diff -Nru nss-3.49.1/debian/changelog nss-3.49.1/debian/changelog
--- nss-3.49.1/debian/changelog	2020-06-30 16:41:20.000000000 +0200
+++ nss-3.49.1/debian/changelog	2020-07-01 14:48:13.000000000 +0200
@@ -1,3 +1,9 @@
+nss (2:3.49.1-1ubuntu4) groovy; urgency=medium
+
+  * Symlink chk files to fix self-verification in FIPS mode (LP: #1885562)
+
+ -- Dariusz Gadomski <dgadomski@ubuntu.com>  Wed, 01 Jul 2020 14:48:13 +0200
+
 nss (2:3.49.1-1ubuntu3) groovy; urgency=medium
 
   * SECURITY UPDATE: Side channel vulnerabilities during RSA key generation
diff -Nru nss-3.49.1/debian/libnss3.links nss-3.49.1/debian/libnss3.links
--- nss-3.49.1/debian/libnss3.links	2020-01-22 20:24:44.000000000 +0100
+++ nss-3.49.1/debian/libnss3.links	2020-07-01 13:53:29.000000000 +0200
@@ -1,3 +1,5 @@
 #!/usr/bin/dh-exec
 usr/lib/${DEB_HOST_MULTIARCH}/nss/libfreebl3.so usr/lib/${DEB_HOST_MULTIARCH}/libfreebl3.so
+usr/lib/${DEB_HOST_MULTIARCH}/nss/libfreebl3.chk usr/lib/${DEB_HOST_MULTIARCH}/libfreebl3.chk
 usr/lib/${DEB_HOST_MULTIARCH}/nss/libfreeblpriv3.so usr/lib/${DEB_HOST_MULTIARCH}/libfreeblpriv3.so
+usr/lib/${DEB_HOST_MULTIARCH}/nss/libfreeblpriv3.chk usr/lib/${DEB_HOST_MULTIARCH}/libfreeblpriv3.chk