![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / emulators / suse131_mozilla-nss
Request diff between arbitrary revisions
Keyword substitution: kv
Default branch: MAIN
emulators: Replace RMD160 checksums with BLAKE2s checksums All checksums have been double-checked against existing RMD160 and SHA512 hashes The following distfiles could not be fetched (mostly distfiles fetched conditionally...): ./emulators/compat30/distinfo compat30-alpha-3.1.tar.bz2 ./emulators/compat30/distinfo compat30-arm-3.1.tar.bz2 ./emulators/compat30/distinfo compat30-m68k-3.1.tar.bz2 ./emulators/compat30/distinfo compat30-mipseb-3.1.tar.bz2 ./emulators/compat30/distinfo compat30-mipsel-3.1.tar.bz2 ./emulators/compat30/distinfo compat30-powerpc-3.1.tar.bz2 ./emulators/compat30/distinfo compat30-sh3eb-3.1.tar.bz2 ./emulators/compat30/distinfo compat30-sh3el-3.1.tar.bz2 ./emulators/compat30/distinfo compat30-sparc-3.1.tar.bz2 ./emulators/compat30/distinfo compat30-sparc64-3.1.tar.bz2 ./emulators/compat30/distinfo compat30-vax-3.1.tar.bz2 ./emulators/compat51-x11/distinfo compat51-x11-alpha-5.1.tar.bz2 ./emulators/compat51-x11/distinfo compat51-x11-arm-5.1.tar.bz2 ./emulators/compat51-x11/distinfo compat51-x11-m68k-5.1.tar.bz2 ./emulators/compat51-x11/distinfo compat51-x11-mipseb-5.1.tar.bz2 ./emulators/compat51-x11/distinfo compat51-x11-mipsel-5.1.tar.bz2 ./emulators/compat51-x11/distinfo compat51-x11-powerpc-5.1.tar.bz2 ./emulators/compat51-x11/distinfo compat51-x11-sparc-5.1.tar.bz2 ./emulators/compat51-x11/distinfo compat51-x11-sparc64-5.1.tar.bz2 ./emulators/xbeeb/distinfo BASIC2.rom ./emulators/xbeeb/distinfo OS-1.2.rom ./emulators/compat61/distinfo 20150430/compat61-alpha-6.1.tar.bz2 ./emulators/compat61/distinfo 20150430/compat61-arm-6.1.tar.bz2 ./emulators/compat61/distinfo 20150430/compat61-m68k-6.1.tar.bz2 ./emulators/compat61/distinfo 20150430/compat61-mips64eb-6.1.tar.bz2 ./emulators/compat61/distinfo 20150430/compat61-mips64el-6.1.tar.bz2 ./emulators/compat61/distinfo 20150430/compat61-mipseb-6.1.tar.bz2 ./emulators/compat61/distinfo 20150430/compat61-mipsel-6.1.tar.bz2 ./emulators/compat61/distinfo 20150430/compat61-powerpc-6.1.tar.bz2 ./emulators/compat61/distinfo 20150430/compat61-sparc-6.1.tar.bz2 ./emulators/compat61/distinfo 20150430/compat61-sparc64-6.1.tar.bz2 ./emulators/compat16/distinfo compat16-alpha-1.6.2.tar.bz2 ./emulators/compat16/distinfo compat16-arm-1.6.2.tar.bz2 ./emulators/compat16/distinfo compat16-m68k-1.6.2.tar.bz2 ./emulators/compat16/distinfo compat16-mipseb-1.6.2.tar.bz2 ./emulators/compat16/distinfo compat16-mipsel-1.6.2.tar.bz2 ./emulators/compat16/distinfo compat16-powerpc-1.6.2.tar.bz2 ./emulators/compat16/distinfo compat16-sparc-1.6.2.tar.bz2 ./emulators/compat16/distinfo compat16-sparc64-1.6.2.tar.bz2 ./emulators/compat16/distinfo compat16-vax-1.6.2.tar.bz2 ./emulators/compat40/distinfo 20071230/compat40-alpha-4.0.tar.bz2 ./emulators/compat40/distinfo 20071230/compat40-arm-4.0.tar.bz2 ./emulators/compat40/distinfo 20071230/compat40-m68k-4.0.tar.bz2 ./emulators/compat40/distinfo 20071230/compat40-mipseb-4.0.tar.bz2 ./emulators/compat40/distinfo 20071230/compat40-mipsel-4.0.tar.bz2 ./emulators/compat40/distinfo 20071230/compat40-powerpc-4.0.tar.bz2 ./emulators/compat40/distinfo 20071230/compat40-sh3eb-4.0.tar.bz2 ./emulators/compat40/distinfo 20071230/compat40-sh3el-4.0.tar.bz2 ./emulators/compat40/distinfo 20071230/compat40-sparc-4.0.tar.bz2 ./emulators/compat40/distinfo 20071230/compat40-sparc64-4.0.tar.bz2 ./emulators/compat20/distinfo compat20-alpha-2.1.tar.bz2 ./emulators/compat20/distinfo compat20-arm-2.1.tar.bz2 ./emulators/compat20/distinfo compat20-m68k-2.1.tar.bz2 ./emulators/compat20/distinfo compat20-mipseb-2.1.tar.bz2 ./emulators/compat20/distinfo compat20-mipsel-2.1.tar.bz2 ./emulators/compat20/distinfo compat20-powerpc-2.1.tar.bz2 ./emulators/compat20/distinfo compat20-sh3eb-2.1.tar.bz2 ./emulators/compat20/distinfo compat20-sh3el-2.1.tar.bz2 ./emulators/compat20/distinfo compat20-sparc-2.1.tar.bz2 ./emulators/compat20/distinfo compat20-sparc64-2.1.tar.bz2 ./emulators/compat20/distinfo compat20-vax-2.1.tar.bz2 ./emulators/compat50-x11/distinfo compat50-x11-sparc64-5.0.tar.bz2 ./emulators/compat12/distinfo compat12-m68k-1.2.1.tar.bz2 ./emulators/compat12/distinfo compat12-ns32k-1.2.tar.bz2 ./emulators/compat12/distinfo compat12-sparc-1.2.1.tar.bz2 ./emulators/compat15/distinfo compat15-alpha-1.5.3.tar.bz2 ./emulators/compat15/distinfo compat15-arm-1.5.3.tar.bz2 ./emulators/compat15/distinfo compat15-m68k-1.5.3.tar.bz2 ./emulators/compat15/distinfo compat15-mipsel-1.5.3.tar.bz2 ./emulators/compat15/distinfo compat15-ns32k-1.5.3.tar.bz2 ./emulators/compat15/distinfo compat15-powerpc-1.5.3.tar.bz2 ./emulators/compat15/distinfo compat15-sparc-1.5.3.tar.bz2 ./emulators/compat15/distinfo compat15-sparc64-1.5.2.tar.bz2 ./emulators/compat15/distinfo compat15-vax-1.5.3.tar.bz2 ./emulators/compat50/distinfo compat50-alpha-5.0.tar.bz2 ./emulators/compat50/distinfo compat50-arm-5.0.tar.bz2 ./emulators/compat50/distinfo compat50-m68k-5.0.tar.bz2 ./emulators/compat50/distinfo compat50-mipseb-5.0.tar.bz2 ./emulators/compat50/distinfo compat50-mipsel-5.0.tar.bz2 ./emulators/compat50/distinfo compat50-powerpc-5.0.tar.bz2 ./emulators/compat50/distinfo compat50-sparc-5.0.tar.bz2 ./emulators/compat50/distinfo compat50-sparc64-5.0.tar.bz2 ./emulators/compat16-extras/distinfo compat16-extras-sparc-1.6.2.tar.bz2 ./emulators/compat40-extras/distinfo 20071230/compat40-extras-sparc-4.0.tar.bz2 ./emulators/compat15-extras/distinfo compat15-extras-sparc-1.5.3.tar.bz2 ./emulators/compat60/distinfo 20150428/compat60-alpha-6.0.tar.bz2 ./emulators/compat60/distinfo 20150428/compat60-arm-6.0.tar.bz2 ./emulators/compat60/distinfo 20150428/compat60-m68k-6.0.tar.bz2 ./emulators/compat60/distinfo 20150428/compat60-mipseb-6.0.tar.bz2 ./emulators/compat60/distinfo 20150428/compat60-mipsel-6.0.tar.bz2 ./emulators/compat60/distinfo 20150428/compat60-powerpc-6.0.tar.bz2 ./emulators/compat60/distinfo 20150428/compat60-sparc-6.0.tar.bz2 ./emulators/compat60/distinfo 20150428/compat60-sparc64-6.0.tar.bz2 ./emulators/compat61-x11/distinfo 20150430/compat61-x11-alpha-6.1.tar.bz2 ./emulators/compat61-x11/distinfo 20150430/compat61-x11-arm-6.1.tar.bz2 ./emulators/compat61-x11/distinfo 20150430/compat61-x11-m68k-6.1.tar.bz2 ./emulators/compat61-x11/distinfo 20150430/compat61-x11-mips64eb-6.1.tar.bz2 ./emulators/compat61-x11/distinfo 20150430/compat61-x11-mips64el-6.1.tar.bz2 ./emulators/compat61-x11/distinfo 20150430/compat61-x11-mipseb-6.1.tar.bz2 ./emulators/compat61-x11/distinfo 20150430/compat61-x11-mipsel-6.1.tar.bz2 ./emulators/compat61-x11/distinfo 20150430/compat61-x11-powerpc-6.1.tar.bz2 ./emulators/compat61-x11/distinfo 20150430/compat61-x11-sparc-6.1.tar.bz2 ./emulators/compat61-x11/distinfo 20150430/compat61-x11-sparc64-6.1.tar.bz2 ./emulators/osf1_lib/distinfo netscape-4.7-3.alpha.rpm ./emulators/compat20-extras/distinfo compat20-extras-sparc-2.1.tar.bz2 ./emulators/compat30-extras/distinfo compat30-extras-sparc-3.1.tar.bz2 ./emulators/compat30-extras/distinfo compat30-extras-vax-3.1.tar.bz2 ./emulators/compat14/distinfo compat14-alpha-1.4.3.tar.bz2 ./emulators/compat14/distinfo compat14-arm-1.4.3.tar.bz2 ./emulators/compat14/distinfo compat14-m68k-1.4.3.tar.bz2 ./emulators/compat14/distinfo compat14-mipsel-1.4.3.tar.bz2 ./emulators/compat14/distinfo compat14-ns32k-1.4.2.tar.bz2 ./emulators/compat14/distinfo compat14-powerpc-1.4.3.tar.bz2 ./emulators/compat14/distinfo compat14-sparc-1.4.3.1.tar.bz2 ./emulators/compat14/distinfo compat14-vax-1.4.3.tar.bz2 ./emulators/compat51/distinfo compat51-alpha-5.1.tar.bz2 ./emulators/compat51/distinfo compat51-arm-5.1.tar.bz2 ./emulators/compat51/distinfo compat51-m68k-5.1.tar.bz2 ./emulators/compat51/distinfo compat51-mipseb-5.1.tar.bz2 ./emulators/compat51/distinfo compat51-mipsel-5.1.tar.bz2 ./emulators/compat51/distinfo compat51-powerpc-5.1.tar.bz2 ./emulators/compat51/distinfo compat51-sparc-5.1.tar.bz2 ./emulators/compat51/distinfo compat51-sparc64-5.1.tar.bz2 ./emulators/compat13/distinfo compat13-alpha-1.3.3.tar.bz2 ./emulators/compat13/distinfo compat13-arm-1.3.2.tar.bz2 ./emulators/compat13/distinfo compat13-m68k-1.3.3.tar.bz2 ./emulators/compat13/distinfo compat13-mipsel-1.3.3.tar.bz2 ./emulators/compat13/distinfo compat13-ns32k-1.3.3.tar.bz2 ./emulators/compat13/distinfo compat13-sparc-1.3.3.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-alpha-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-arm-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-armeb-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-armv6hf-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-armv7hf-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-earm-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-earmv7hfeb-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-m68k-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-mips64eb-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-mips64el-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-mipseb-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-mipsel-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-powerpc-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-sh3eb-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-sh3el-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-sparc-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-sparc64-8.0.tar.bz2 ./emulators/compat80/distinfo 20191014/compat80-vax-8.0.tar.bz2
emulators: Remove SHA1 hashes for distfiles
Update more RPMs from Suse 13.1.
Add SHA512 digests for distfiles for emulators category Problems found with existing digests: Package suse131_libSDL 1c4d17a53bece6243cb3e6dd11c36d50f851a4f4 [recorded] da39a3ee5e6b4b0d3255bfef95601890afd80709 [calculated] Package suse131_libdbus de99fcfa8e2c7ced28caf38c24d217d6037aaa56 [recorded] da39a3ee5e6b4b0d3255bfef95601890afd80709 [calculated] Package suse131_qt4 94daff738912c96ed8878ce1a131cd49fb379206 [recorded] 886206018431aee9f8a01e1fb7e46973e8dca9d9 [calculated] Problems found locating distfiles for atari800, compat12, compat 13, compat14, compat15, compat20, compat30, compat40, compat50, compat50-x11, compat51, compat51-x11, compat60, compat61, compat61-x11, fmsx, osf1_lib, vice, xbeeb, xm7. Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
Pullup ticket #4787 - requested by wiz emulators/suse131_base: security update emulators/suse131_freetype2: security update emulators/suse131_glib2: security update emulators/suse131_glx: security update emulators/suse131_gtk2: security update emulators/suse131_krb5: security update emulators/suse131_libSDL: security update emulators/suse131_libcups: security update emulators/suse131_libcurl: security update emulators/suse131_libdbus: security update emulators/suse131_libidn: security update emulators/suse131_libjpeg: security update emulators/suse131_libsndfile: security update emulators/suse131_libssh: security update emulators/suse131_libtiff: security update emulators/suse131_locale: security update emulators/suse131_mozilla-nspr: security update emulators/suse131_mozilla-nss: security update emulators/suse131_openssl: security update emulators/suse131_qt4: security update emulators/suse131_x11: security update Revisions pulled up: - emulators/suse131_base/Makefile 1.15 - emulators/suse131_base/distinfo 1.11 - emulators/suse131_freetype2/Makefile 1.5 - emulators/suse131_freetype2/distinfo 1.2 - emulators/suse131_glib2/Makefile 1.5 - emulators/suse131_glib2/distinfo 1.2 - emulators/suse131_glx/Makefile 1.10 - emulators/suse131_glx/distinfo 1.5 - emulators/suse131_gtk2/Makefile 1.11 - emulators/suse131_gtk2/distinfo 1.7 - emulators/suse131_krb5/Makefile 1.7 - emulators/suse131_krb5/distinfo 1.4 - emulators/suse131_libSDL/Makefile 1.5 - emulators/suse131_libSDL/distinfo 1.2 - emulators/suse131_libcups/Makefile 1.5 - emulators/suse131_libcups/distinfo 1.2 - emulators/suse131_libcurl/Makefile 1.10 - emulators/suse131_libcurl/distinfo 1.7 - emulators/suse131_libdbus/Makefile 1.12 - emulators/suse131_libdbus/distinfo 1.8 - emulators/suse131_libidn/Makefile 1.5 - emulators/suse131_libidn/distinfo 1.2 - emulators/suse131_libjpeg/Makefile 1.5 - emulators/suse131_libjpeg/distinfo 1.2 - emulators/suse131_libsndfile/Makefile 1.6 - emulators/suse131_libsndfile/distinfo 1.3 - emulators/suse131_libssh/Makefile 1.5 - emulators/suse131_libssh/distinfo 1.2 - emulators/suse131_libtiff/Makefile 1.6 - emulators/suse131_libtiff/distinfo 1.3 - emulators/suse131_locale/Makefile 1.5 - emulators/suse131_locale/distinfo 1.2 - emulators/suse131_mozilla-nspr/Makefile 1.8 - emulators/suse131_mozilla-nspr/distinfo 1.5 - emulators/suse131_mozilla-nss/Makefile 1.9 - emulators/suse131_mozilla-nss/distinfo 1.6 - emulators/suse131_openssl/Makefile 1.17 - emulators/suse131_openssl/distinfo 1.14 - emulators/suse131_qt4/Makefile 1.8 - emulators/suse131_qt4/distinfo 1.5 - emulators/suse131_x11/Makefile 1.11 - emulators/suse131_x11/distinfo 1.7 --- Module Name: pkgsrc Committed By: wiz Date: Tue Jul 28 08:49:16 UTC 2015 Modified Files: pkgsrc/emulators/suse131_base: Makefile distinfo pkgsrc/emulators/suse131_freetype2: Makefile distinfo pkgsrc/emulators/suse131_glib2: Makefile distinfo pkgsrc/emulators/suse131_glx: Makefile distinfo pkgsrc/emulators/suse131_gtk2: Makefile distinfo pkgsrc/emulators/suse131_krb5: Makefile distinfo pkgsrc/emulators/suse131_libSDL: Makefile distinfo pkgsrc/emulators/suse131_libcups: Makefile distinfo pkgsrc/emulators/suse131_libcurl: Makefile distinfo pkgsrc/emulators/suse131_libdbus: Makefile distinfo pkgsrc/emulators/suse131_libidn: Makefile distinfo pkgsrc/emulators/suse131_libjpeg: Makefile distinfo pkgsrc/emulators/suse131_libsndfile: Makefile distinfo pkgsrc/emulators/suse131_libssh: Makefile distinfo pkgsrc/emulators/suse131_libtiff: Makefile distinfo pkgsrc/emulators/suse131_locale: Makefile distinfo pkgsrc/emulators/suse131_mozilla-nspr: Makefile distinfo pkgsrc/emulators/suse131_mozilla-nss: Makefile distinfo pkgsrc/emulators/suse131_openssl: Makefile distinfo pkgsrc/emulators/suse131_qt4: Makefile distinfo pkgsrc/emulators/suse131_x11: Makefile distinfo Log Message: Update RPMs from latest openSUSE 13.1 files. >From Rin Okuyama in PR 50082.
Update RPMs from latest openSUSE 13.1 files. From Rin Okuyama in PR 50082.
Apply following updates to suse131_mozilla-nss, bump PKGREVISION to 4.
==============================================================================
openSUSE Security Update: MozillaFirefox to Firefox 32
______________________________________________________________________________
Announcement ID: openSUSE-SU-2014:1099-1
Rating: moderate
References: #894201 #894370
Cross-References: CVE-2014-1553 CVE-2014-1562 CVE-2014-1563
CVE-2014-1564 CVE-2014-1565 CVE-2014-1567
Affected Products:
openSUSE 13.1
openSUSE 12.3
______________________________________________________________________________
An update that fixes 6 vulnerabilities is now available.
Description:
...
Mozilla NSS was updated to 3.16.4: Notable Changes:
* The following 1024-bit root CA certificate was restored to allow more
time to develop a better transition strategy for affected sites. It was
removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
forum led to the decision to keep this root included longer in order to
give website administrators more time to update their web servers.
- CN = GTE CyberTrust Global Root
* In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
intermediate CA certificate has been included, without explicit trust.
The intention is to mitigate the effects of the previous removal of the
1024-bit Entrust.net root certificate, because many public Internet
sites still use the "USERTrust Legacy Secure Server CA" intermediate
certificate that is signed by the 1024-bit Entrust.net root certificate.
The inclusion of the intermediate certificate is a temporary measure to
allow those sites to function, by allowing them to find a trust path to
another 2048-bit root CA certificate. The temporarily included
intermediate certificate expires November 1, 2015.
==============================================================================
openSUSE Security Update: mozilla-nss: update to avoid signature forgery
______________________________________________________________________________
Announcement ID: openSUSE-SU-2014:1232-1
Rating: critical
References: #897890
Cross-References: CVE-2014-1568
Affected Products:
openSUSE 13.1
openSUSE 12.3
______________________________________________________________________________
An update that fixes one vulnerability is now available.
Description:
Mozilla NSS is vulnerable to a variant of a signature forgery attack
previously published by Daniel Bleichenbacher. This is due to lenient
parsing of ASN.1 values involved in a signature and could lead to the
forging of RSA certificates.
==============================================================================
openSUSE Security Update: update for firefox, mozilla-nspr, mozilla-nss and seamonkey
______________________________________________________________________________
Announcement ID: openSUSE-SU-2014:1345-1
Rating: moderate
References: #894370 #896624 #897890 #900941 #901213
Cross-References: CVE-2014-1554 CVE-2014-1574 CVE-2014-1575
CVE-2014-1576 CVE-2014-1577 CVE-2014-1578
CVE-2014-1580 CVE-2014-1581 CVE-2014-1582
CVE-2014-1583 CVE-2014-1584 CVE-2014-1585
CVE-2014-1586
Affected Products:
openSUSE 13.1
______________________________________________________________________________
An update that fixes 13 vulnerabilities is now available.
Description:
...
Changes in mozilla-nss:
- update to 3.17.1 (bnc#897890)
* Change library's signature algorithm default to SHA256
* Add support for draft-ietf-tls-downgrade-scsv
* Add clang-cl support to the NSS build system
* Implement TLS 1.3:
* Part 1. Negotiate TLS 1.3
* Part 2. Remove deprecated cipher suites andcompression.
* Add support for little-endian powerpc64
- update to 3.17
* required for Firefox 33 New functionality:
* When using ECDHE, the TLS server code may be configured to generate a
fresh ephemeral ECDH key for each handshake, by setting the
SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means the
server's ephemeral ECDH key is reused for multiple handshakes. This
option does not affect the TLS client code, which always generates a
fresh ephemeral ECDH key for each handshake. New Macros
* SSL_REUSE_SERVER_ECDHE_KEY Notable Changes:
* The manual pages for the certutil and pp tools have been updated to
document the new parameters that had been added in NSS 3.16.2.
* On Windows, the new build variable USE_STATIC_RTL can be used to
specify the static C runtime library should be used. By default the
dynamic C runtime library is used.
Pullup ticket #4468 - requested by obache emulators/suse131_mozilla-nss: security update Revisions pulled up: - emulators/suse131_mozilla-nss/Makefile 1.4 - emulators/suse131_mozilla-nss/distinfo 1.4 --- Module Name: pkgsrc Committed By: obache Date: Fri Aug 1 09:28:47 UTC 2014 Modified Files: pkgsrc/emulators/suse131_mozilla-nss: Makefile distinfo Log Message: Appy openSUSE-SU-2014:0939-1, fixes CVE-2014-1544. Bump PKGREVISION.
Appy openSUSE-SU-2014:0939-1, fixes CVE-2014-1544. Bump PKGREVISION.
Pullup ticket #4398 - requested by obache
emulators/suse131_mozilla-nss: security update
Revisions pulled up:
- emulators/suse131_mozilla-nss/Makefile 1.2-1.3
- emulators/suse131_mozilla-nss/distinfo 1.2-1.3
---
Module Name: pkgsrc
Committed By: obache
Date: Fri Apr 4 10:08:21 UTC 2014
Modified Files:
pkgsrc/emulators/suse131_mozilla-nss: Makefile distinfo
Log Message:
Update suse131_mozilla-nss RPM to 3.15.5-16.1 from openSUSE-SU-2014:0448-1.
Changes in mozilla-nss:
- update to 3.15.5
* required for Firefox 28
* export FREEBL_LOWHASH to get the correct default
headers (bnc#865539) New functionality
* Added support for the TLS application layer protocol
negotiation (ALPN) extension. Two SSL socket options,
SSL_ENABLE_NPN and SSL_ENABLE_ALPN, can be used to
control whether NPN or ALPN (or both) should be used
for application layer protocol negotiation.
* Added the TLS padding extension. The extension type
value is 35655, which may change when an official
extension type value is assigned by IANA. NSS
automatically adds the padding extension to ClientHello
when necessary.
* Added a new macro CERT_LIST_TAIL, defined in certt.h,
for getting the tail of a CERTCertList. Notable Changes
* bmo#950129: Improve the OCSP fetching policy when
verifying OCSP responses
* bmo#949060: Validate the iov input argument (an array
of PRIOVec structures) of ssl_WriteV (called via
PR_Writev). Applications should still take care when
converting struct iov to PRIOVec because the iov_len
members of the two structures have different types
(size_t vs. int). size_t is unsigned and may be larger
than int.
Bump PKGREVISION.
---
Module Name: pkgsrc
Committed By: obache
Date: Sat May 3 02:19:27 UTC 2014
Modified Files:
pkgsrc/emulators/suse131_mozilla-nss: Makefile distinfo
Log Message:
Apply Security Update: openSUSE-SU-2014:0599-1
update for MozillaFirefox
Description:
This is also a mozilla-nss update to version 3.16:
* required for Firefox 29
* bmo#903885 - (CVE-2014-1492) In a wildcard certificate,
the wildcard character should not be embedded within
the U-label of an internationalized domain name. See
the last bullet point in RFC 6125, Section 7.2.
* Supports the Linux x32 ABI. To build for the Linux x32
target, set the environment variable USE_X32=1 when
building NSS. New Functions:
* NSS_CMSSignerInfo_Verify New Macros
* TLS_RSA_WITH_RC4_128_SHA,
TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc., cipher suites that
were first defined in SSL 3.0 can now be referred to
with their official IANA names in TLS, with the TLS_
prefix. Previously, they had to be referred to with
their names in SSL 3.0, with the SSL_ prefix. Notable
Changes:
* ECC is enabled by default. It is no longer necessary to
set the environment variable NSS_ENABLE_ECC=1 when
building NSS. To disable ECC, set the environment
variable NSS_DISABLE_ECC=1 when building NSS.
* libpkix should not include the common name of CA as DNS
names when evaluating name constraints.
* AESKeyWrap_Decrypt should not return SECSuccess for
invalid keys.
* Fix a memory corruption in sec_pkcs12_new_asafe.
* If the NSS_SDB_USE_CACHE environment variable is set,
skip the runtime test sdb_measureAccess.
* The built-in roots module has been updated to version
1.97, which adds, removes, and distrusts several
certificates.
* The atob utility has been improved to automatically
ignore lines of text that aren't in base64 format.
* The certutil utility has been improved to support
creation of version 1 and version 2 certificates, in
addition to the existing version 3 support.
Bump PKGREVISION.
Apply Security Update: openSUSE-SU-2014:0599-1 update for MozillaFirefox Description: This is also a mozilla-nss update to version 3.16: * required for Firefox 29 * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard character should not be embedded within the U-label of an internationalized domain name. See the last bullet point in RFC 6125, Section 7.2. * Supports the Linux x32 ABI. To build for the Linux x32 target, set the environment variable USE_X32=1 when building NSS. New Functions: * NSS_CMSSignerInfo_Verify New Macros * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc., cipher suites that were first defined in SSL 3.0 can now be referred to with their official IANA names in TLS, with the TLS_ prefix. Previously, they had to be referred to with their names in SSL 3.0, with the SSL_ prefix. Notable Changes: * ECC is enabled by default. It is no longer necessary to set the environment variable NSS_ENABLE_ECC=1 when building NSS. To disable ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS. * libpkix should not include the common name of CA as DNS names when evaluating name constraints. * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys. * Fix a memory corruption in sec_pkcs12_new_asafe. * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime test sdb_measureAccess. * The built-in roots module has been updated to version 1.97, which adds, removes, and distrusts several certificates. * The atob utility has been improved to automatically ignore lines of text that aren't in base64 format. * The certutil utility has been improved to support creation of version 1 and version 2 certificates, in addition to the existing version 3 support. Bump PKGREVISION.
Update suse131_mozilla-nss RPM to 3.15.5-16.1 from openSUSE-SU-2014:0448-1. Changes in mozilla-nss: - update to 3.15.5 * required for Firefox 28 * export FREEBL_LOWHASH to get the correct default headers (bnc#865539) New functionality * Added support for the TLS application layer protocol negotiation (ALPN) extension. Two SSL socket options, SSL_ENABLE_NPN and SSL_ENABLE_ALPN, can be used to control whether NPN or ALPN (or both) should be used for application layer protocol negotiation. * Added the TLS padding extension. The extension type value is 35655, which may change when an official extension type value is assigned by IANA. NSS automatically adds the padding extension to ClientHello when necessary. * Added a new macro CERT_LIST_TAIL, defined in certt.h, for getting the tail of a CERTCertList. Notable Changes * bmo#950129: Improve the OCSP fetching policy when verifying OCSP responses * bmo#949060: Validate the iov input argument (an array of PRIOVec structures) of ssl_WriteV (called via PR_Writev). Applications should still take care when converting struct iov to PRIOVec because the iov_len members of the two structures have different types (size_t vs. int). size_t is unsigned and may be larger than int. Bump PKGREVISION.
Added suse131_mozilla-{nspr,nss} package to support nspr and nss linux module.
Tyey are in base package for suse121.