[ol8_appstream] nss-3.44.0-15.el8.x86_64

Network Security Services (NSS) is a set of libraries designed to
support cross-platform development of security-enabled client and
server applications. Applications built with NSS can support SSL v2
and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
v3 certificates, and other security standards.

Changelog (Show File list) (Show related packages)

• Fri Jan 31 2020 Bob Relyea <rrelyea@redhat.com> - 3.44.0-15

  - Fix swapped CMAC PKCS #11 values.
  - Fix data alignment crash in CMAC.

• Tue Dec 03 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-14

  - Fix coverify scan issue

• Mon Dec 02 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-13

  - Fix endian problem in SP-800 108 code.

• Thu Nov 28 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-12

  - Install cmac.h required by blapi.h (#1764513)
  - Fix out-of-bounds write in NSC_EncryptUpdate (#1775913)

• Wed Nov 27 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-11

  - Add SP-800 108 Generalized kdf

• Mon Nov 11 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-10

  - Check policy against hash algorithms used for ServerKeyExchange (#1730039)

• Wed Nov 06 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-9

  - Add CMAC

• Thu Aug 08 2019 Bob Relyea <rrelyea@redhat.com> - 3.44.0-8

  - CKM_NSS_IKE1_APP_B_PRF_DERIVE was missing from the mechanism list, preventing
    PK11_Derive*() from using it. Add gtests for the PK11_Derive interface for
    all the CKM_NSS_IKE*_DERIVE mechanism.

• Wed Jul 03 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-7

  - Backport fixes from 3.44.1

• Wed Jun 26 2019 Daiki Ueno <dueno@redhat.com> - 3.44.0-6

  - Add continuous RNG test required by FIPS
  - fipstest: use CKM_TLS12_MASTER_KEY_DERIVE instead of vendor specific mechanism