Fri May 29 14:19:25 2015 UTC ()
Update to 3.19.1

Changelog:
Network Security Services (NSS) 3.19.1 is a patch release
for NSS 3.19.

No new functionality is introduced in this release. This patch
release includes a fix for the recently published logjam attack.

Notable Changes:
* The minimum strength of keys that libssl will accept for
  finite field algorithms (RSA, Diffie-Hellman, and DSA) have
  been increased to 1023 bits (bug 1138554).
* NSS reports the bit length of keys more accurately.  Thus,
  the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
  functions could report smaller values for values that have
  leading zero values. This affects the key strength values that
  are reported by SSL_GetChannelInfo.

The NSS development team would like to thank Matthew Green and
Karthikeyan Bhargavan for responsibly disclosing the issue in
bug 1138554.

The HG tag is NSS_3_19_1_RTM. NSS 3.19.1 requires NSPR 4.10.8 or newer.


(ryoon)
diff -r1.96 -r1.97 pkgsrc/devel/nss/Makefile
diff -r1.47 -r1.48 pkgsrc/devel/nss/distinfo
cvs diff -r1.96 -r1.97 pkgsrc/devel/nss/Makefile (expand / switch to unified diff)

--- pkgsrc/devel/nss/Makefile 2015/05/05 21:42:19 1.96
+++ pkgsrc/devel/nss/Makefile 2015/05/29 14:19:25 1.97
@@ -1,17 +1,17 @@ @@ -1,17 +1,17 @@
1# $NetBSD: Makefile,v 1.96 2015/05/05 21:42:19 ryoon Exp $ 1# $NetBSD: Makefile,v 1.97 2015/05/29 14:19:25 ryoon Exp $
2 2
3DISTNAME= nss-${NSS_RELEASE:S/.0$//} 3DISTNAME= nss-${NSS_RELEASE:S/.0$//}
4NSS_RELEASE= 3.19.0 4NSS_RELEASE= 3.19.1
5CATEGORIES= security 5CATEGORIES= security
6MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_RELEASE:S/.0$//:S/./_/g}_RTM/src/} 6MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_RELEASE:S/.0$//:S/./_/g}_RTM/src/}
7 7
8MAINTAINER= pkgsrc-users@NetBSD.org 8MAINTAINER= pkgsrc-users@NetBSD.org
9HOMEPAGE= http://www.mozilla.org/projects/security/pki/nss/ 9HOMEPAGE= http://www.mozilla.org/projects/security/pki/nss/
10COMMENT= Libraries to support development of security-enabled applications 10COMMENT= Libraries to support development of security-enabled applications
11LICENSE= mpl-2.0 11LICENSE= mpl-2.0
12 12
13CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}nss/tests/libpkix/libpkix.sh 13CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}nss/tests/libpkix/libpkix.sh
14CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}nss/tests/multinit/multinit.sh 14CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}nss/tests/multinit/multinit.sh
15CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}js/src/configure 15CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}js/src/configure
16CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}configure 16CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}configure
17 17
cvs diff -r1.47 -r1.48 pkgsrc/devel/nss/distinfo (expand / switch to unified diff)

--- pkgsrc/devel/nss/distinfo 2015/05/05 21:42:19 1.47
+++ pkgsrc/devel/nss/distinfo 2015/05/29 14:19:25 1.48
@@ -1,18 +1,18 @@ @@ -1,18 +1,18 @@
1$NetBSD: distinfo,v 1.47 2015/05/05 21:42:19 ryoon Exp $ 1$NetBSD: distinfo,v 1.48 2015/05/29 14:19:25 ryoon Exp $
2 2
3SHA1 (nss-3.19.tar.gz) = 5c344b28abe7e0529d58373c5005ccfc66869716 3SHA1 (nss-3.19.1.tar.gz) = 9e20dee2137265e61ce8a70daaf44fe0315fdb81
4RMD160 (nss-3.19.tar.gz) = c3685a9dbd52bf7e64139c518386e3e2b677458b 4RMD160 (nss-3.19.1.tar.gz) = aeef3cd93419dcc9e50c9fa648c6ac113ca4547d
5Size (nss-3.19.tar.gz) = 6951461 bytes 5Size (nss-3.19.1.tar.gz) = 6953537 bytes
6SHA1 (patch-am) = ee4c4beeb120397852fc4b06b7dd54534d0d5ac5 6SHA1 (patch-am) = ee4c4beeb120397852fc4b06b7dd54534d0d5ac5
7SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69 7SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
8SHA1 (patch-md) = 0a09fd2abb8674a2d301f1b6a5331af5db94178f 8SHA1 (patch-md) = 0a09fd2abb8674a2d301f1b6a5331af5db94178f
9SHA1 (patch-me) = e785e4e12b54f2618746a550a09593c2eede5f65 9SHA1 (patch-me) = e785e4e12b54f2618746a550a09593c2eede5f65
10SHA1 (patch-mf) = 64d3b2cc09ffbc9c4e8ffdb68cb2fa89b6897e8c 10SHA1 (patch-mf) = 64d3b2cc09ffbc9c4e8ffdb68cb2fa89b6897e8c
11SHA1 (patch-mg) = 3c878548c98bdea559a3e653e63e0ed22a2a8834 11SHA1 (patch-mg) = 3c878548c98bdea559a3e653e63e0ed22a2a8834
12SHA1 (patch-mh) = a46d3098a85c3a4a57895a9845bc1741fc5e9561 12SHA1 (patch-mh) = a46d3098a85c3a4a57895a9845bc1741fc5e9561
13SHA1 (patch-mj) = 08ca1a37afce99e0292a20348fc6855547f44e8a 13SHA1 (patch-mj) = 08ca1a37afce99e0292a20348fc6855547f44e8a
14SHA1 (patch-mn) = 5b79783e48249044be1a904a6cfd20ba175b5fd4 14SHA1 (patch-mn) = 5b79783e48249044be1a904a6cfd20ba175b5fd4
15SHA1 (patch-nss_cmd_platlibs.mk) = 7dadcb72acf15714c61ae74b21c5baf45bc51d4c 15SHA1 (patch-nss_cmd_platlibs.mk) = 7dadcb72acf15714c61ae74b21c5baf45bc51d4c
16SHA1 (patch-nss_coreconf_OpenBSD.mk) = fa545c993038e99bf9f59b59ec1d0bd1f6c192a9 16SHA1 (patch-nss_coreconf_OpenBSD.mk) = fa545c993038e99bf9f59b59ec1d0bd1f6c192a9
17SHA1 (patch-nss_lib_freebl_config.mk) = 1c198177da8ba7928cbfbd23e385503be99ebe27 17SHA1 (patch-nss_lib_freebl_config.mk) = 1c198177da8ba7928cbfbd23e385503be99ebe27
18SHA1 (patch-security_nss_cmd_shlibsign_sign.sh) = 7948b7b502a4c148ee185836dde8a84d3aa388af 18SHA1 (patch-security_nss_cmd_shlibsign_sign.sh) = 7948b7b502a4c148ee185836dde8a84d3aa388af