buildroot/package/libnss, branch 2017.05

package/l*/Config.in: fix ordering of statements

2017-05-01T09:51:23+00:00

The check-package script when ran gives warnings on ordering issues on all of these Config files. This patch cleans up all warnings related to the ordering in the Config files for packages starting with the letter l in the package directory. The appropriate ordering is: type, default, depends on, select, help See http://nightly.buildroot.org/#_config_files for more information. Signed-off-by: Adam Duskett Signed-off-by: Thomas Petazzoni

libnss: security bump to version 3.30.2

2017-04-20T19:53:00+00:00

CVE-2017-5461 - Out-of-bounds write in Base64 encoding in NSS. Might cause remote arbitrary code execution (https://access.redhat.com/errata/RHSA-2017:1100). CVE-2017-5462 - DRBG flaw in NSS Drop 0001-cross-compile.patch and TARGET* variables. Upstream Makefile now allows override of CC, so use TARGET_CONFIGURE_OPTS instead. Drop upstream 0003-it-uninitialized-fix.patch. Renumber the remaining patch. Signed-off-by: Baruch Siach Signed-off-by: Thomas Petazzoni

package: use SPDX short identifier for MPL family licenses

2017-04-01T13:27:47+00:00

We want to use SPDX identifier for license string as much as possible. SPDX short identifier for MPLv1.0/MPLv1.1/MPLv2.0 is MPL-1.0/MPL-1.1/ MPL-2.0. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/MPLv([1-2]\.[0-1])/MPL-\1/g' Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

libnss: workaround for microblaze ld bug

2017-02-19T21:23:21+00:00

Add a workaround for a microblaze specific ld bug to avoid segfault. Fixes: http://autobuild.buildroot.net/results/638a65453879777a0d5bdb29231034cd261b41c0 [Peter: rename to LIBNSS_DROP_GC_SECTIONS for clarity] Signed-off-by: Waldemar Brodkorb Signed-off-by: Peter Korsgaard

libnss: bump to version 3.27.2

2017-01-09T16:18:04+00:00

Fixes a memory leak in SSL_SetTrustAnchors(): https://bugzilla.mozilla.org/show_bug.cgi?id=1318561 Signed-off-by: Peter Korsgaard

libnss: add upstream patch to fix uninitialized variable warning

2016-11-06T13:41:11+00:00

Fixes: http://autobuild.buildroot.net/results/47e611036be12844ebca093ddd8fe95c326c6056/ Signed-off-by: Thomas Petazzoni

libnss: use $(TARGET_MAKE_ENV) when calling $(MAKE)

2016-10-15T12:17:28+00:00

Signed-off-by: Gustavo Zacarias Reviewed-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Thomas Petazzoni

libnss: bump to version 3.27.1

2016-10-13T06:04:33+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

nss: security bump to version 3.23

2016-03-31T01:43:58+00:00

Fixes: CVE-2016-1950 - Fixed a heap-based buffer overflow related to the parsing of certain ASN.1 structures. An attacker could create a specially-crafted certificate which, when parsed by NSS, would cause a crash or execution of arbitrary code with the permissions of the user. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libnss: security bump to version 3.22.2

2016-03-09T12:14:13+00:00

Fixes: CVE-2016-1950 - heap-based buffer overflow related to the parsing of certain ASN.1 structures. An attacker could create a specially-crafted certificate which, when parsed by NSS, would cause a crash or execution of arbitrary code with the permissions of the user. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard