-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 15 Jul 2026 15:51:05 +0200 Source: nss Architecture: source Version: 2:3.87.1-1+deb12u3 Distribution: bookworm-security Urgency: medium Maintainer: Maintainers of Mozilla-related packages <team+pkg-mozilla@tracker.debian.org> Changed-By: Jochen Sprickerhof <jspricke@debian.org> Changes: nss (2:3.87.1-1+deb12u3) bookworm-security; urgency=medium . * Non-maintainer upload by the LTS Team. * Fix CVE-2026-6766: Incorrect boundary conditions. * Fix CVE-2026-6767: Ensure permittedSubtrees don't match wildcards that could be outside the permitted tree. * Fix CVE-2026-6772: Incorrect boundary conditions. * Fix CVE-2026-12318:Incorrect boundary conditions. Checksums-Sha1: a8c73af86277e1e50a2ef91140a7baa8aa3dc585 2254 nss_3.87.1-1+deb12u3.dsc c0a2712b442ae682fe14d73f6389988188c76dc2 71430196 nss_3.87.1.orig.tar.gz 60760f82226ca59aad05a6a658724b39f728513b 30048 nss_3.87.1-1+deb12u3.debian.tar.xz 21f1cf2eae85cc58a5765be2ab2a9062b7fab384 5978 nss_3.87.1-1+deb12u3_source.buildinfo Checksums-Sha256: f4bc862ac7cebcaad0aba9292b9d783f929fd2f392e0cb859c2f87728519e511 2254 nss_3.87.1-1+deb12u3.dsc f30fb0de6986e59420ce3bfea340e801222be1da144b420bcbfec1d977dab4d5 71430196 nss_3.87.1.orig.tar.gz 892a5fa7382cdb87ab7a31b825057ea06de701fe147691c7f3c84c82aeecc644 30048 nss_3.87.1-1+deb12u3.debian.tar.xz b55feb7e2901fb1fd4fe77c2e313d961fa6af60e66f0394f829f0e36fcd11453 5978 nss_3.87.1-1+deb12u3_source.buildinfo Files: 2c92447fc06be93e67c54e5e0642a2ad 2254 libs optional nss_3.87.1-1+deb12u3.dsc b6bb6605f4b81907ac676f6e5755424f 71430196 libs optional nss_3.87.1.orig.tar.gz 7e9fc96decdca91dc73c62990697b017 30048 libs optional nss_3.87.1-1+deb12u3.debian.tar.xz 9b88201f53cdb6fc53f63aeaac84e1a4 5978 libs optional nss_3.87.1-1+deb12u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEEc7KZy9TurdzAF+h6W//cwljmlDMFAmpfcUkUHGpzcHJpY2tl QGRlYmlhbi5vcmcACgkQW//cwljmlDNpgQ/6Am4pf6PQX6wd5WW1RrW3Ck2/fSCP PwaFCyrykMPsp1bTUHvjojqNKegz4a/9n8du7qqcTboljlJx96bNzlVsIRf3yOyP +LK9cvlMaFWOCzWWoKwfiIiwDwegaaw+8/Ws86K1X9VftxN/rzto6NKk8uR6QE8Q riLNJJ5E2hN+63ndRIJsPn9bSri7Ucxcx1xfJ2Rb7YQLUT5ytFdWMviy1L30wpam C+NrDTqbrsvXcp6CRKmztCzjNoEIDEqD7Cj5lrblkqCcebN+u/8xDNNZOEcB3a4D VBci94XAtpRgtRH5trFwCrYTQ467ToCKay2BErvLez7Pz2Mosn+UOZxW1afE4PUo y3yZRki2mIX3RV6nDkSalaG+YNyrBIDRq+EjaVzxNxd8Y3vO53TJqK0Qc2u4UK+8 hobcr4AsWJeGLIk50L2kVSPPT2hl84uIa2uhhstfuV5xMhuLqgOyLkaIC2DbDY++ KM4Iw8Juc1G1SF/9y29D7LZIGJ+IAXi5YXk6yvvaXPXxoFOSkDOKzjIEXIMa15hR fjbXUGgWQOgKgln1cWuP7uyVuMIwV5Lu5hZSot6nfyIpNa8QXAhlnLq8HR9sOzWV frDuHD/duviN5xUNhhoUXvtdZjssMoapWpb+6Ngk6H1DB3ETlZtU6lJSNKaimyQW x7zDgBdPeSTVAQE= =y9yp -----END PGP SIGNATURE-----