buildroot/package/libnss, branch 2017.11.2

libnss: security bump to version 3.33

2017-10-15T13:58:44+00:00

Fixes CVE-2017-7805 - Martin Thomson discovered that nss, the Mozilla Network Security Service library, is prone to a use-after-free vulnerability in the TLS 1.2 implementation when handshake hashes are generated. A remote attacker can take advantage of this flaw to cause an application using the nss library to crash, resulting in a denial of service, or potentially to execute arbitrary code. Also add a hash for the license file while we're at it. Signed-off-by: Peter Korsgaard Signed-off-by: Thomas Petazzoni

libnss: bump to version 3.31

2017-06-15T20:05:35+00:00

Fixes build with gcc 7. https://hg.mozilla.org/projects/nss/rev/0dca14409fef Fixes: http://autobuild.buildroot.net/results/b71/b71e4e003ec5753708a07cfd04e3025c93f80e67/ http://autobuild.buildroot.net/results/66d/66d31923824d34df3b20a363a1346df1c00ae222/ Signed-off-by: Baruch Siach Signed-off-by: Peter Korsgaard

package/l*/Config.in: fix ordering of statements

2017-05-01T09:51:23+00:00

The check-package script when ran gives warnings on ordering issues on all of these Config files. This patch cleans up all warnings related to the ordering in the Config files for packages starting with the letter l in the package directory. The appropriate ordering is: type, default, depends on, select, help See http://nightly.buildroot.org/#_config_files for more information. Signed-off-by: Adam Duskett Signed-off-by: Thomas Petazzoni

libnss: security bump to version 3.30.2

2017-04-20T19:53:00+00:00

CVE-2017-5461 - Out-of-bounds write in Base64 encoding in NSS. Might cause remote arbitrary code execution (https://access.redhat.com/errata/RHSA-2017:1100). CVE-2017-5462 - DRBG flaw in NSS Drop 0001-cross-compile.patch and TARGET* variables. Upstream Makefile now allows override of CC, so use TARGET_CONFIGURE_OPTS instead. Drop upstream 0003-it-uninitialized-fix.patch. Renumber the remaining patch. Signed-off-by: Baruch Siach Signed-off-by: Thomas Petazzoni

package: use SPDX short identifier for MPL family licenses

2017-04-01T13:27:47+00:00

We want to use SPDX identifier for license string as much as possible. SPDX short identifier for MPLv1.0/MPLv1.1/MPLv2.0 is MPL-1.0/MPL-1.1/ MPL-2.0. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/MPLv([1-2]\.[0-1])/MPL-\1/g' Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

libnss: workaround for microblaze ld bug

2017-02-19T21:23:21+00:00

Add a workaround for a microblaze specific ld bug to avoid segfault. Fixes: http://autobuild.buildroot.net/results/638a65453879777a0d5bdb29231034cd261b41c0 [Peter: rename to LIBNSS_DROP_GC_SECTIONS for clarity] Signed-off-by: Waldemar Brodkorb Signed-off-by: Peter Korsgaard

libnss: bump to version 3.27.2

2017-01-09T16:18:04+00:00

Fixes a memory leak in SSL_SetTrustAnchors(): https://bugzilla.mozilla.org/show_bug.cgi?id=1318561 Signed-off-by: Peter Korsgaard

libnss: add upstream patch to fix uninitialized variable warning

2016-11-06T13:41:11+00:00

Fixes: http://autobuild.buildroot.net/results/47e611036be12844ebca093ddd8fe95c326c6056/ Signed-off-by: Thomas Petazzoni

libnss: use $(TARGET_MAKE_ENV) when calling $(MAKE)

2016-10-15T12:17:28+00:00

Signed-off-by: Gustavo Zacarias Reviewed-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Thomas Petazzoni

libnss: bump to version 3.27.1

2016-10-13T06:04:33+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard