wrAATTrosenauer.org
- Use preloaded empty system database since creating with
modutil leaves database in nonusable state

Sat Apr 24 14:00:00 2010 cooloAATTnovell.com
- buildrequire pkg-config to fix provides

Sun Apr 4 14:00:00 2010 wrAATTrosenauer.org
- disabled a test using an expired cert (bmo#557071)

Sat Mar 20 13:00:00 2010 wrAATTrosenauer.org
- fixed builds for older dists where internal sqlite3 is used
(nss-sqlitename.patch was not refreshed correctly)
- fixed baselibs.conf as is not a valid identifier

Tue Mar 9 13:00:00 2010 wrAATTrosenauer.org
- update to 3.12.6 RTM release

* added mozilla-nss-sysinit subpackage
- change renegotiation behaviour to the old default for a
transition phase

Tue Mar 9 13:00:00 2010 wrAATTrosenauer.org
- split off libsoftokn3 subpackage to allow mixed NSS installation

Sat Dec 26 13:00:00 2009 wrAATTrosenauer.org
- added mozilla-nss-certs baselibs (bnc#567322)

Fri Dec 18 13:00:00 2009 wrAATTrosenauer.org
- split mozilla-nss-certs from main package
- added rpmlintrc to ignore expected warnings
- added baselibs.conf as source

Mon Dec 14 13:00:00 2009 wrAATTrosenauer.org
- updated builtin certs (version 1.77)

Mon Nov 23 13:00:00 2009 wrAATTrosenauer.org
- rebased patches to apply w/o fuzz

Fri Aug 14 14:00:00 2009 wrAATTrosenauer.org
- update to 3.12.4 RTM release

Fri Aug 7 14:00:00 2009 wrAATTrosenauer.org
- update to recent snapshot (20090806)
- libnssdbm3.so has to be signed starting with 3.12.4

Mon Aug 3 14:00:00 2009 wrAATTrosenauer.org
- update to NSS 3.12.4pre snapshot
- rebased existing patches
- enable testsuite again (was disabled accidentally before)

Wed Jul 29 14:00:00 2009 wrAATTrosenauer.org
- update to NSS 3.12.3.1 (upstream use in FF 3.5.1) (bmo#504611)

* RNG_SystemInfoForRNG called twice by nsc_CommonInitialize
(bmo#489811; other changes are unrelated to Linux)
- moved shlibsign to tools package again (as it\'s not needed at
library install time anymore)
- use %{_libexecdir} for the tools

Sat Jun 6 14:00:00 2009 wrAATTrosenauer.org
- Temporary testsuite fix for Factory (bnc#509308) (malloc.patch)
- remove the post scriptlet which created the
*.chk files and
use a RPM feature to create them after debuginfo stuff

Tue Jun 2 14:00:00 2009 wrAATTrosenauer.org
- updated builtin root certs by updating to
NSS_3_12_3_WITH_CKBI_1_75_RTM tag which is supposed to be the
base for Firefox 3.5.0
- PreReq coreutils in the main package already as \"rm\" is used
in its %post script
- disable testsuite for this moment as it crashes on Factory
currently for an unknown reason

Thu May 21 14:00:00 2009 wrAATTrosenauer.org
- renew Paypal certs to fix testsuite errors (bmo#491163)

Mon Apr 20 14:00:00 2009 wrAATTrosenauer.org
- update to version 3.12.3 RTM

* default behaviour changed slightly but can be set up
backward compatible using environment variables
https://developer.mozilla.org/En/NSS_reference/NSS_environment_variables

* New Korean SEED cipher

* Some new functions in the nss library:
CERT_RFC1485_EscapeAndQuote (see cert.h)
CERT_CompareCerts (see cert.h)
CERT_RegisterAlternateOCSPAIAInfoCallBack (see ocsp.h)
PK11_GetSymKeyHandle (see pk11pqg.h)
UTIL_SetForkState (see secoid.h)
NSS_GetAlgorithmPolicy (see secoid.h)
NSS_SetAlgorithmPolicy (see secoid.h)
- created libfreebl3 subpackage and build it w/o nspr and nss deps
- added patch to make all ASM noexecstack
- create the softokn3 and freebl3 checksums at installation time
(moved shlibsign to the main package to achieve that)
- applied upstream patch to avoid OSCP test failures (bmo#488646)
- applied upstream patch to fix libjar crashes (bmo#485145)

Wed Feb 4 13:00:00 2009 wrAATTrosenauer.org
- update to version 3.12.2 RTM (with CKBI 1.73) as in FF 3.0.6

Tue Jan 13 13:00:00 2009 wrAATTrosenauer.org
- update to version 3.12.2rc1 (as used by FF 3.0.5)

* NSS is now using system zlib (bmo#302670)
- create a system wide, sql based NSS database in /etc/pki/nssdb
(let previously created /etc/ssl/nssdb untouched)

Wed Jan 7 13:00:00 2009 olhAATTsuse.de
- obsolete old -XXbit packages (bnc#437293)

Thu Oct 23 14:00:00 2008 mawAATTsuse.de
- Review and approve changes.

Thu Aug 21 14:00:00 2008 wrAATTrosenauer.org
- run testsuite (bnc#418233)

Tue Jun 17 14:00:00 2008 mawAATTsuse.de
- Merge changes from the build service (thanks, Wolfgang)
(bnc#400001 and SWAMP#18164).

Wed May 28 14:00:00 2008 wrAATTrosenauer.org
- update to 3.12.0rc4 (20080528) (featuring FF3.0)

Tue Apr 29 14:00:00 2008 mawAATTsuse.de
- Prerequire coretools in the -tools subpackage (bnc#379540)
- Require sqlite3-devel to build.

Mon Apr 14 14:00:00 2008 mawAATTsuse.de
- Merge some fixes from the build service\'s version.

Thu Apr 10 14:00:00 2008 roAATTsuse.de
- added baselibs.conf file to build xxbit packages
for multilib support

Mon Mar 31 14:00:00 2008 mawAATTsuse.de
- Undo the shared library package split, per discussion in
opensuse-packaging.

Mon Mar 31 14:00:00 2008 wrAATTrosenauer.org
- new snapshot still based on 3.12.0 Beta 3 (20080330)

Tue Mar 25 13:00:00 2008 mawAATTsuse.de
- Merge changes from the build service (thanks, Wolfgang)
- Update to a new snapshot of nss based on 3.12.0 Beta 2:
+ Update build requirements accordingly
+ Add nss-sqlitename.patch and nss-no-rpath.patch
- Split out a shared library subpackage.

Mon Dec 10 13:00:00 2007 rguentherAATTsuse.de
- disable use of freebl/mpi/mp_comba.c. [#346256]

Sun Sep 16 14:00:00 2007 cooloAATTsuse.de
- fixing errors in %post during installation

Thu Sep 13 14:00:00 2007 jberkmanAATTnovell.com
- merge -tools package into main package
- create system-wide nssdb for system configuration of smart cards,
as used by pam_pkcs11, krb5 pkinit, and others

Thu Jul 26 14:00:00 2007 mawAATTsuse.de
- Update to version 3.11.7 (from the build service)
- Bug fixes.

Mon Jun 11 14:00:00 2007 roAATTsuse.de
- use string[0] instead of string in char.patch

Mon Jun 11 14:00:00 2007 roAATTsuse.de
- update to NSS 3.11.6 (pull in from wr from opensuse BS)

Wed Feb 21 13:00:00 2007 mawAATTsuse.de
- Update to NSS 3.11.5 (thanks, Wolfgang)

Sun Oct 1 14:00:00 2006 wrAATTrosenauer.org
- update to NSS 3.11.3
- requires NSPR 4.6.3 (pkgconfig)

Wed Sep 6 14:00:00 2006 starkAATTsuse.de
- update to NSS_3_11_20060905_TAG to be in sync with
Gecko 1.8.1

Mon Aug 7 14:00:00 2006 starkAATTsuse.de
- enabled usage of ECC

Sat Aug 5 14:00:00 2006 starkAATTsuse.de
- update to NSS_3_11_20060731_TAG to be in sync with
Gecko 1.8.1

Fri Jul 28 14:00:00 2006 starkAATTsuse.de
- fixed usage of uninitialized pointers (uninit.patch)
- requires NSPR 4.6.2

Sat Jul 1 14:00:00 2006 starkAATTsuse.de
- update to 3.11.2 RTM version

* ECC not enabled but defines needed symbols