-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-19985 2013-10-25 23:49:44 --------------------------------------------------------------------------------
Name : mod_nss Product : Fedora 19 Version : 1.0.8 Release : 24.fc19 URL : http://directory.fedoraproject.org/wiki/Mod_nss Summary : SSL/TLS module for the Apache HTTP server Description : The mod_nss module provides strong cryptography for the Apache Web server via the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols using the Network Security Services (NSS) security library. -------------------------------------------------------------------------------- Update Information: Bugzilla Bug #961471 - Port Downstream Patches Upstream -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 21 2013 Matthew Harmsen <[email protected]> - 1.0.8-24 - Bugzilla Bug #961471 - Port Downstream Patches Upstream (mharmsen) - Add '--enable-ecc' option to ' CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic}" ; export CFLAGS ; CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic}" ; export CXXFLAGS ; FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; for i in $(find . -name config.guess -o -name config.sub) ; do [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; done ; ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \ --program-prefix= \ --disable-dependency-tracking \ --prefix=/usr \ --exec-prefix=/usr \ --bindir=/usr/bin \ --sbindir=/usr/sbin \ --sysconfdir=/etc \ --datadir=/usr/share \ --includedir=/usr/include \ --libdir=/usr/lib64 \ --libexecdir=/usr/libexec \ --localstatedir=/var \ --sharedstatedir=/var/lib \ --mandir=/usr/share/man \ --infodir=/usr/share/info' line under '%build' section of this spec file (mharmsen) - Bumped version build/runtime requirements for NSPR and NSS (mharmsen) - [mod_nss-PK11_ListCerts_2.patch] - Bugzilla Bug #767802 - PK11_ListCerts called to retrieve all user certificates for every server (rcritten) - [mod_nss-array_overrun.patch] - Bugzilla Bug #1022717 - overrunning array when executing nss_pcache (rcritten) - [mod_nss-clientauth.patch] - Bugzilla Bug #1017675 - mod_nss: FakeBasicAuth authentication bypass [fedora-all] (rcritten) - [mod_nss-no_shutdown_if_not_init_2.patch] - Bugzilla Bug #1022722 - File descriptor leak after "service httpd reload" or httpd doesn't reload (rrelyea) - [mod_nss-proxyvariables.patch] - Bugzilla Bug #1022726 - mod_nss insists on Required value NSSCipherSuite not set. (mharmsen) - [mod_nss-tlsv1_1.patch] - Bugzilla Bug #979798 - current nss support TLS 1.1 so mod_nss should pick it up (mharmsen) - Bugzilla Bug #979718 - mod_nss documentation should mention TLS 1.1 (mharmsen) - [mod_nss-sslmultiproxy_2.patch] - Fixes Bugzilla Bug #1021469 - [RFE] Support ability to share mod_proxy with other SSL providers (jorton, mharmsen, nkinder, & rcritten) * Tue Jul 30 2013 Joe Orton <[email protected]> - 1.0.8-23 - add dependency on httpd-mmn * Wed Jul 3 2013 Matthew Harmsen <[email protected]> - 1.0.8-22 - Moved 'nss_pcache' from %sbindir to %libexecdir (provided compatibility link) * Tue Jul 2 2013 Matthew Harmsen <[email protected]> - 1.0.8-21.1 - rpmlint mod_nss.spec 0 packages and 1 specfiles checked; 0 errors, 0 warnings. - rpmlint mod_nss-1.0.8-21.1 (SRPM) W: spelling-error %description -l en_US nss -> ass, nos, nus 1 packages and 0 specfiles checked; 0 errors, 1 warnings. - rpmlint mod_nss-1.0.8-21.1 (RPM) W: spelling-error %description -l en_US nss -> ass, nos, nus E: non-readable /etc/httpd/alias/cert8.db 0640L E: non-readable /etc/httpd/alias/secmod.db 0640L E: non-readable /etc/httpd/alias/key3.db 0640L 1 packages and 0 specfiles checked; 3 errors, 1 warnings. - rpmlint mod_nss-debuginfo-1.0.8-21.1 (RPM) W: spelling-error Summary(en_US) nss -> ass, nos, nus W: spelling-error %description -l en_US nss -> ass, nos, nus 1 packages and 0 specfiles checked; 0 errors, 2 warnings. * Tue Jun 25 2013 Matthew Harmsen <[email protected]> - 1.0.8-21 - Bugzilla Bug #884115 - Package mod_nss-1.0.8-18.1.el7 failed RHEL7 RPMdiff testing - Bugzilla Bug #906082 - mod_nss requires manpages for gencert and nss_pcache - Bugzilla Bug #906089 - Fix dangling symlinks in mod_nss - Bugzilla Bug #906097 - Correct RPM Parse Warning in mod_nss.spec - Bugzilla Bug #948601 - Man page scan results for mod_nss -------------------------------------------------------------------------------- References: [ 1 ] Bug #961471 - Port Downstream Patches Upstream https://bugzilla.redhat.com/show_bug.cgi?id=961471 [ 2 ] Bug #767802 - PK11_ListCerts called to retrieve all user certificates for every server https://bugzilla.redhat.com/show_bug.cgi?id=767802 [ 3 ] Bug #1022717 - overrunning array when executing nss_pcache https://bugzilla.redhat.com/show_bug.cgi?id=1022717 [ 4 ] Bug #1017675 - mod_nss: FakeBasicAuth authentication bypass [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1017675 [ 5 ] Bug #979798 - current nss support TLS 1.1 so mod_nss should pick it up https://bugzilla.redhat.com/show_bug.cgi?id=979798 [ 6 ] Bug #979718 - mod_nss documentation should mention TLS 1.1 https://bugzilla.redhat.com/show_bug.cgi?id=979718 [ 7 ] Bug #1021469 - [RFE] Support ability to share mod_proxy with other SSL providers https://bugzilla.redhat.com/show_bug.cgi?id=1021469 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update mod_nss' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/package-announce
