[ol8_appstream] nss-sysinit-3.44.0-15.el8.aarch64

Default Operating System module that manages applications loading
NSS globally on the system. This module loads the system defined
PKCS #11 modules for NSS and chains with other NSS modules to load
any system or user configured modules.

Changelog (Show File list) (Show related packages)

• Fri Jan 31 2020 Bob Relyea <rrelyea@redhat.com> - 3.44.0-15

  - Fix swapped CMAC PKCS #11 values.
  - Fix data alignment crash in CMAC.

• Tue Dec 03 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-14

  - Fix coverify scan issue

• Mon Dec 02 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-13

  - Fix endian problem in SP-800 108 code.

• Thu Nov 28 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-12

  - Install cmac.h required by blapi.h (#1764513)
  - Fix out-of-bounds write in NSC_EncryptUpdate (#1775913)

• Wed Nov 27 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-11

  - Add SP-800 108 Generalized kdf

• Mon Nov 11 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-10

  - Check policy against hash algorithms used for ServerKeyExchange (#1730039)

• Wed Nov 06 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-9

  - Add CMAC

• Thu Aug 08 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-8

  - CKM_NSS_IKE1_APP_B_PRF_DERIVE was missing from the mechanism list, preventing
    PK11_Derive*() from using it. Add gtests for the PK11_Derive interface for
    all the CKM_NSS_IKE*_DERIVE mechanism.

• Wed Jul 03 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-7

  - Backport fixes from 3.44.1

• Wed Jun 26 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-6

  - Add continuous RNG test required by FIPS
  - fipstest: use CKM_TLS12_MASTER_KEY_DERIVE instead of vendor specific mechanism