diff options
author | ryoon <ryoon@pkgsrc.org> | 2014-03-22 23:32:46 +0000 |
---|---|---|
committer | ryoon <ryoon@pkgsrc.org> | 2014-03-22 23:32:46 +0000 |
commit | d2b65df1d71464c57d32c81a63647d84db7aa857 (patch) | |
tree | 856b185686d63900c92e3f130c3c561ce84d79a1 /devel/nss | |
parent | ba168cc795ed37f9ddbae632fd9b2e312d68e651 (diff) | |
download | pkgsrc-d2b65df1d71464c57d32c81a63647d84db7aa857.tar.gz |
Update to 3.16
* Improve 3.16 like 2 number version support (firefox etc. requires 3 number
version string)
Changelog:
From https://developer.mozilla.org/en-US/docs/NSS/NSS_3.16_release_notes
The following security-relevant bug has been resolved.
Users are encouraged to upgrade immediately.
* Bug 903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
character should not be embedded within the U-label of an
internationalized domain name. See the last bullet point in RFC 6125,
Section 7.2.
New functionality:
* Supports the Linux x32 ABI. To build for the Linux x32 target, set
the environment variable USE_X32=1 when building NSS.
New Functions:
* NSS_CMSSignerInfo_Verify
New Macros
* TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
cipher suites that were first defined in SSL 3.0 can now be referred
to with their official IANA names in TLS, with the TLS_ prefix.
Previously, they had to be referred to with their names in SSL 3.0,
with the SSL_ prefix.
Notable Changes:
* ECC is enabled by default. It is no longer necessary to set the
environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
* libpkix should not include the common name of CA as DNS names when
evaluating name constraints.
* AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
* Fix a memory corruption in sec_pkcs12_new_asafe.
* If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
test sdb_measureAccess.
* The built-in roots module has been updated to version 1.97, which
adds, removes, and distrusts several certificates.
* The atob utility has been improved to automatically ignore lines of
text that aren't in base64 format.
* The certutil utility has been improved to support creation of
version 1 and version 2 certificates, in addition to the existing
version 3 support.
Diffstat (limited to 'devel/nss')
-rw-r--r-- | devel/nss/Makefile | 10 | ||||
-rw-r--r-- | devel/nss/distinfo | 8 |
2 files changed, 9 insertions, 9 deletions
diff --git a/devel/nss/Makefile b/devel/nss/Makefile index 1e968f0466f..8b5b524f3c3 100644 --- a/devel/nss/Makefile +++ b/devel/nss/Makefile @@ -1,7 +1,7 @@ -# $NetBSD: Makefile,v 1.77 2014/03/13 11:08:50 jperkin Exp $ +# $NetBSD: Makefile,v 1.78 2014/03/22 23:32:46 ryoon Exp $ -DISTNAME= nss-${NSS_RELEASE} -NSS_RELEASE= 3.15.5 +DISTNAME= nss-${NSS_RELEASE:S/.0$//} +NSS_RELEASE= 3.16.0 CATEGORIES= security MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_RELEASE:S/./_/g}_RTM/src/} @@ -77,8 +77,8 @@ do-install: set -e; \ { ${ECHO} "Name: NSS"; \ ${ECHO} "Description: Mozilla Network Security Services"; \ - ${ECHO} "Version: ${PKGVERSION_NOREV}"; \ - ${ECHO} "Requires: nspr >= 4.8.2"; \ + ${ECHO} "Version: ${NSS_RELEASE}"; \ + ${ECHO} "Requires: nspr >= 4.10.3"; \ ${ECHO} "Cflags: -I${PREFIX}/include/nss/nss -I${PREFIX}/include/nss"; \ ${ECHO} "Libs: -L${PREFIX}/lib/nss" \ "${COMPILER_RPATH_FLAG}${PREFIX}/lib/nss" \ diff --git a/devel/nss/distinfo b/devel/nss/distinfo index c1156c97aa6..7f55e9c3080 100644 --- a/devel/nss/distinfo +++ b/devel/nss/distinfo @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.33 2014/03/10 18:42:34 ryoon Exp $ +$NetBSD: distinfo,v 1.34 2014/03/22 23:32:46 ryoon Exp $ -SHA1 (nss-3.15.5.tar.gz) = c8d34a33cf5782d35df1aa78cdb38707d7bfc5fe -RMD160 (nss-3.15.5.tar.gz) = 65bf29ef4671d52b9d5f75068043fcc57f7f64bb -Size (nss-3.15.5.tar.gz) = 6367893 bytes +SHA1 (nss-3.16.tar.gz) = 981dc6ef2f1e69ec7e2b277ce27c7005e9837f95 +RMD160 (nss-3.16.tar.gz) = 4fabd056a4bf9312db82d46873d91d42c7195134 +Size (nss-3.16.tar.gz) = 6378110 bytes SHA1 (patch-am) = ee4c4beeb120397852fc4b06b7dd54534d0d5ac5 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69 SHA1 (patch-md) = 0a09fd2abb8674a2d301f1b6a5331af5db94178f |