Security update to nss 3.14.3.
Fixes CVE-2013-1620 / bug #822365 (Lucky Thirteen attack) Required by firefox 20 & later anyway.. and tested to work fine with 20.0b6.
This commit is contained in:
parent
5a760dfe17
commit
6865587314
@ -1,13 +1,13 @@
|
||||
# $OpenBSD: Makefile,v 1.35 2013/03/18 20:38:13 landry Exp $
|
||||
# $OpenBSD: Makefile,v 1.36 2013/03/21 12:49:42 landry Exp $
|
||||
|
||||
SHARED_ONLY= Yes
|
||||
|
||||
COMMENT= libraries to support development of security-enabled apps
|
||||
|
||||
VERSION= 3.14.2
|
||||
VERSION= 3.14.3
|
||||
DISTNAME = nss-${VERSION}
|
||||
|
||||
SO_VERSION= 33.1
|
||||
SO_VERSION= 33.2
|
||||
.for _lib in freebl3 nss3 nssckbi nssdbm3 nssutil3 smime3 softokn3 ssl3
|
||||
SHARED_LIBS+= ${_lib} ${SO_VERSION}
|
||||
.endfor
|
||||
|
@ -1,2 +1,2 @@
|
||||
SHA256 (nss-3.14.2.tar.gz) = oiaRIJ9MSYmBKTnH44xIod8J9LgOfOTGa2bJpZI1rpU=
|
||||
SIZE (nss-3.14.2.tar.gz) = 6178419
|
||||
SHA256 (nss-3.14.3.tar.gz) = 2dNmvpTTM5VZfr+CNj/N7fppOm1ifPf2vsAl9gnVTMA=
|
||||
SIZE (nss-3.14.3.tar.gz) = 6189790
|
||||
|
@ -1,13 +1,13 @@
|
||||
$OpenBSD: patch-mozilla_security_nss_lib_freebl_blapi_h,v 1.4 2012/11/12 20:43:09 landry Exp $
|
||||
$OpenBSD: patch-mozilla_security_nss_lib_freebl_blapi_h,v 1.5 2013/03/21 12:49:42 landry Exp $
|
||||
|
||||
From firefox in pkgsrc:
|
||||
SHA1_Update conflicts with openssl which may be dynamically loaded
|
||||
at runtime via libcups or libgssapi so causing a crash due to using
|
||||
the wrong binding. So rename here to avoid conflict.
|
||||
|
||||
--- mozilla/security/nss/lib/freebl/blapi.h.orig Thu Oct 11 02:10:26 2012
|
||||
+++ mozilla/security/nss/lib/freebl/blapi.h Thu Nov 8 21:18:24 2012
|
||||
@@ -1010,6 +1010,8 @@ extern void SHA1_DestroyContext(SHA1Context *cx, PRBoo
|
||||
--- mozilla/security/nss/lib/freebl/blapi.h.orig Thu Feb 14 22:20:46 2013
|
||||
+++ mozilla/security/nss/lib/freebl/blapi.h Thu Mar 21 10:12:53 2013
|
||||
@@ -1022,6 +1022,8 @@ extern void SHA1_DestroyContext(SHA1Context *cx, PRBoo
|
||||
*/
|
||||
extern void SHA1_Begin(SHA1Context *cx);
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user