[ol6_security_validation] nss-softokn-3.14.3-23.3.0.1.el6_8.x86_64

Network Security Services Softoken Cryptographic Module

Changelog (Show File list) (Show related packages)

• Fri Sep 22 2017 Ilya Okomin <ilya.okomin@oracle.com> - 3.14.3-23.3.0.1

  - Add fips140-2 DSA Known Answer Test fix [Orabug 26696773]
  - Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug 26617866],
    [Orabug 26617833], [Orabug 26617780]
  - Add fips140-2 ECDSA Known Answer Test fix [Orabug 26696762]
  - Add fips140-2 RSA Key Generation fix [Orabug 26618348]
  - Add fips140-2 AES Key Wrap fix [Orabug 26617904]

• Mon May 23 2016 Elio Maldonado <emaldona@redhat.com> - 3.14.3-23.3

  - Build using the proper RHEL-6.8-Z release target
  - Resolves: Bug 1337821

• Fri May 20 2016 Elio Maldonado <emaldona@redhat.com> - 3.14.3-23.2

  - Bump the release tag
  - Turn off AVX if the OS (or VM) doesn't support it.
  - Resolves: Bug 1337821

• Fri May 20 2016 Bob Relyea <rrelyea@redhat.com> - 3.14.3-23.1

  - Turn off AVX if the OS (or VM) doesn't support it.
  - Resolves: Bug 1337821

• Mon Aug 10 2015 Elio Maldonado <emaldona@redhat.com> - 3.14.3-23

  - Pick up upstream freebl patch for CVE-2015-2730
  - Check for P == Q or P ==-Q before adding P and Q

• Wed Jan 28 2015 Bob Relyea <rrelyea@redhat.com> - 3.14.3-22

  - fix permissions on dracut install file.
  - Resolves: Bug 1182297

• Fri Jan 16 2015 Bob Relyea <rrelyea@redhat.com> - 3.14.3-21

  - Require nss-softokn-freebl of at least the same version and release
  - Resolves: Bug 1182662 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm

• Thu Jan 08 2015 Bob Relyea <rrelyea@redhat.com> - 3.14.3-20

  - keep a dummy libfreebl3.chk to keep dracut happy.

• Mon Dec 01 2014 Bob Relyea <rrelyea@redhat.com> - 3.14.3-19

  - Resolves: Bug 1166921 - nss-softokn recent change causes application to segfault

• Wed Oct 22 2014 Bob Relyea <rrelyea@redhat.com> - 3.14.3-18

  - Silent sigchld events

• Thu Sep 25 2014 Kai Engert <kaie@redhat.com> - 3.14.3-17

  - Adjust patch to be compatible with legacy softokn API.
  - Resolves: Bug 1145432 - CVE-2014-1568

• Tue Sep 23 2014 Elio Maldonado <emaldona@redhat.com> - 3.14.3-16

  - Resolves: Bug 1145432 - CVE-2014-1568

• Thu Aug 07 2014 Elio Maldonado <emaldona@redhat.com> - 3.14.3-15

  - Fix shlibsign to return non-zero on failure
  - Resolves: Bug 587634 - shlibsign returns 0 although if fails

• Mon Jun 09 2014 Bob Relyea <rrelyea@redhat.com> - 3.14.3.14

  - Final Fips review comments.

• Mon Apr 07 2014 Bob Relyea <rrelyea@redhat.com> - 3.14.3.13

  - Fips review comments.

• Tue Mar 25 2014 Elio Maldonado <emaldona@redhat.com> - 3.14.3-12

  - Avoid call to sdb_measureAccess in lib/softoken/sdb.c s_open if NSS_SDB_USE_CACHE is "yes" or "no"
  - Resolves: Bug 1044666 - Can curl HTTPS requests make fewer access system calls?

• Tue Mar 25 2014 Elio Maldonado <emaldona@redhat.com> - 3.14.3-11

  - Skip calls to CHECK_FORK in {C & NSC}_GetFunctionList
  - Resolves: Bug 1053437 - Admin server segfault when configuration DS configured on SSL port

• Mon Mar 24 2014 Bob Relyea <rrelyea@redhat.com> - 3.14.3.10

  - add fips precheck back into softokn.

• Tue Sep 24 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-9

  - back out -fips package changes

• Fri Sep 20 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-8

  - Enable new packaging but don't apply nss-fips-post.patch
  - Related: rhbz#1008513 - Unable to login in fips mode

• Thu Sep 19 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-7

  - Fix the PR_Access stub to actually access the correct permissions
  - Resolves: rhbz#1008513 - Unable to login in fips mode
  - Run the lowhash tests
  - Require nspr-4.0.0 and nss-util-3.15.1

• Thu Sep 12 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-6

  - create -fips packages 
  - patch submitted by Bob Relyea <rrelyea@redhat.com>
  - fix the script that splits softoken off from nss
  - patch nss/cmd/lib/basicutil.c to build against nss-util-3.15.1
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]

• Mon Jul 29 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-5

  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released
  - Display cpuifo as part of the tests and make NSS_DISABLE_HW_GCM the environment variable to test for
  - When appling the patches use a backup file suffix that better describes the patch purpose

• Thu May 23 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-4

  - Enable ECC support for suite b and add upstream fixes for aec gcm
  - Use the unstripped upstream sources with ecc support
  - Limit the ECC support to suite b
  - Apply several upstream aes gcm fixes
  - Rename macros EC_MIN_KEY_BITS and EC_MAX_KEY_BITS per upstream
  - Resolves: rhbz#960208 - Enable ECC in nss-softoken
  - Related: rhbz#919172

• Fri Apr 26 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-3

  - Add patch to conditionally compile according to old or new sqlite api
  - new is used on rhel-6 while rhel-5 uses old but we need the same code for both
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue

• Tue Apr 09 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-2

  - Revert to using a code patch for relro support
  - Related: rhbz#919172

• Sun Mar 24 2013 Elio Maldonado <emaldona@redhat.com> - 3.14.3-1

  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib64 before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0

• Sat Mar 23 2013 Elio Maldonado - 3.12.9-12

  - Bootstrapping of the builroot in preparation for rebase to 3.14.3
  - Remove hasht.h from the %files devel list to prevent update conflicts with nss-util
  - With 3.14.3 hasht.h will be provided by nss-util-devel
  - Related: rhbz#919172 - rebase nss-softokn to 3.14.3

• Thu Oct 27 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-11

  - Bug 748524 - On NSS_NoDB_Init don't try to open pkcs11.txt or secmod.db

• Mon Oct 24 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-10

  - Bug 747053 - FIPS changes for NSS, more DRBG tests

• Tue Sep 27 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-9

  - Add relro support for executables and shared libraries

• Mon Jul 25 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-8

  - Include the patch

• Mon Jul 25 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-7

  - Fix the tag

• Fri Jul 22 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-5

  - Add partial RELRO support as a security enhancement

• Thu Jun 23 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-5

  - Retagging to pick up latest patch - Resolves: rhbz#710298

• Thu Jun 23 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-4

  - Resolves: rhbz#710298 - fix intel optimized aes code to handle case where input and ouput are in the same buffer

• Sun Feb 27 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-3

  - Add requires nss-softokn-freebl-devel to devel

• Fri Feb 04 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-2

  - Add headers for nss-softokn-freebl-devel and expand the description

• Mon Jan 17 2011 Elio Maldonado <emaldona@redhat.com> - 3.12.9-1

  - Update to 3.12.9
  - Enable Intel AES Hardware optimizations

• Fri Oct 01 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.8-1

  - Update to 3.12.8

• Thu Aug 26 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.7-1.1

  - Retagging to remove an obsolete file

• Thu Aug 26 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.7-1

  - Update to 3.12.7

• Thu Aug 05 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-19

  - Turn off Intel AES optimizations

• Tue Jun 08 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.6-2.1

  - Don't enable FIPS when CONFIG_CRYPTO_FIPS=n
  - Fix typo in the package description
  - Fix capitalization error in prelink conflict statement
  - Require nspr 4.8.4

• Wed Apr 21 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-17

  - Updated prelink patch

• Thu Apr 15 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-16

  - allow prelink of softoken and freebl. Change the verify code to use
    prelink -u if prelink is installed. Fix by Robert Relyea

• Mon Jan 18 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-11

  - Move libfreebl3.so and its .chk file to /lib{64} keeping
  - symbolic links to them in /usr/lib{64} so as not break others

• Mon Jan 18 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-10.3

  - fix broken global

• Sun Jan 17 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-10.2

  - rebuilt for RHEL-6-test-build

• Fri Jan 15 2010 Elio Maldonado <emaldona@redhat.com> - 3.12.4-10.1

  - Update to 3.12.4, reenable installing and pick up fixes from F-12

• Wed Aug 19 2009 Elio Maldonado <emaldona@redhat.com> 3.12.3.99.3-8.1

  - Disable installing until conflicts are relsoved

• Wed Aug 19 2009 Elio Maldonado <emaldona@redhat.com> 3.12.3.99.3-8

  - Initial build