CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

security/nss3.131.1

Libraries to support development of security-enabled applications

Maintainer
gecko@FreeBSD.org
Packages
nss 3.131.1
Upstream
up to date
CPE
mozilla:network_security_services from the port
WWW
https://firefox-source-docs.mozilla.org/security/nss/index.html
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (14)

VuXML entries whose affected range this version has left.

Commits (333)

Florian Smeets (flo) · 3.14.3
The files we are looking for are also in ${LOCALBASE}/bin, this should help people that installed binutils on an older version of FreeBSD and upgraded base in the meantime.

e.g. Install binutils on 9.0 they got installed in

${LOCALBASE}/x86_64-portbld-freebsd9.0

after upgrading to 9.1 the nss port would look in

${LOCALBASE}/x86_64-portbld-freebsd9.1

and not find the tools its looking for, falling back to the tools from base
that don't support all the instructions the nss ports needs.

Avoid all this by using ${LOCALBASE}/bin
253286a025
Florian Smeets (flo) · 3.14.3
- update firefox to 19.0 - update firefox-esr, thunderbird, linux-firefox, linux-thunderbird to 17.0.3 - update linux-seamonkey to 2.16 - update nspr to 4.9.5 - update nss to 3.14.3 - add DuckDuckGo search plugin to firefox [1] - mark kompozer deprecated - clang fixes for www/libxul19 [2]

Security:	http://www.vuxml.org/freebsd/e3f0374a-7ad6-11e2-84cd-d43d7e0c7c02.html
Submitted by:	DuckDuckGo [1], dim [2]
In collaboration with:	Jan Beich <jbeich@tormail.org>
d39d92427c
Florian Smeets (flo)
- update firefox, thunderbird, linux-firefox and linux-thunderbird to 17.0.2 - update firefox-esr, thunderbird-esr and libxul to 10.0.12 - update linux-seamonkey to 2.15

Security:	http://www.vuxml.org/freebsd/a4ed6632-5aa9-11e2-8fcb-c8600054b392.html
fc9eea7212
Florian Smeets (flo)
Update to 3.14.1.with.ckbi.1.93

This was released to revoke certificates that were used for MITM. For
details see:

https://blog.mozilla.org/security/2013/01/03/revoking-trust-in-two-turktrust-certficates/
0dc6f44549
Florian Smeets (flo)
- Update www/firefox{,-i18n} to 16.0.2 - Update seamonkey to 2.13.2 - Update ESR ports and libxul to 10.0.10 - Update nspr to 4.9.3 - Update nss to 3.14 - with GNOMEVFS2 option build its extension, too [1] - make heap-committed and heap-dirty reporters work in about:memory - properly mark QT4 as experimental (needs love upstream) - *miscellaneous cleanups and fixups*

mail/thunderbird will be updated once the tarballs are available.

PR:		ports/173052 [1]
Security:	6b3b1b97-207c-11e2-a03f-c8600054b392
Feature safe:	yes
In collaboration with:	Jan Beich <jbeich@tormail.org>
912a7b12e4
Florian Smeets (flo)
- Update firefox-esr, thunderbird-esr, linux-firefox and linux-thunderbird to 10.0.8 - Update firefox and thunderbird to 16.0 - Update seamonkey to 2.13 - Update all -i18n ports respectively - switch firefox 16.0 and seamonkey 2.13 to ALSA by default for better   latency during pause and seeking with HTML5 video - remove fedisableexcept() hacks, obsolete since FreeBSD 4.0 - support system hunspell

PR:		ports/171534 [1]
PR:		ports/171566 [2]
PR:		ports/172164 [3]
PR:		ports/172201 [4]
Discussed with:	ale, beat, Jan Beich [5]
Approved by:	ale [6]
In collaboration with:	Jan Beich <jbeich@tormail.org>
Security:	6e5a9afd-12d3-11e2-b47d-c8600054b392
Feature safe:	yes
Approved by:	portmgr (beat)
98ff1f74fb
Florian Smeets (flo)
- Update firefox to 15.0.1 - Sync changes from gecko repository@r995  general  - don't specify prefix for libevent when using pkg-config  - ia64 and sparc64 use 8k pagesize by default  - add visibility hack for clang 3.2 with libc++  - fix build using clang 3.2 (on FreeBSD 10-CURRENT)  - rename a few more patches to ease tracking of bugzilla bugs  www/seamonkey  - unbreak unsetting LDAP and MAILNE

In collaboration with:	andreast, zeising, Jan Beich <jbeich@tormail.org>
9e2d4844cf
Florian Smeets (flo)
- update firefox and thunderbird to 15.0 - update firefox-esr, thunderbird-esr, linux-thunderbird and linux-firefox to 10.0.7 - update seamonkey and linux-seamonkey to 2.12 - update nss to 3.13.6 - update bsdipc code (posix_spawn, SysV shared memory) - rename patches to easily track those not (yet) submitted upstream - reduce package size, except for www/libxul[1] - restore default objdir to what 

Obtained from:	OpenBSD ports[1]
PR:		ports/159831, ports/160933, ports/170467[3], ports/170236 [4]
Submitted by:	avilla [4]
In collaboration with:	Jan Beich <jbeich@tormail.net> Who did most of the hard
			work.
2f4c3550c5
Florian Smeets (flo)
- update firefox/thunderbird ESR versions to 10.0.6 - update firefox 14.0.1 - update thunderbird to 14.0 - update seamonkey to 2.11 - switch to new options framework - add experimental rendering via cairo-qt (QT4 option) - add audio backend options (ALSA and PulseAudio) - rename SMB option to GNOMEVFS2 - turn on LOGGING by default (like upstream linux builds) - improve about:memory output - unbrea

PR:		ports/146231 [1], ports/161421 [2]
		ports/150631, ports/168369, ports/168637, ports/168793, ports/168978 [3]
		ports/163454, ports/164905, ports/169231 [4]
       		ports/169389, ports/169479 [5]
Obtained from:	pkgsrc via bugzilla #753046 [6]
In collaboration with:	Jan Beich (who did the major part of this work and
			deserves a special thank you!)
30c1a0a792
Florian Smeets (flo)
Update to 3.13.5
1919aac47d
Florian Smeets (flo)
update to 3.13.4
d1ec39e75f
Florian Smeets (flo)
Update to 3.13.3
692b81883c
Florian Smeets (flo)
update to 3.13.2
a966a05ace
Florian Smeets (flo)
add upstream patch, to fix "__GNUC_MINOR is not defined" build error that causes some ports depending on nss to fail. e.g. net-im/pidgin-sipe. The patch is taken from https://bugzilla.mozilla.org/show_bug.cgi?id=702090

This patch will be part of the next nss release and can be removed with the next
update.

PR:		ports/164655
PR:		ports/164391
Submitted by:	rm
6ebf66408b
Florian Smeets (flo)
- update to NSS_3_13_1_WITH_CKBI_1_88_RTM - some fixes to make the regression tests actually run [1]

Submitted by:	mi [1]
75e63fc7f1
Florian Smeets (flo)
update to CKBI version 1.88 which includes the latest mozilla cert data
1b4c26530c
Koop Mast (kwm)
Move nspr and nss to gecko@ team. they are part of the mozilla stack.

Talked with flo@ at EuroBSD con 2011
689bdcb371
Koop Mast (kwm)
Update to 3.12.11.

This update is based on the nss-3.12.11.with.ckbi.1.87 release.
The only change with the nss-3.12.11 release is that the certs from the
DigiNotar CA are marked a untrusted.
0080509bac
Koop Mast (kwm)
Update to 3.12.10.

PR:		ports/159080
Submitted by:	flo@
b5762224ee
Koop Mast (kwm)
Patch a assumtion that uname -m returns the architecture value instead of MACHINE. This makes it unbuildable on platforms where these differ (pc98, powerpc64, sun4v). Use uname -p to fix this.

PR:		ports/155228
Submitted by:	Nathan Whitehorn <nwhitehorn@FreeBSD.org>
553b7566ff
Koop Mast (kwm)
Update to 3.12.9.

Submitted by:	beat
0262adf6ba
Beat Gaetzi (beat)
- Update to 3.12.8

Approved by:	kwm
a8a3b1bff6
Jeremy Messenger (mezz)
I did a typo of use incorrect braces in there, so it correct.

Submitted by:	Anonymous <swell.k@gmail.com>
Feature safe:	yes
76b523ffdc
Alex Dupre (ale)
Fix race condition in sqlite3 backend (Bug#564011).

Approved by:	mezz
Feature safe:	yes
7a21291cd6
Jeremy Messenger (mezz)
Respect the LOCALBASE in a patch to find sqlite3 correct.

PR:		ports/146197
Submitted by:	Anonymous <swell.k@gmail.com>
Feature safe:	yes
fc95db89d9
Koop Mast (kwm)
Fix the build on powerpc64. By adding CPU_ARCH detection. And by adding some G5-specific code in mpcpucache.c to detect cacheline sizes.

PR:		ports/147696
Submitted by:	nwhitehorn@
57e6e4d908
Alex Dupre (ale)
A bunch of changes for the SQLITE3 backend: 1) fix for bug #528467 (C_UnwrapKey didn't work with DSA and EC private keys) 2) fix for bug #526231 (C_GetAttributeValue didn't correctly work) 3) partial fix for bug #564011 (object ID race on keypairgen) 4) use sqlite3 in ports (there is no reason to compile the bundled one)

Approved by:	no objections by marcus and gnome team
7dde1715ae
Jeremy Messenger (mezz)
Fix the 'nss-config --libs' by remove the '-Wl,-R/usr/local/lib/nss' to allow other gecko applications to be able to build with nss.

PR:		ports/144994
Submitted by:	mi
bc87b82c62
Beat Gaetzi (beat)
- Update to 3.12.6

Approved by:	marcus
14d78e8c51
Marcel Moolenaar (marcel)
Fix build for ia64.

Ok'd by: bland@
438b1a4680
Alex Dupre (ale)
Fix subtle (cut'n'paste) bug.
a35f82137a
Joe Marcus Clarke (marcus)
Fix the permissions of the installed header files.

PR:		139245
Submitted by:	Aragon Gouveia <aragon@phat.za.net>
7c116674ef
Joe Marcus Clarke (marcus)
Fix the build on sparc64.

PR:		138877
Submitted by:	beat
Feature safe:	yes
b208b22ec0
Joe Marcus Clarke (marcus)
Update to 3.12.4.

PR:		138419
Submitted by:	Aragon Gouveia <aragon@phat.za.net>
fc9ed2d5c5
Joe Marcus Clarke (marcus)
Add PowerPC support.

Submitted by:	Andreas Tobler <andreast-list@fgznet.ch>
272c1f4a26
Pav Lucistnik (pav)
- Mark MAKE_JOBS_UNSAFE

Submitted by:	David Naylor <naylor.b.david@gmail.com>
84ceeb0c45
Pav Lucistnik (pav)
- Remove conditional checks for FreeBSD 5.x and older
b2a96c6df1
Michael Johnson (ahze)
Enable Elliptic Curve Crypto (ECC)

Requested by:	ale
bd80ae7b59
Michael Johnson (ahze)
Add part of missing patch back to fix build of net/lam

Requested by:	mezz
899f06a022
Michael Johnson (ahze)
Update to 3.11.9
2b2b793e2f
Jeremy Messenger (mezz)
Fix the build when net/lam installed in system.

PR:		ports/117623 and ports/114871
Reported by:	Alexander Vasyanin <avasyanin@mail.ru>
		Koji Yokota <yokota@res.otaru-uc.ac.jp>
98e28c9f66
Michael Johnson (ahze)
Update to 3.11.7
6738a6da10
Michael Johnson (ahze)
Update to 3.11.5
a6ddf0896c
Jeremy Messenger (mezz)
Fix a hardcore of /usr/X11R6 to X11BASE.

PR:		ports/110166
Reported by:	John Nielsen <john@jnielsen.net>
775b0262f8
Joe Marcus Clarke (marcus)
Presenting GNOME 2.18 for FreeBSD.  GNOME 2.18 is a departure from recent GNOME releases in that it focuses more on stability and functionality than on new features.  Not that it doesn't have its share of new and exciting items.  See http://www.gnome.org/start/2.18/ for all the goodies in this release.

GNOME 2.18 for FreeBSD would not have been possible without the hard work
of the FreeBSD GNOME Team and our intrepid band of testers including
J. W. Ballantine, Pawel Worach, Yasuda Keisuke, Pascal Hofstee, miwi,
Yoshihiro Ota, Vladimir Grebenschikov, Jukka A. Ukkonen,
Phillip Neumann, Franz Klammer, and Neal Delmonico.
951c257ea3
Pav Lucistnik (pav) · 3.11.4
- Fix after objformat removal
2dda6e32a7
Michael Johnson (ahze) · 3.11.4
Update to 3.11.4
f834e552a2
Michael Johnson (ahze) · 3.11.3
- Update to 3.11.3
07672685b6
Michael Johnson (ahze) · 3.11.2
- Remove notes about "make test" since there are known problems in it.
87b812df98
Michael Johnson (ahze) · 3.11.2
- Update to 3.11.2 - s/INSTALL_PROGRAM/INSTALL_DATA/ on libs
de27db5c98