---
- branch: MAIN
  date: Fri May 29 14:19:25 UTC 2015
  files:
  - new: '1.97'
    old: '1.96'
    path: pkgsrc/devel/nss/Makefile
    pathrev: pkgsrc/devel/nss/Makefile@1.97
    type: modified
  - new: '1.48'
    old: '1.47'
    path: pkgsrc/devel/nss/distinfo
    pathrev: pkgsrc/devel/nss/distinfo@1.48
    type: modified
  id: 20150529T141925Z.80a9bdad774a309c07f68f75b93c8e75354c1f03
  log: |
    Update to 3.19.1

    Changelog:
    Network Security Services (NSS) 3.19.1 is a patch release
    for NSS 3.19.

    No new functionality is introduced in this release. This patch
    release includes a fix for the recently published logjam attack.

    Notable Changes:
    * The minimum strength of keys that libssl will accept for
      finite field algorithms (RSA, Diffie-Hellman, and DSA) have
      been increased to 1023 bits (bug 1138554).
    * NSS reports the bit length of keys more accurately.  Thus,
      the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
      functions could report smaller values for values that have
      leading zero values. This affects the key strength values that
      are reported by SSL_GetChannelInfo.

    The NSS development team would like to thank Matthew Green and
    Karthikeyan Bhargavan for responsibly disclosing the issue in
    bug 1138554.

    The HG tag is NSS_3_19_1_RTM. NSS 3.19.1 requires NSPR 4.10.8 or newer.
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/devel/nss'
  unixtime: '1432909165'
  user: ryoon