CVS commit: pkgsrc/devel/nss

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Wed Dec 12 14:02:01 UTC 2018

Modified Files:
        pkgsrc/devel/nss: Makefile distinfo

Log Message:
Update to 3.41

New functionality:
* Bug 1252891 - Implemented EKU handling for IPsec IKE.
* Bug 1423043 - Enable half-closed states for TLS.
* Bug 1493215 - Enabled the following ciphersuites by default:
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384

Notable changes:
* The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root

* The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3

Bugs fixed in NSS 3.41:
* Bug 1412829, Reject empty supported_signature_algorithms in Certificate
  Request in TLS 1.2
* Bug 1485864 - Cache side-channel variant of the Bleichenbacher attack
  (CVE-2018-12404)
* Bug 1481271 - Resend the same ticket in ClientHello after HelloRetryRequest
* Bug 1493769 - Set session_id for external resumption tokens
* Bug 1507179 - Reject CCS after handshake is complete in TLS 1.3


To generate a diff of this commit:
cvs rdiff -u -r1.160 -r1.161 pkgsrc/devel/nss/Makefile
cvs rdiff -u -r1.91 -r1.92 pkgsrc/devel/nss/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/nss/Makefile
diff -u pkgsrc/devel/nss/Makefile:1.160 pkgsrc/devel/nss/Makefile:1.161
--- pkgsrc/devel/nss/Makefile:1.160     Sun Dec  9 18:52:24 2018
+++ pkgsrc/devel/nss/Makefile   Wed Dec 12 14:02:01 2018
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.160 2018/12/09 18:52:24 adam Exp $
+# $NetBSD: Makefile,v 1.161 2018/12/12 14:02:01 ryoon Exp $
 
 DISTNAME=              nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=           3.40.0
-PKGREVISION=           1
+NSS_RELEASE=           3.41.0
 CATEGORIES=            security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 

Index: pkgsrc/devel/nss/distinfo
diff -u pkgsrc/devel/nss/distinfo:1.91 pkgsrc/devel/nss/distinfo:1.92
--- pkgsrc/devel/nss/distinfo:1.91      Sun Nov  4 00:33:27 2018
+++ pkgsrc/devel/nss/distinfo   Wed Dec 12 14:02:01 2018
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.91 2018/11/04 00:33:27 ryoon Exp $
+$NetBSD: distinfo,v 1.92 2018/12/12 14:02:01 ryoon Exp $
 
-SHA1 (nss-3.40.tar.gz) = 735b8b15134cf84d730c19b0e2f891b0fd7b5e9d
-RMD160 (nss-3.40.tar.gz) = 77b06721a1563a5360ed984d26e78b2d58febaf9
-SHA512 (nss-3.40.tar.gz) = 3781c94595126757c95ea82c3134eb3f06f4c3814e9ed2bfceae22623a413d622349d08c6779e1230b2dbebd1f07aba58094fe83dcddebb3e043481e7a478239
-Size (nss-3.40.tar.gz) = 23308315 bytes
+SHA1 (nss-3.41.tar.gz) = 69c60e8d3190573dbcbc01f50e68e3ceb7d92522
+RMD160 (nss-3.41.tar.gz) = 5e095b56c8e5f17d9dda092305f2ae19dbd16b47
+SHA512 (nss-3.41.tar.gz) = b5a43fe86ded664002fd714c493d9222a64539cd6139b64720625d1742fec5100712cbe401c90c79196e9cbad9ec07d9b4f0f517ce34e4b207beaa3e01c9e114
+Size (nss-3.41.tar.gz) = 23319563 bytes
 SHA1 (patch-am) = bab47640c0d25629f43578e7b788859418b27ecd
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1