With the recently announced eMudhra Intermediate CA Compromise [1] update nss to drop the root CAs to prevent applications which don't check certificate transparency logs or revocations from establishing insecure TLS connections.
Technically only the ca-certificates update should be relevant for this issue, but update the nss package anyways (which also needs at least nspr version 4.39). This series obsoletes the previously sent nss update (mid:[email protected]). [1] https://emudhra.we-have-a-problem.com/ Signed-off-by: Sven Püschel <[email protected]> --- Changes in v2: - also adjust pkgconfig file generation in host-nss rule - Link to v1: https://lore.kernel.org/r/[email protected] --- Sven Püschel (3): nspr: version bump 4.37 -> 4.40 nss: version bump 3.130 -> 3.131.1 ca-certificates: version bump 3_130 -> 3_131_1 patches/nss-3.130/0002-add-nss.pc.in.patch | 27 ---------------------- patches/nss-3.130/series | 8 ------- .../0001-nss-fix-nsinstall-build.patch | 0 ...HACK-don-t-build-commands-that-need-zlib.patch} | 0 .../0003-HACK-fix-parallel-building-issue.patch} | 0 .../0004-fix-dependency-generation.patch} | 0 patches/nss-3.131.1/series | 7 ++++++ rules/ca-certificates.make | 4 ++-- rules/host-nss.make | 10 ++++++-- rules/nspr.make | 4 ++-- rules/nss.make | 14 +++++++---- 11 files changed, 29 insertions(+), 45 deletions(-) --- base-commit: 25578c25031573977db826d12d05156574cc2898 change-id: 20261021-fixemudhra-f6733d13f0c7 Best regards, -- Sven Püschel <[email protected]>
