./devel/nss, Libraries to support development of security-enabled applications

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: pkgsrc-2017Q4, Version: 3.36, Package name: nss-3.36, Maintainer: pkgsrc-users

Network Security Services (NSS) is a set of libraries designed to support
cross-platform development of security-enabled server applications.
Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7,
PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security
standards.


Required to run:
[devel/nspr] [databases/sqlite3]

Required to build:
[pkgtools/cwrappers]

Master sites:

SHA1: b4b86aad7406c9df1cdf9dd3752c84476e32df7c
RMD160: fedc797df5be2dce8ef391197e0c27d2dbe6fe07
Filesize: 22485.916 KB

Version history: (Expand)


CVS history: (Expand)


   2018-03-22 07:56:22 by S.P.Zeidler | Files touched by this commit (43) | Package updated
Log message:
Pullup ticket #5728 - requested by maya
devel/nspr: dependency update
devel/nss: dependency update
www/firefox-l10n: dependent update
www/firefox: security update

Revisions pulled up:
- devel/nspr/Makefile                                           1.94-1.95
- devel/nspr/distinfo                                           1.48-1.49
- devel/nspr/patches/patch-az                                   deleted
- devel/nspr/patches/patch-nspr_pr_include_md___pth.h           1.1
- devel/nspr/patches/patch-nspr_pr_src_pthreads_ptthread.c      1.1
- devel/nspr/patches/patch-nsprpub_pr_include_md__pth.h         deleted
- devel/nss/Makefile                                            1.146,1.148
- devel/nss/PLIST                                               1.24
- devel/nss/distinfo                                            1.81,1.83
- devel/nss/patches/patch-nss_lib_freebl_config.mk              deleted
- devel/nss/patches/patch-nss_lib_freebl_verified_kremlib.h     deleted
- www/firefox-l10n/Makefile                                     1.121-1.123
- www/firefox-l10n/distinfo                                     1.111-1.113
- www/firefox/Makefile                                          1.320-1.321,1.324
- www/firefox/PLIST                                             1.127
- www/firefox/distinfo                                          1.307-1.309
- www/firefox/mozilla-common.mk                                 1.105-1.106
- www/firefox/patches/patch-aa                                  1.56
- www/firefox/patches/patch-build_gyp.mozbuild                  1.8
- www/firefox/patches/patch-build_moz.configure_keyfiles.configure 1.5
- www/firefox/patches/patch-build_moz.configure_memory.configure deleted
- www/firefox/patches/patch-config_baseconfig.mk                deleted
- www/firefox/patches/patch-config_external_moz.build           1.17
- www/firefox/patches/patch-dom_media_moz.build                 1.9
- www/firefox/patches/patch-gfx_skia_generate__mozbuild.py      1.8
- www/firefox/patches/patch-gfx_skia_moz.build                  1.15
- www/firefox/patches/patch-gfx_thebes_moz.build                1.9
- www/firefox/patches/patch-media_libcubeb_gtest_moz.build      1.2
- www/firefox/patches/patch-media_libtheora_moz.build           1.8
- www/firefox/patches/patch-media_libvorbis_moz.build           1.4
- \ 
www/firefox/patches/patch-media_webrtc_trunk_webrtc_modules_audio__device_linux_audio__device__alsa__linux.cc \ 
1.1
- www/firefox/patches/patch-modules_libpref_init_all.js         1.7
- www/firefox/patches/patch-modules_pdfium_update.sh            1.2
- www/firefox/patches/patch-netwerk_dns_moz.build               1.8
- www/firefox/patches/patch-netwerk_srtp_src_crypto_hash_hmac.c deleted
- www/firefox/patches/patch-netwerk_srtp_src_crypto_kernel_crypto__kernel.c deleted
- \ 
www/firefox/patches/patch-servo_components_style_properties_helpers_animated__properties.mako.rs \ 
deleted
- www/firefox/patches/patch-third__party_rust_simd_.cargo-checksum.json 1.1
- www/firefox/patches/patch-third__party_rust_simd_src_x86_avx2.rs 1.1
- \ 
www/firefox/patches/patch-toolkit_crashreporter_google-breakpad_src_third_party_curl_curlbuild.h \ 
deleted
- www/firefox/patches/patch-toolkit_moz.configure               1.10
- www/firefox/patches/patch-toolkit_xre_nsEmbedFunctions.cpp    deleted
- www/firefox/patches/patch-xpcom_build_BinaryPath.h            1.3-1.4

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   ryoon
   Date:           Wed Jan 24 16:21:43 UTC 2018

   Modified Files:
           pkgsrc/devel/nspr: Makefile distinfo
   Added Files:
           pkgsrc/devel/nspr/patches: patch-nspr_pr_include_md___pth.h
               patch-nspr_pr_src_pthreads_ptthread.c
   Removed Files:
           pkgsrc/devel/nspr/patches: patch-az patch-nsprpub_pr_include_md__pth.h

   Log message:
   Update to 4.18

   Changelog:
   NSPR 4.18 contains the following changes:
   - removed HP-UX DCE threads support
   - improvements for the Windows implementation of PR_SetCurrentThreadName
   - fixes for the Windows implementation of TCP Fast Open

   To generate a diff of this commit:
   cvs rdiff -u -r1.93 -r1.94 pkgsrc/devel/nspr/Makefile
   cvs rdiff -u -r1.47 -r1.48 pkgsrc/devel/nspr/distinfo
   cvs rdiff -u -r1.4 -r0 pkgsrc/devel/nspr/patches/patch-az
   cvs rdiff -u -r0 -r1.1 \
       pkgsrc/devel/nspr/patches/patch-nspr_pr_include_md___pth.h \
       pkgsrc/devel/nspr/patches/patch-nspr_pr_src_pthreads_ptthread.c
   cvs rdiff -u -r1.3 -r0 \
       pkgsrc/devel/nspr/patches/patch-nsprpub_pr_include_md__pth.h

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   ryoon
   Date:           Sat Mar 17 01:06:18 UTC 2018

   Modified Files:
           pkgsrc/devel/nspr: Makefile distinfo

   Log message:
   Update to 4.29

   Changelog:
   NSPR 4.19 contains the following changes:
   - changed order of shutdown cleanup to avoid a crash on Mac OSX
   - build compatibility with Android NDK r16 and glibc 2.26

   To generate a diff of this commit:
   cvs rdiff -u -r1.94 -r1.95 pkgsrc/devel/nspr/Makefile
   cvs rdiff -u -r1.48 -r1.49 pkgsrc/devel/nspr/distinfo

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   ryoon
   Date:           Wed Jan 24 16:23:52 UTC 2018

   Modified Files:
           pkgsrc/devel/nss: Makefile distinfo
   Removed Files:
           pkgsrc/devel/nss/patches: patch-nss_lib_freebl_config.mk
               patch-nss_lib_freebl_verified_kremlib.h

   Log message:
   Update to 3.35

   Changelog:
   The NSS team has released Network Security Services (NSS) 3.35,
   which is a minor release.

   Summary of the major changes included in this release:
   - The default database storage format has been changed to SQL,
     using filenames cert9.db, key4.db, pkcs11.txt.
   - TLS 1.3 support has been updated to draft -23, along with
     additional significant changes.
   - Support for TLS compression was removed.
   - Added formally verified implementations of non-vectorized Chacha20
     and non-vectorized Poly1305 64-bit.
   - When creating encrypted PKCS#7 or PKCS#12 data, NSS uses a
     higher iteration count for stronger security.
   - The CA trust list was updated to version 2.22.

   To generate a diff of this commit:
   cvs rdiff -u -r1.145 -r1.146 pkgsrc/devel/nss/Makefile
   cvs rdiff -u -r1.80 -r1.81 pkgsrc/devel/nss/distinfo
   cvs rdiff -u -r1.2 -r0 \
       pkgsrc/devel/nss/patches/patch-nss_lib_freebl_config.mk
   cvs rdiff -u -r1.1 -r0 \
       pkgsrc/devel/nss/patches/patch-nss_lib_freebl_verified_kremlib.h

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   ryoon
   Date:           Sat Mar 17 01:07:15 UTC 2018

   Modified Files:
           pkgsrc/devel/nss: Makefile PLIST distinfo

   Log message:
   Update to 3.36

   * Require devel/nspr-4.19

   Changelog:
   The NSS team has released Network Security Services (NSS) 3.36,
   which is a minor release.

   Summary of the major changes included in this release:
   - Replaced existing vectorized ChaCha20 code with verified
     HACL* implementation.
   - Experimental APIs for TLS session cache handling.

   To generate a diff of this commit:
   cvs rdiff -u -r1.147 -r1.148 pkgsrc/devel/nss/Makefile
   cvs rdiff -u -r1.23 -r1.24 pkgsrc/devel/nss/PLIST
   cvs rdiff -u -r1.82 -r1.83 pkgsrc/devel/nss/distinfo

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   ryoon
   Date:           Wed Jan 31 14:02:18 UTC 2018

   Modified Files:
           pkgsrc/www/firefox: Makefile distinfo
   Added Files:
           pkgsrc/www/firefox/patches: patch-xpcom_build_BinaryPath.h

   Log message:
   Update to 58.0.1

   * Fix build under netbsd-7, PR pkg/52956

   Changelog:
   Fix Mozilla Foundation Security Advisory 2018-05:
   Arbitrary code execution through unsanitized browser UI

   When using certain non-default security policies on Windows (for
   example with Windows Defender Exploit Protection or Webroot security
   products), Firefox 58.0 would fail to load pages (bug 1433065).

   To generate a diff of this commit:
   cvs rdiff -u -r1.319 -r1.320 pkgsrc/www/firefox/Makefile
   cvs rdiff -u -r1.306 -r1.307 pkgsrc/www/firefox/distinfo
   cvs rdiff -u -r0 -r1.3 \
       pkgsrc/www/firefox/patches/patch-xpcom_build_BinaryPath.h

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   ryoon
   Date:           Sat Feb 10 07:02:47 UTC 2018

   Modified Files:
           pkgsrc/www/firefox: Makefile distinfo mozilla-common.mk
           pkgsrc/www/firefox/patches: patch-xpcom_build_BinaryPath.h

   Log message:
   Update to 58.0.2

   * Fix segfault on netbsd-7

   Changelog:
   Fix
       Avoid a signature validation issue during update on macOS

       Blocklisted graphics drivers related to off main thread painting crashes

       Tab crash during printing

       Fix clicking links and scrolling emails on Microsoft Hotmail and Outlook
         (OWA) webmail

   To generate a diff of this commit:
   cvs rdiff -u -r1.320 -r1.321 pkgsrc/www/firefox/Makefile
   cvs rdiff -u -r1.307 -r1.308 pkgsrc/www/firefox/distinfo
   cvs rdiff -u -r1.104 -r1.105 pkgsrc/www/firefox/mozilla-common.mk
   cvs rdiff -u -r1.3 -r1.4 \
       pkgsrc/www/firefox/patches/patch-xpcom_build_BinaryPath.h

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   ryoon
   Date:           Sat Mar 17 00:59:03 UTC 2018

   Modified Files:
           pkgsrc/www/firefox: Makefile PLIST distinfo mozilla-common.mk
           pkgsrc/www/firefox/patches: patch-aa patch-build_gyp.mozbuild
               patch-config_external_moz.build patch-dom_media_moz.build
               patch-gfx_skia_generate__mozbuild.py patch-gfx_skia_moz.build
               patch-gfx_thebes_moz.build patch-media_libcubeb_gtest_moz.build
               patch-media_libtheora_moz.build patch-media_libvorbis_moz.build
               patch-modules_pdfium_update.sh patch-netwerk_dns_moz.build
               patch-toolkit_moz.configure
   Added Files:
           pkgsrc/www/firefox/patches:
               patch-build_moz.configure_keyfiles.configure
               \ 
patch-media_webrtc_trunk_webrtc_modules_audio__device_linux_audio__device__alsa_ \ 
_linux.cc
               patch-modules_libpref_init_all.js
               patch-third__party_rust_simd_.cargo-checksum.json
               patch-third__party_rust_simd_src_x86_avx2.rs
   Removed Files:
           pkgsrc/www/firefox/patches: patch-build_moz.configure_memory.configure
               patch-config_baseconfig.mk
               patch-netwerk_srtp_src_crypto_hash_hmac.c
               patch-netwerk_srtp_src_crypto_kernel_crypto__kernel.c
               \ 
patch-servo_components_style_properties_helpers_animated__properties.mako.rs
               \ 
patch-toolkit_crashreporter_google-breakpad_src_third_party_curl_curlbuild.h
               patch-toolkit_xre_nsEmbedFunctions.cpp

   Log message:
   Update to 59.0.1

   Changelog:
   59.0.1
   Security fix
   #CVE-2018-5146: Out of bounds memory write in libvorbis

   59.0
   New
       Performance enhancements:
       - Faster load times for content on the Firefox Home page
       - Faster page load times by loading either from the networked cache
           or the cache on the user's hard drive (Race Cache With Network)
       - Improved graphics rendering using Off-Main-Thread Painting (OMTP)
           for Mac users (OMTP for Windows was released in Firefox 58)

       Drag-and-drop to rearrange Top Sites on the Firefox Home page, and
         customize new windows and tabs in other ways

       Added features for Firefox Screenshots:
       - Basic annotation lets the user draw on and highlight saved screenshots
       - Recropping to change the viewable area of saved screenshots

       Enhanced WebExtensions API including better support for decentralized
         protocols and the ability to dynamically register content scripts

       Improved Real-Time Communications (RTC) capabilities.
       - Implemented RTP Transceiver to give pages more fine grained control
           over calls
       - Implemented features to support large scale conferences

       Added support for W3C specs for pointer events and improved platform
         integration with added device support for mouse, pen, and touch
         screen pointer input

       Added the Ecosia search engine as an option for German Firefox

       Added the Qwant search engine as an option for French Firefox

       Added settings in about:preferences to stop websites from asking to
         send notifications or access your device's camera, microphone, and
         location, while still allowing trusted websites to use these features

   Fixed
       Various security fixes

   Changed
       Firefox Private Browsing Mode will remove path information from
         referrers to prevent cross-site tracking

   Security fixes:
   #CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList
   #CVE-2018-5128: Use-after-free manipulating editor selection ranges
   #CVE-2018-5129: Out-of-bounds write with malformed IPC messages
   #CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption
   #CVE-2018-5131: Fetch API improperly returns cached copies of
     no-store/no-cache resources
   #CVE-2018-5132: WebExtension Find API can search privileged pages
   #CVE-2018-5133: Value of the app.support.baseURL preference is not properly
     sanitized
   #CVE-2018-5134: WebExtensions may use view-source: URLs to bypass content
     restrictions
   #CVE-2018-5135: WebExtension browserAction can inject scripts into
     unintended contexts
   #CVE-2018-5136: Same-origin policy violation with data: URL shared workers
   #CVE-2018-5137: Script content can access legacy extension
     non-contentaccessible resources
   #CVE-2018-5138: Android Custom Tab address spoofing through long domain names
   #CVE-2018-5140: Moz-icon images accessible to web content through moz-icon:
     protocol
   #CVE-2018-5141: DOS attack through notifications Push API
   #CVE-2018-5142: Media Capture and Streams API permissions display
     incorrect origin with data: and blob: URLs
   #CVE-2018-5143: Self-XSS pasting javascript: URL with embedded tab into
     addressbar
   #CVE-2018-5126: Memory safety bugs fixed in Firefox 59
   #CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7

   To generate a diff of this commit:
   cvs rdiff -u -r1.323 -r1.324 pkgsrc/www/firefox/Makefile
   cvs rdiff -u -r1.126 -r1.127 pkgsrc/www/firefox/PLIST
   cvs rdiff -u -r1.308 -r1.309 pkgsrc/www/firefox/distinfo
   cvs rdiff -u -r1.105 -r1.106 pkgsrc/www/firefox/mozilla-common.mk
   cvs rdiff -u -r1.55 -r1.56 pkgsrc/www/firefox/patches/patch-aa
   cvs rdiff -u -r1.7 -r1.8 pkgsrc/www/firefox/patches/patch-build_gyp.mozbuild \
       pkgsrc/www/firefox/patches/patch-gfx_skia_generate__mozbuild.py \
       pkgsrc/www/firefox/patches/patch-media_libtheora_moz.build \
       pkgsrc/www/firefox/patches/patch-netwerk_dns_moz.build
   cvs rdiff -u -r0 -r1.5 \
       pkgsrc/www/firefox/patches/patch-build_moz.configure_keyfiles.configure
   cvs rdiff -u -r1.2 -r0 \
       pkgsrc/www/firefox/patches/patch-build_moz.configure_memory.configure \
       \ 
pkgsrc/www/firefox/patches/patch-toolkit_crashreporter_google-breakpad_src_third_party_curl_curlbuild.h
   cvs rdiff -u -r1.10 -r0 pkgsrc/www/firefox/patches/patch-config_baseconfig.mk
   cvs rdiff -u -r1.16 -r1.17 \
       pkgsrc/www/firefox/patches/patch-config_external_moz.build
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/www/firefox/patches/patch-dom_media_moz.build \
       pkgsrc/www/firefox/patches/patch-gfx_thebes_moz.build
   cvs rdiff -u -r1.14 -r1.15 \
       pkgsrc/www/firefox/patches/patch-gfx_skia_moz.build
   cvs rdiff -u -r1.1 -r1.2 \
       pkgsrc/www/firefox/patches/patch-media_libcubeb_gtest_moz.build \
       pkgsrc/www/firefox/patches/patch-modules_pdfium_update.sh
   cvs rdiff -u -r1.3 -r1.4 \
       pkgsrc/www/firefox/patches/patch-media_libvorbis_moz.build
   cvs rdiff -u -r0 -r1.1 \
       \ 
pkgsrc/www/firefox/patches/patch-media_webrtc_trunk_webrtc_modules_audio__device_linux_audio__device__alsa__linux.cc \ 
\
       pkgsrc/www/firefox/patches/patch-third__party_rust_simd_.cargo-checksum.json \
       pkgsrc/www/firefox/patches/patch-third__party_rust_simd_src_x86_avx2.rs
   cvs rdiff -u -r0 -r1.7 \
       pkgsrc/www/firefox/patches/patch-modules_libpref_init_all.js
   cvs rdiff -u -r1.4 -r0 \
       pkgsrc/www/firefox/patches/patch-netwerk_srtp_src_crypto_hash_hmac.c
   cvs rdiff -u -r1.3 -r0 \
       \ 
pkgsrc/www/firefox/patches/patch-netwerk_srtp_src_crypto_kernel_crypto__kernel.c
   cvs rdiff -u -r1.1 -r0 \
       \ 
pkgsrc/www/firefox/patches/patch-servo_components_style_properties_helpers_animated__properties.mako.rs
   cvs rdiff -u -r1.9 -r1.10 \
       pkgsrc/www/firefox/patches/patch-toolkit_moz.configure
   cvs rdiff -u -r1.7 -r0 \
       pkgsrc/www/firefox/patches/patch-toolkit_xre_nsEmbedFunctions.cpp

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   ryoon
   Date:           Wed Jan 31 14:03:25 UTC 2018

   Modified Files:
           pkgsrc/www/firefox-l10n: Makefile distinfo

   Log message:
   Update to 58.0.1

   * Sync with www/firefox-58.0.1

   To generate a diff of this commit:
   cvs rdiff -u -r1.120 -r1.121 pkgsrc/www/firefox-l10n/Makefile
   cvs rdiff -u -r1.110 -r1.111 pkgsrc/www/firefox-l10n/distinfo

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   ryoon
   Date:           Sat Feb 10 07:05:20 UTC 2018

   Modified Files:
           pkgsrc/www/firefox-l10n: Makefile distinfo

   Log message:
   Update to 58.0.2

   * Sync with www/firefox-58.0.2

   To generate a diff of this commit:
   cvs rdiff -u -r1.121 -r1.122 pkgsrc/www/firefox-l10n/Makefile
   cvs rdiff -u -r1.111 -r1.112 pkgsrc/www/firefox-l10n/distinfo

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   ryoon
   Date:           Sat Mar 17 01:00:20 UTC 2018

   Modified Files:
           pkgsrc/www/firefox-l10n: Makefile distinfo

   Log message:
   Update to 59.0.1

   * Sync with www/firefox-59.0.1

   To generate a diff of this commit:
   cvs rdiff -u -r1.122 -r1.123 pkgsrc/www/firefox-l10n/Makefile
   cvs rdiff -u -r1.112 -r1.113 pkgsrc/www/firefox-l10n/distinfo