linux/poky.git/meta/recipes-support/nss, branch daisy-11.0.0

nss-3.15.1: fix CVE-2013-5605

2014-03-30T09:10:32+00:00

Mozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-5605 (From OE-Core rev: 09e8cd6f09284ad3faf0bc05d623a43e2b174866) Signed-off-by: yanjun.zhu Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie

nss-3.15.1: fix CVE-2013-1741

2014-03-30T09:10:32+00:00

Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-1741 (From OE-Core rev: b666d173ff0ba213bf81e2c035a605a28e5395ea) Signed-off-by: yanjun.zhu Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie

Revert "nss: avoid to use the hardcode kernel version"

2014-02-13T12:06:01+00:00

This reverts commit 4c80c557508e088fe226bfa1834464b505404652. We *cannot* have nss becoming machine specific, that makes no sense. Signed-off-by: Richard Purdie

nss: avoid to use the hardcode kernel version

2014-02-13T11:41:22+00:00

Read kernel version from ${STAGING_KERNEL_DIR}/kernel-abiversion, to avoid to use the hardcode kernel version. (From OE-Core rev: 4c80c557508e088fe226bfa1834464b505404652) Signed-off-by: Roy Li Signed-off-by: Richard Purdie

nss: Add nativesdk to BBCLASSEXTEND and bugfix

2014-02-02T22:37:40+00:00

Since shsignlibs is used from the nss postinstall hook. It should be included in nativesdk to make offline rootfs construction possible. (From OE-Core rev: 42bc72d21226e76c9b013fc052f17d847dc6a97a) Signed-off-by: David Nyström Signed-off-by: Richard Purdie

nss: don't need set SRC_URI with both += and _append

2013-10-26T14:59:17+00:00

(From OE-Core rev: b1252f91ef62ce62d4d55269f498b5692aba76e8) Signed-off-by: Ming Liu Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

nss: Fix return codes in postinstall

2013-09-30T21:11:58+00:00

exit 0 was done if $D != NULL, if one or more shlibsign executions fails. (From OE-Core rev: 5dc3eb72c4b9b68ab13310383a90fe7779bf92a7) Signed-off-by: David Nyström Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

nss:fix postinst failed at rootfs time

2013-07-29T12:09:01+00:00

Create checksum file at rootfs time to support read-only rootfs. [YOCTO #4879] (From OE-Core rev: 64e87fc6e99bc1d4807034166735034b1f92bad8) Signed-off-by: Hongxu Jia Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

nss: fix incorrect shebang line of perl script

2013-07-13T17:23:36+00:00

Replace incorrect shebang line with `#!/usr/bin/env perl'. (From OE-Core rev: d78ecdbd66d8d93ecf67f56cfbbf4b954dec3c7b) Signed-off-by: Hongxu Jia Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

nss: create checksum files for the nss libraries

2013-07-13T17:23:35+00:00

Add checksum files required for the NSS softoken to operate in FIPS 140 mode. The shlibsign is invoked to sign the libraries, and it is built for the target architecture and doesn't support cross-compiling so far. Invoke shlibsign at target's first boot time to generate checksum files. https://developer.mozilla.org/en-US/docs/NSS/NSS_Tech_Notes/nss_tech_note6 http://en.wikipedia.org/wiki/FIPS_140 https://bugzilla.mozilla.org/show_bug.cgi?id=681624 (From OE-Core rev: a4580f967c8064294a06d406acf5deb24aee2acc) Signed-off-by: Hongxu Jia Signed-off-by: Saul Wold Signed-off-by: Richard Purdie