Security update to nss 3.14.3.

Fixes CVE-2013-1620 / bug #822365 (Lucky Thirteen attack)
Required by firefox 20 & later anyway.. and tested to work fine with 20.0b6.
This commit is contained in:
landry 2013-03-21 12:49:42 +00:00
parent 5a760dfe17
commit 6865587314
3 changed files with 9 additions and 9 deletions

View File

@ -1,13 +1,13 @@
# $OpenBSD: Makefile,v 1.35 2013/03/18 20:38:13 landry Exp $
# $OpenBSD: Makefile,v 1.36 2013/03/21 12:49:42 landry Exp $
SHARED_ONLY= Yes
COMMENT= libraries to support development of security-enabled apps
VERSION= 3.14.2
VERSION= 3.14.3
DISTNAME = nss-${VERSION}
SO_VERSION= 33.1
SO_VERSION= 33.2
.for _lib in freebl3 nss3 nssckbi nssdbm3 nssutil3 smime3 softokn3 ssl3
SHARED_LIBS+= ${_lib} ${SO_VERSION}
.endfor

View File

@ -1,2 +1,2 @@
SHA256 (nss-3.14.2.tar.gz) = oiaRIJ9MSYmBKTnH44xIod8J9LgOfOTGa2bJpZI1rpU=
SIZE (nss-3.14.2.tar.gz) = 6178419
SHA256 (nss-3.14.3.tar.gz) = 2dNmvpTTM5VZfr+CNj/N7fppOm1ifPf2vsAl9gnVTMA=
SIZE (nss-3.14.3.tar.gz) = 6189790

View File

@ -1,13 +1,13 @@
$OpenBSD: patch-mozilla_security_nss_lib_freebl_blapi_h,v 1.4 2012/11/12 20:43:09 landry Exp $
$OpenBSD: patch-mozilla_security_nss_lib_freebl_blapi_h,v 1.5 2013/03/21 12:49:42 landry Exp $
From firefox in pkgsrc:
SHA1_Update conflicts with openssl which may be dynamically loaded
at runtime via libcups or libgssapi so causing a crash due to using
the wrong binding. So rename here to avoid conflict.
--- mozilla/security/nss/lib/freebl/blapi.h.orig Thu Oct 11 02:10:26 2012
+++ mozilla/security/nss/lib/freebl/blapi.h Thu Nov 8 21:18:24 2012
@@ -1010,6 +1010,8 @@ extern void SHA1_DestroyContext(SHA1Context *cx, PRBoo
--- mozilla/security/nss/lib/freebl/blapi.h.orig Thu Feb 14 22:20:46 2013
+++ mozilla/security/nss/lib/freebl/blapi.h Thu Mar 21 10:12:53 2013
@@ -1022,6 +1022,8 @@ extern void SHA1_DestroyContext(SHA1Context *cx, PRBoo
*/
extern void SHA1_Begin(SHA1Context *cx);