-
Mon Oct 05 2020 John Mcwalters <john.mcwalters@oracle.com> - 3.53.1-6.0.1
- Add fips140-2 DSA Known Answer Test fix [Orabug: 26679337]
- Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug: 26617814],
[Orabug: 26617879], [Orabug: 26617849]
-
Fri Sep 11 2020 Bob Relyea <rrelyea@redhat.com> - 3.53.1-6
- turn of ALTIVEC instruction for powerpc because they require
power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
for dh.
-
Thu Sep 03 2020 Daiki Ueno <dueno@redhat.com> - 3.53.1-5
- Fix the patch application in the previous change
-
Thu Sep 03 2020 Daiki Ueno <dueno@redhat.com> - 3.53.1-4
- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked
-
Thu Aug 27 2020 Bob Relyea <rrelyea@redhat.com> - 3.53.1-3
- include patches for CVE-2020-6829, CVE-2020-12400,
and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
(CHACHA issues).
- include self-tests for kdfs and cmac.
-
Wed Jul 22 2020 Daiki Ueno <dueno@redhat.com> - 3.53.1-2
- Install cmac.h required by blapi.h (#1764513)
-
Wed Jul 22 2020 Daiki Ueno <dueno@redhat.com> - 3.53.1-1
- Rebase to NSS 3.53.1
-
Wed Dec 04 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-8
- Fix segfault on empty or malformed ecdh keys (#1777712)
-
Wed Dec 04 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-7
- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)
-
Tue Jun 18 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-6
- Fix fipstest to use the standard mechanism for TLS 1.2 PRF