[pkgsrc/trunk]: pkgsrc/devel/nss security update fixing:

[spz <spz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/d4489b5646ae
branches:  trunk
changeset: 639820:d4489b5646ae
user:      spz <spz%pkgsrc.org@localhost>
date:      Fri Sep 26 03:25:22 2014 +0000

description:
security update fixing:
- Incorrect DigestInfo validation in NSS (CVE-2014-1568)
- RSA signature verification vulnerabilities in parsing of DigestInfo
(see https://www.mozilla.org/security/announce/2014/mfsa2014-73.html)

diffstat:

 devel/nss/Makefile |   4 ++--
 devel/nss/PLIST    |  19 ++++++++++---------
 devel/nss/distinfo |   8 ++++----
 3 files changed, 16 insertions(+), 15 deletions(-)

diffs (67 lines):

diff -r 892c9faf71d3 -r d4489b5646ae devel/nss/Makefile
--- a/devel/nss/Makefile        Thu Sep 25 21:47:06 2014 +0000
+++ b/devel/nss/Makefile        Fri Sep 26 03:25:22 2014 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.86 2014/08/12 09:43:06 markd Exp $
+# $NetBSD: Makefile,v 1.87 2014/09/26 03:25:22 spz Exp $
 
 DISTNAME=              nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=           3.16.4
+NSS_RELEASE=           3.16.5
 CATEGORIES=            security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_RELEASE:S/.0$//:S/./_/g}_RTM/src/}
 
diff -r 892c9faf71d3 -r d4489b5646ae devel/nss/PLIST
--- a/devel/nss/PLIST   Thu Sep 25 21:47:06 2014 +0000
+++ b/devel/nss/PLIST   Fri Sep 26 03:25:22 2014 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.12 2012/12/15 09:48:00 ryoon Exp $
+@comment $NetBSD: PLIST,v 1.13 2014/09/26 03:25:22 spz Exp $
 include/nss/dbm/cdefs.h
 include/nss/dbm/mcom_db.h
 include/nss/dbm/ncompat.h
@@ -66,6 +66,7 @@
 include/nss/nss/pkcs11u.h
 include/nss/nss/pkcs12.h
 include/nss/nss/pkcs12t.h
+include/nss/nss/pkcs1sig.h
 include/nss/nss/pkcs7t.h
 include/nss/nss/portreg.h
 include/nss/nss/preenc.h
@@ -98,12 +99,12 @@
 include/nss/nss/utilparst.h
 include/nss/nss/utilrename.h
 lib/nss/libcrmf.a
-lib/nss/libfreebl3.${SO_SUFFIX}
-lib/nss/libnss3.${SO_SUFFIX}
-lib/nss/libnssckbi.${SO_SUFFIX}
-lib/nss/libnssdbm3.${SO_SUFFIX}
-lib/nss/libnssutil3.${SO_SUFFIX}
-lib/nss/libsmime3.${SO_SUFFIX}
-lib/nss/libsoftokn3.${SO_SUFFIX}
-lib/nss/libssl3.${SO_SUFFIX}
+lib/nss/libfreebl3.so
+lib/nss/libnss3.so
+lib/nss/libnssckbi.so
+lib/nss/libnssdbm3.so
+lib/nss/libnssutil3.so
+lib/nss/libsmime3.so
+lib/nss/libsoftokn3.so
+lib/nss/libssl3.so
 lib/pkgconfig/nss.pc
diff -r 892c9faf71d3 -r d4489b5646ae devel/nss/distinfo
--- a/devel/nss/distinfo        Thu Sep 25 21:47:06 2014 +0000
+++ b/devel/nss/distinfo        Fri Sep 26 03:25:22 2014 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.40 2014/08/12 09:43:06 markd Exp $
+$NetBSD: distinfo,v 1.41 2014/09/26 03:25:22 spz Exp $
 
-SHA1 (nss-3.16.4.tar.gz) = ee2c8601041b938ecfcba520280dc3059b6cbffd
-RMD160 (nss-3.16.4.tar.gz) = 958e1ed8fa110f1adeb149c164338cf42f281ce3
-Size (nss-3.16.4.tar.gz) = 6428795 bytes
+SHA1 (nss-3.16.5.tar.gz) = bec488835954698e7b19149a15205db299cd13de
+RMD160 (nss-3.16.5.tar.gz) = 19630a0815d69ee5959b562d7849d35d677c6329
+Size (nss-3.16.5.tar.gz) = 6429830 bytes
 SHA1 (patch-am) = ee4c4beeb120397852fc4b06b7dd54534d0d5ac5
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 0a09fd2abb8674a2d301f1b6a5331af5db94178f