-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 15 Jul 2026 16:20:56 +0200 Source: nss Architecture: source Version: 2:3.61-1+deb11u6 Distribution: bullseye-security Urgency: medium Maintainer: Maintainers of Mozilla-related packages <team+pkg-mozilla@tracker.debian.org> Changed-By: Jochen Sprickerhof <jspricke@debian.org> Changes: nss (2:3.61-1+deb11u6) bullseye-security; urgency=medium . * Non-maintainer upload by the LTS Team. * Fix CVE-2026-6766: Incorrect boundary conditions. * Fix CVE-2026-6767: Ensure permittedSubtrees don't match wildcards that could be outside the permitted tree. * Fix CVE-2026-6772: Incorrect boundary conditions. * Fix CVE-2026-12318:Incorrect boundary conditions. Checksums-Sha1: 9e8276c9148b368ec5bd2ea51d7d65905355b191 2230 nss_3.61-1+deb11u6.dsc 26ffe516cb4b374f765c0818cca03afe09e15292 82034245 nss_3.61.orig.tar.gz ba38e6446a7bb0e6d6ad2c05049bc46584fe4979 32728 nss_3.61-1+deb11u6.debian.tar.xz e0fa42cdbd261dc349b21a8725eadfa37a9ade27 5970 nss_3.61-1+deb11u6_source.buildinfo Checksums-Sha256: 5c716fb6a52212b6d6cd6919a2477e729e73ebbc9ef59087b049d1fe3cff8305 2230 nss_3.61-1+deb11u6.dsc 312e2d804b34ccf0fec70b57cf8cd6ac853f8ced60df53e30ebb0a7bcd0e1370 82034245 nss_3.61.orig.tar.gz 37a9d492213f86259b056072f18ce0eea001732ac1f1ebbf3a57dfd101e62e8a 32728 nss_3.61-1+deb11u6.debian.tar.xz 7eb2d7decb0b3b15fd62e97e7156ee9e108bf5c71c798ae2da5e86faace57768 5970 nss_3.61-1+deb11u6_source.buildinfo Files: 835c250da2a4d859309c59c7aeecfe27 2230 libs optional nss_3.61-1+deb11u6.dsc e07573e1c0e1e5bef7c05075f8dfa46d 82034245 libs optional nss_3.61.orig.tar.gz 93692e59f449e7e69997b8187270f40b 32728 libs optional nss_3.61-1+deb11u6.debian.tar.xz 629e1ced4135cd7c2937d3979baa9eee 5970 libs optional nss_3.61-1+deb11u6_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEEc7KZy9TurdzAF+h6W//cwljmlDMFAmpfcY8UHGpzcHJpY2tl QGRlYmlhbi5vcmcACgkQW//cwljmlDMeERAAkTjm4LYAoICYvWHjRcJDTlRam7BA 9AdI46ELAcU8RW4JEOkydjBIHaYCL2XQfrGRGD6BJPMHYBe7LKyxgN6MJQqas4um /Ys6yaMSOcYBdkRvwrtVo1Tx6A0AWAiyU/TVYHtCEnTqpwaclvfcCEiSz81nT8+M 8PJT/iHi/NveZbQB840kT/u3RbAAsXmmQ6yAA3p1g/8rNhciKqiXkod+PNixZbtV cqlrPoXux+XH2815FEgLX/0Y2izFxIXYWiEanhu5BUons7vqsqe0vy49qU7LNPkc Hxuy21vLH9eych+9LaA3k3ok4bKto6fl957JqCWfJMYjj8DjTR6cQkazEcsVUa5w 74eO2RGKa7PoUP09wrccIi0yV/BL//SSsUiiL9TKCt9a+z+p+FhVKD78XcFu363A zBnCYqwbuadRoOeAlMRAZRhWgpcGnj/lDDk6fE2S7FvV1XW6gcu1bIA/xa9H8/5W K0+XxxB0s51aVSQkPjoSHBWSGa7W3n1R/nbKpt2U6ews6lqiqxxIikLMQ6yXBMoN PgUxEBbVGoHZlZofsyZsd5sKOrjSKIMN6PRqcqqCiQNQfme8Ha9INWxU1+nVOryO 7fgJynJFiAawUN71AKo/nqsed4ZPzJR1mS10EHqv6v6xs8Q5YNTsVNXTAQNDDnAH 7eutteyKR1Y2wLA= =f4z9 -----END PGP SIGNATURE-----