-
Tue Dec 10 2019 Kevin Lyons <kevin.x.lyons@oracle.com> - 3.44.0-6.0.1
- Add fips140-2 DSA Known Answer Test fix [Orabug 26696773]
- Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug 26617866],
[Orabug 26617833], [Orabug 26617780]
-
Wed Dec 04 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-6
- Fix out-of-bounds write in NSC_EncryptUpdate (#1775909)
-
Tue Oct 15 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-5
- include sqlite3_open_v2 in the patch
-
Mon Oct 14 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-4
- actually turn on the old sqlite patch
-
Mon Oct 07 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-3
- add back old sqlite patch
-
Fri Sep 27 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-2
- add back add-relro patch
-
Thu Sep 26 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-1
- Rebase for Firefox
- Resolves Bug 1743628
-
Mon May 23 2016 Elio Maldonado <emaldona@redhat.com> - 3.14.3-23.3
- Build using the proper RHEL-6.8-Z release target
- Resolves: Bug 1337821
-
Fri May 20 2016 Elio Maldonado <emaldona@redhat.com> - 3.14.3-23.2
- Bump the release tag
- Turn off AVX if the OS (or VM) doesn't support it.
- Resolves: Bug 1337821
-
Fri May 20 2016 Bob Relyea <rrelyea@redhat.com> - 3.14.3-23.1
- Turn off AVX if the OS (or VM) doesn't support it.
- Resolves: Bug 1337821
-
Mon Aug 10 2015 Elio Maldonado <emaldona@redhat.com> - 3.14.3-23
- Pick up upstream freebl patch for CVE-2015-2730
- Check for P == Q or P ==-Q before adding P and Q
-
Wed Jan 28 2015 Bob Relyea <rrelyea@redhat.com> - 3.14.3-22
- fix permissions on dracut install file.
- Resolves: Bug 1182297
-
Fri Jan 16 2015 Bob Relyea <rrelyea@redhat.com> - 3.14.3-21
- Require nss-softokn-freebl of at least the same version and release
- Resolves: Bug 1182662 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm
-
Thu Jan 08 2015 Bob Relyea <rrelyea@redhat.com> - 3.14.3-20
- keep a dummy libfreebl3.chk to keep dracut happy.
-
Mon Dec 01 2014 Bob Relyea <rrelyea@redhat.com> - 3.14.3-19
- Resolves: Bug 1166921 - nss-softokn recent change causes application to segfault
-
Wed Oct 22 2014 Bob Relyea <rrelyea@redhat.com> - 3.14.3-18
- Silent sigchld events
-
Thu Sep 25 2014 Kai Engert <kaie@redhat.com> - 3.14.3-17
- Adjust patch to be compatible with legacy softokn API.
- Resolves: Bug 1145432 - CVE-2014-1568
-
Tue Sep 23 2014 Elio Maldonado <emaldona@redhat.com> - 3.14.3-16
- Resolves: Bug 1145432 - CVE-2014-1568
-
Thu Aug 07 2014 Elio Maldonado <emaldona@redhat.com> - 3.14.3-15
- Fix shlibsign to return non-zero on failure
- Resolves: Bug 587634 - shlibsign returns 0 although if fails
-
Mon Jun 09 2014 Bob Relyea <rrelyea@redhat.com> - 3.14.3.14
- Final Fips review comments.
-
Mon Apr 07 2014 Bob Relyea <rrelyea@redhat.com> - 3.14.3.13
- Fips review comments.
-
Tue Mar 25 2014 Elio Maldonado <emaldona@redhat.com> - 3.14.3-12
- Avoid call to sdb_measureAccess in lib/softoken/sdb.c s_open if NSS_SDB_USE_CACHE is "yes" or "no"
- Resolves: Bug 1044666 - Can curl HTTPS requests make fewer access system calls?
-
Tue Mar 25 2014 Elio Maldonado <emaldona@redhat.com> - 3.14.3-11
- Skip calls to CHECK_FORK in {C & NSC}_GetFunctionList
- Resolves: Bug 1053437 - Admin server segfault when configuration DS configured on SSL port
-
Mon Mar 24 2014 Bob Relyea <rrelyea@redhat.com> - 3.14.3.10
- add fips precheck back into softokn.
-
Tue Sep 24 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-9
- back out -fips package changes
-
Fri Sep 20 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-8
- Enable new packaging but don't apply nss-fips-post.patch
- Related: rhbz#1008513 - Unable to login in fips mode
-
Thu Sep 19 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-7
- Fix the PR_Access stub to actually access the correct permissions
- Resolves: rhbz#1008513 - Unable to login in fips mode
- Run the lowhash tests
- Require nspr-4.0.0 and nss-util-3.15.1
-
Thu Sep 12 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-6
- create -fips packages
- patch submitted by Bob Relyea <rrelyea@redhat.com>
- fix the script that splits softoken off from nss
- patch nss/cmd/lib/basicutil.c to build against nss-util-3.15.1
- Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]
-
Mon Jul 29 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
- Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released
- Display cpuifo as part of the tests and make NSS_DISABLE_HW_GCM the environment variable to test for
- When appling the patches use a backup file suffix that better describes the patch purpose
-
Thu May 23 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
- Enable ECC support for suite b and add upstream fixes for aec gcm
- Use the unstripped upstream sources with ecc support
- Limit the ECC support to suite b
- Apply several upstream aes gcm fixes
- Rename macros EC_MIN_KEY_BITS and EC_MAX_KEY_BITS per upstream
- Resolves: rhbz#960208 - Enable ECC in nss-softoken
- Related: rhbz#919172
-
Fri Apr 26 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
- Add patch to conditionally compile according to old or new sqlite api
- new is used on rhel-6 while rhel-5 uses old but we need the same code for both
- Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
-
Tue Apr 09 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-2
- Revert to using a code patch for relro support
- Related: rhbz#919172
-
Sun Mar 24 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
- Update to NSS_3_14_3_RTM
- Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
- Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib before the signing commands in __spec_install_post scriplet
to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
- Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
- Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
- Update the licence to MPLv2.0
-
Sat Mar 23 2013 Elio Maldonado - 3.12.9-12
- Bootstrapping of the builroot in preparation for rebase to 3.14.3
- Remove hasht.h from the %files devel list to prevent update conflicts with nss-util
- With 3.14.3 hasht.h will be provided by nss-util-devel
- Related: rhbz#919172 - rebase nss-softokn to 3.14.3
-
Thu Oct 27 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-11
- Bug 748524 - On NSS_NoDB_Init don't try to open pkcs11.txt or secmod.db
-
Mon Oct 24 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-10
- Bug 747053 - FIPS changes for NSS, more DRBG tests
-
Tue Sep 27 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-9
- Add relro support for executables and shared libraries
-
Mon Jul 25 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-8
- Include the patch
-
Mon Jul 25 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-7
- Fix the tag
-
Fri Jul 22 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-5
- Add partial RELRO support as a security enhancement
-
Thu Jun 23 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-5
- Retagging to pick up latest patch - Resolves: rhbz#710298
-
Thu Jun 23 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-4
- Resolves: rhbz#710298 - fix intel optimized aes code to handle case where input and ouput are in the same buffer
-
Sun Feb 27 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-3
- Add requires nss-softokn-freebl-devel to devel
-
Fri Feb 04 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-2
- Add headers for nss-softokn-freebl-devel and expand the description
-
Mon Jan 17 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-1
- Update to 3.12.9
- Enable Intel AES Hardware optimizations
-
Fri Oct 01 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.8-1
- Update to 3.12.8
-
Thu Aug 26 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.7-1.1
- Retagging to remove an obsolete file
-
Thu Aug 26 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.7-1
- Update to 3.12.7
-
Thu Aug 05 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-19
- Turn off Intel AES optimizations
-
Tue Jun 08 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.6-2.1
- Don't enable FIPS when CONFIG_CRYPTO_FIPS=n
- Fix typo in the package description
- Fix capitalization error in prelink conflict statement
- Require nspr 4.8.4
-
Wed Apr 21 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-17
- Updated prelink patch
-
Thu Apr 15 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-16
- allow prelink of softoken and freebl. Change the verify code to use
prelink -u if prelink is installed. Fix by Robert Relyea
-
Mon Jan 18 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-11
- Move libfreebl3.so and its .chk file to /lib{64} keeping
- symbolic links to them in /usr/lib{64} so as not break others
-
Mon Jan 18 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-10.3
- fix broken global
-
Sun Jan 17 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-10.2
- rebuilt for RHEL-6-test-build
-
Fri Jan 15 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-10.1
- Update to 3.12.4, reenable installing and pick up fixes from F-12
-
Wed Aug 19 2009 Elio Maldonado <emaldona@redhat.com> 3.12.3.99.3-8.1
- Disable installing until conflicts are relsoved
-
Wed Aug 19 2009 Elio Maldonado <emaldona@redhat.com> 3.12.3.99.3-8
- Initial build