Debian Patches
Status for nss/2:3.87.1-1+deb12u3
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| 38_hurd.patch | ## 38_hurd.patch by <glandium@debian.org> ## ## All lines beginning with `## DP:' are a description of the patch. ## DP: Fix FTBFS on Hurd because of MAXPATHLEN =================================================================== |
no | ||||
| 80_security_tools.patch | ## 80_security_tools.patch by Mike Hommey <glandium@debian.org> ## ## All lines beginning with `## DP:' are a description of the patch. ## DP: Enable building of some NSS tools. ## DP: Disable rpath. =================================================================== |
no | ||||
| 38_hppa.patch | fix double definition of BYTE_ORDER on hppa =================================================================== |
Helge Deller <deller@gmx.de> | no | debian | ||
| CVE-2024-0743.patch | CVE-2024-0743 potiential crash due to interger underflow. # HG changeset patch # User John Schanck <jschanck@mozilla.com> # Date 1702322654 0 # Node ID 1bda168c0da97e19e5f14bc4227c15c0a9f493bf # Parent e934c6d1d4366d152e3307cb76af4c02667c9147 Bug 1867408 - add a defensive check for large ssl_DefSend return values. r=nkulatova Differential Revision: https://phabricator.services.mozilla.com/D195054 |
yes | upstream | https://hg.mozilla.org/projects/nss/rev/1bda168c0da97e19e5f14bc4227c15c0a9f493b | ||
| CVE-2024-6602.patch | # HG changeset patch # User John Schanck <jschanck@mozilla.com> # Date 1716230774 0 # Node ID f9b22115dc97be76e388dc9d0dca946dde955e64 # Parent dbd189b826b80eb0ff99d7769e16482624434682 Bug 1895032 - remove redundant AllocItem implementation. r=nss-reviewers,rrelyea Differential Revision: https://phabricator.services.mozilla.com/D209476 diff --git a/nss/lib/util/secitem.c b/nss/lib/util/secitem.c |
no | ||||
| CVE-2024-6609.patch | no | https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/t9JmsYkujWM/m/HjKuk-ngBAAJ | ||||
| CVE-2026-2781.patch | # HG changeset patch # User John Schanck <jschanck@mozilla.com> # Date 1770830509 0 # Node ID 245385e16fa62111d6e3c3fbd847b020755f64f0 # Parent 76e6887ecc1a5410233ad9c5f4cadae4e298a37b Bug 2009552 - avoid integer overflow in platform-independent ghash. r=nss-reviewers,nkulatova Differential Revision: https://phabricator.services.mozilla.com/D278681 |
no | ||||
| CVE-2026-6766.patch | # HG changeset patch # User John Schanck <jschanck@mozilla.com> # Date 1773760657 0 # Node ID 42da9a7f8a035849ba92e89dd095d4219a3e1d3d # Parent 2d03bf59ca4feacb31a30923f730f549f25332e8 Bug 2023207 - Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag. r=#nss-reviewers Differential Revision: https://phabricator.services.mozilla.com/D287662 diff --git a/nss/lib/ssl/tls13con.c b/nss/lib/ssl/tls13con.c |
no | backport, https://hg-edge.mozilla.org/projects/nss/raw-rev/42da9a7f8a03 | |||
| CVE-2026-6767.patch | # HG changeset patch # User Dana Keeler <dkeeler@mozilla.com> # Date 1773854548 0 # Node ID 4e693e8b5c0db30ee8e0043edabcf9787a747aa8 # Parent 42da9a7f8a035849ba92e89dd095d4219a3e1d3d Bug 2023209 - ensure permittedSubtrees don't match wildcards that could be outside the permitted tree r?jschanck Differential Revision: https://phabricator.services.mozilla.com/D287712 diff --git a/nss/gtests/mozpkix_gtest/pkixnames_tests.cpp b/nss/gtests/mozpkix_gtest/pkixnames_tests.cpp |
no | backport, https://hg-edge.mozilla.org/projects/nss/raw-rev/4e693e8b5c0d | |||
| CVE-2026-6772.patch | # HG changeset patch # User Dennis Jackson <djackson@mozilla.com> # Date 1776100981 0 # Node ID 961f1a40f5e7d182723a216e236e1e638eaddb40 # Parent 5c15dd1fb0151b7ca62b0d6e95a9942778dcabe2 Bug 2026089 - Clarify extension negotiation mechanism for TLS Handshakes r=#nss-reviewers Differential Revision: https://phabricator.services.mozilla.com/D289764 diff --git a/nss/lib/ssl/ssl3ext.c b/nss/lib/ssl/ssl3ext.c |
no | backport, https://hg-edge.mozilla.org/projects/nss/raw-rev/961f1a40f5e7 | |||
| CVE-2026-12318.patch | # HG changeset patch # User John Schanck <jschanck@mozilla.com> # Date 1776891142 0 # Node ID bd0c42028c8eae5b9cbdb4f5b0ee59bc07cba2de # Parent 98ae9f70d97a87957a997af8ac9110836a5dd094 Bug 2023478 - improve handling of escape sequences in pk11uri_ParseAttributes. r=nss-reviewers,keeler Differential Revision: https://phabricator.services.mozilla.com/D295642 diff --git a/nss/lib/util/pkcs11uri.c b/nss/lib/util/pkcs11uri.c |
no | backport, https://hg-edge.mozilla.org/projects/nss/raw-rev/bd0c42028c8eae5b9cbdb4f5b0ee59bc07cba2de |
All known versions for source package 'nss'
- 2:3.126-1 (sid)
- 2:3.124-1 (forky)
- 2:3.110-1+deb13u3 (trixie)
- 2:3.110-1+deb13u2 (trixie-security)
- 2:3.87.1-1+deb12u3 (bookworm-security)
- 2:3.87.1-1+deb12u2 (bookworm)