- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5

- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5

- add CERN CAs

- Rebase to NSS 3.21.4 to accommodate a fix for base64 encoding

- add CERN CAs

- Mozilla #1314604 / Red Hat CVE-2016-8635

- add CERN CAs

- Fix SSL_DH_MIN_P_BITS in more places.

- add CERN CAs

- Actually apply the fix for CVE-2016-1950 from NSS 3.19.2.3 ...

- include CERN CA certificates

- Resolves: Bug 1269354 - CVE-2015-7182 CVE-2015-7181

- added CERN certs as builtins

- Rebase nss to 3.19.1
- Pick up upstream fix for client auth. regression caused by 3.19.1
- Revert upstream change to minimum key sizes
- Remove patches that rendered obsolote by the rebase
- Update existing patches on account of the rebase

- add CERN certificates as built-ins.

- On RHEL 6.x keep the TLS version defaults unchanged.
- Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)

- Carry over changes to include cern certificates

- Resolves: Bug 1158159 - Upgrade to NSS 3.16.2.3 for Firefox 31.3

- Carry over changes to include cern certificates

- Adjust softokn patch to be compatible with legacy softokn API.
- Resolves: Bug 1145430 - CVE-2014-1568

- add CERN certificates as built-ins.

- Backport nss-3.12.6 upstream fix required by Firefox 31 ESR
- Resolves: Bug 1110860

- Remove an unused patch
- Related: Bug 1116199

- Remove an unused patch
- Related: Bug 1116199

- Revoke trust in one mis-issued anssi certificate
- Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)

- Revoke trust in one mis-issued anssi certificate
- Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)

- remove unnecessary and problematic template-removal patch
  which was added as part of the 3.15.1 rebase
- bump release number

- remove unnecessary and problematic template-removal patch
  which was added as part of the 3.15.1 rebase
- bump release number

- added CERN certificates as built-ins.

- Make the freebl sources identical to the corresponding ones for rhel-6.5
- Related: rhbz#987131

- Make the freebl sources identical to the corresponding ones for rhel-6.5
- Related: rhbz#987131

- Resolves: rhbz#986969 - nssutil_ReadSecmodDB() leaks memory

- Resolves: rhbz#986969 - nssutil_ReadSecmodDB() leaks memory

- Fix changelog inconsistencies with commit and bug resolved
- Resolves: rhbz#891149 [CVE-2013-0743]

- Fix changelog inconsistencies with commit and bug resolved
- Resolves: rhbz#891149 [CVE-2013-0743]

- Fix changelog inconsistencies with commit and bug resolved
- Resolves: rhbz#891149 [CVE-2013-0743]

- Resolves: rhbz#820684
- Fix last entry in attrFlagsArray to be {NAME_SIZE(unextractable), PK11_ATTR_UNEXTRACTABLE}

- Resolves: rhbz#820684
- Fix last entry in attrFlagsArray to be {NAME_SIZE(unextractable), PK11_ATTR_UNEXTRACTABLE}

- added CERN CA certificates to builtin

- Related: rhbz#834219 - Fix ia64 / i386 multilib nss install failure
- Remove no longer needed %pre and %preun scriplets meant for nss updates from RHEL-5.0

- Resolves: rhbz#798462 - bumping the release tag

- Resolves: rhbz#798462 - bumping the release tag

- Resolves: Bug 788964 - rebase nss to make firefox 10 LTS rebase possible
- Update to 3.13.1

- Resolves: Bug 788964 - rebase nss to make firefox 10 LTS rebase possible
- Update to 3.13.1

- Retagging for a Y-stream version higher than the RHEL-5-7-Z branch

- Retagging for a Y-stream version higher than the RHEL-5-7-Z branch

- Fix a syntax error in the spec file

- Update builtins certs to those from NSSCKBI_1_87_RTM

- Update builtins certs to those from NSSCKBI_1_87_RTM

- added CERN CA certificates to builtin

- Update builtin certs to NSS_3.12.9_WITH_CKBI_1_82_RTM via a patch

- Update to 3.12.8

- fix dependencies, undo previous change

- Enable client applications to build with -Wstrict-prototypes

- Update to 3.12.6

- adjust ssl cipher count constant (bug 505650)

- create 5.2.z-stream version
- updated to NSS_3_12_4_FIPS1_WITH_CKBI_1_75
- adjust ssl cipher count constant (bug 505650)
- add a patch to seckey
- remove references to SEED
- exclude binary db files from change detection
- Add dependency to pkgconfig to devel package (bug456849)
- Use system zlib
- Enable loading of external ECC modules

- exclude binary db files from change detection

- Update to NSS_3_12_2_RC1
- Use system zlib

- Update to NSS_3_12_1_WITH_CKBI_1_72_RTM

- Update to NSS_3_12_1_RC2

- Update to NSS_3_12_RC4
- Enable loading of external ECC modules
- Include upstream fix for a deadlock in the certutil tool, bug 447431