Path to this page:
Subject: CVS commit: pkgsrc/devel/nss
From: Thomas Klausner
Date: 2022-05-31 22:30:10
Message id: 20220531203010.AAA95FB18@cvs.NetBSD.org
Log Message:
nss: update to 3.79.
This release fixes memory safety violations that can occur when parsing CMS
data. We presume that with enough effort these memory safety violations are
exploitable.
Change:
- Bug 205717 - Use PK11_GetSlotInfo instead of raw C_GetSlotInfo calls.
- Bug 1766907 - Update mercurial in clang-format docker image.
- Bug 1454072 - Use of uninitialized pointer in lg_init after alloc fail.
- Bug 1769295 - selfserv and tstclnt should use PR_GetPrefLoopbackAddrInfo.
- Bug 1753315 - Add SECMOD_LockedModuleHasRemovableSlots.
- Bug 1387919 - Fix secasn1d parsing of indefinite SEQUENCE inside indefinite \
GROUP.
- Bug 1765753 - Added RFC8422 compliant TLS <= 1.2 undefined/compressed \
ECPointFormat extension alerts.
- Bug 1765753 - TLS 1.3 Server: Send protocol_version alert on unsupported \
ClientHello.legacy_version.
- Bug 1764788 - Correct invalid record inner and outer content type alerts.
- Bug 1757075 - NSS does not properly import or export pkcs12 files with \
large passwords and pkcs5v2 encoding.
- Bug 1766978 - improve error handling after nssCKFWInstance_CreateObjectHandle.
- Bug 1767590 - Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple.
- Bug 1769302 - NSS 3.79 should depend on NSPR 4.34
Files: