Subject: CVS commit: pkgsrc/devel/nss
To: None <pkgsrc-changes@NetBSD.org>
From: Thomas Klausner <wiz@netbsd.org>
List: pkgsrc-changes
Date: 01/20/2007 18:55:09
Module Name:	pkgsrc
Committed By:	wiz
Date:		Sat Jan 20 18:55:09 UTC 2007

Modified Files:
	pkgsrc/devel/nss: Makefile PLIST distinfo
	pkgsrc/devel/nss/patches: patch-aa patch-ae patch-ah patch-ai patch-ak
	    patch-an
Removed Files:
	pkgsrc/devel/nss/patches: patch-al

Log Message:
Update to 3.11.4:

The following bugs have been fixed in NSS 3.11.4.

    * Bug 115951: freebl dynamic library is never unloaded by
      libsoftoken or libssl. Also tiny one-time leak in freebl's
      loader.c.
    * Bug 127960: SSL force handshake function should take a timeout.
    * Bug 335454: Unable to find library 'libsoftokn3.sl' on HP-UX 64 bit.
    * Bug 350200: Implement DHMAC based POP (ProofOfPossession).
    * Bug 351482: audit_log_user_message doesn't exist in all
      versions of libaudit.so.0. (the "paranoia patch")
    * Bug 352041: oom [@ CERT_DecodeDERCrlWithFlags] "extended"
      tracked as NULL was dereferenced.
    * Bug 353422: Klocwork bugs in nss/lib/crmf.
    * Bug 353475: Cannot run cmd tools compiled with VC++ 2005.
    * Bug 353572: leak in sftk_OpenCertDB.
    * Bug 353608: NSS_RegisterShutdown may fail, and appData argument
      to callbacks is always NULL.
    * Bug 353749: PowerUpSelf tests update for DSA and ECDSA KAT.
    * Bug 353896: Building tip with NSS_ECC_MORE_THAN_SUITE_B causes
      crashes in all.sh.
    * Bug 353910: memory leak in RNG_RNGInit.
    * Bug 354313: STAN_GetCERTCertificateName leaks "instance" struct.
    * Bug 354384: vfyserv shutdown failure when client auth requested.
    * Bug 354900: Audit modifications, accesses, deletions, and
      additions of cryptographic keys.
    * Bug 355297: Improve the very first RNG_RandomUpdate call.
    * Bug 356073: C_GetTokenInfo should return CKR_CRYPTOKI_NOT_INITIALIZED
      if not initialized.
    * Bug 356309: CertVerifyLog in CERT_VerifyCertificate terminates
      early on expired certs.
    * Bug 357197: OCSP response code fails to match CERTIds. (hot fix only)
    * Bug 359484: FireFox 2 tries to negotiate ECC cipher suites
      using ssl2 client hello. (hot fix only)
    * Bug 360818: No RPATH set for signtool and signver.


To generate a diff of this commit:
cvs rdiff -r1.19 -r1.20 pkgsrc/devel/nss/Makefile
cvs rdiff -r1.6 -r1.7 pkgsrc/devel/nss/PLIST
cvs rdiff -r1.16 -r1.17 pkgsrc/devel/nss/distinfo
cvs rdiff -r1.2 -r1.3 pkgsrc/devel/nss/patches/patch-aa \
    pkgsrc/devel/nss/patches/patch-ah pkgsrc/devel/nss/patches/patch-ai \
    pkgsrc/devel/nss/patches/patch-ak pkgsrc/devel/nss/patches/patch-an
cvs rdiff -r1.4 -r1.5 pkgsrc/devel/nss/patches/patch-ae
cvs rdiff -r1.3 -r0 pkgsrc/devel/nss/patches/patch-al

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.