pkgsrc-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[pkgsrc/trunk]: pkgsrc/devel/nss Update to 3.41
details: https://anonhg.NetBSD.org/pkgsrc/rev/51d73432b784
branches: trunk
changeset: 388675:51d73432b784
user: ryoon <ryoon%pkgsrc.org@localhost>
date: Wed Dec 12 14:02:01 2018 +0000
description:
Update to 3.41
New functionality:
* Bug 1252891 - Implemented EKU handling for IPsec IKE.
* Bug 1423043 - Enable half-closed states for TLS.
* Bug 1493215 - Enabled the following ciphersuites by default:
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
TLS_RSA_WITH_AES_256_GCM_SHA384
Notable changes:
* The following CA certificates were added:
CN = Certigna Root CA
CN = GTS Root R1
CN = GTS Root R2
CN = GTS Root R3
CN = GTS Root R4
CN = UCA Global G2 Root
CN = UCA Extended Validation Root
* The following CA certificates were removed:
CN = AC Ra?z Certic?mara S.A.
CN = Certplus Root CA G1
CN = Certplus Root CA G2
CN = OpenTrust Root CA G1
CN = OpenTrust Root CA G2
CN = OpenTrust Root CA G3
Bugs fixed in NSS 3.41:
* Bug 1412829, Reject empty supported_signature_algorithms in Certificate
Request in TLS 1.2
* Bug 1485864 - Cache side-channel variant of the Bleichenbacher attack
(CVE-2018-12404)
* Bug 1481271 - Resend the same ticket in ClientHello after HelloRetryRequest
* Bug 1493769 - Set session_id for external resumption tokens
* Bug 1507179 - Reject CCS after handshake is complete in TLS 1.3
diffstat:
devel/nss/Makefile | 5 ++---
devel/nss/distinfo | 10 +++++-----
2 files changed, 7 insertions(+), 8 deletions(-)
diffs (32 lines):
diff -r c92f38bf05b3 -r 51d73432b784 devel/nss/Makefile
--- a/devel/nss/Makefile Wed Dec 12 12:55:33 2018 +0000
+++ b/devel/nss/Makefile Wed Dec 12 14:02:01 2018 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.160 2018/12/09 18:52:24 adam Exp $
+# $NetBSD: Makefile,v 1.161 2018/12/12 14:02:01 ryoon Exp $
DISTNAME= nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE= 3.40.0
-PKGREVISION= 1
+NSS_RELEASE= 3.41.0
CATEGORIES= security
MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
diff -r c92f38bf05b3 -r 51d73432b784 devel/nss/distinfo
--- a/devel/nss/distinfo Wed Dec 12 12:55:33 2018 +0000
+++ b/devel/nss/distinfo Wed Dec 12 14:02:01 2018 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.91 2018/11/04 00:33:27 ryoon Exp $
+$NetBSD: distinfo,v 1.92 2018/12/12 14:02:01 ryoon Exp $
-SHA1 (nss-3.40.tar.gz) = 735b8b15134cf84d730c19b0e2f891b0fd7b5e9d
-RMD160 (nss-3.40.tar.gz) = 77b06721a1563a5360ed984d26e78b2d58febaf9
-SHA512 (nss-3.40.tar.gz) = 3781c94595126757c95ea82c3134eb3f06f4c3814e9ed2bfceae22623a413d622349d08c6779e1230b2dbebd1f07aba58094fe83dcddebb3e043481e7a478239
-Size (nss-3.40.tar.gz) = 23308315 bytes
+SHA1 (nss-3.41.tar.gz) = 69c60e8d3190573dbcbc01f50e68e3ceb7d92522
+RMD160 (nss-3.41.tar.gz) = 5e095b56c8e5f17d9dda092305f2ae19dbd16b47
+SHA512 (nss-3.41.tar.gz) = b5a43fe86ded664002fd714c493d9222a64539cd6139b64720625d1742fec5100712cbe401c90c79196e9cbad9ec07d9b4f0f517ce34e4b207beaa3e01c9e114
+Size (nss-3.41.tar.gz) = 23319563 bytes
SHA1 (patch-am) = bab47640c0d25629f43578e7b788859418b27ecd
SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1
Home |
Main Index |
Thread Index |
Old Index