[oe-commits] Li Wang : nss: CVE-2013-1740

[git at git.openembedded.org]

Module: openembedded-core.git
Branch: master-next
Commit: 11e728e64e37eec72ed0cb3fb4d5a49ddeb88666
URL:    http://git.openembedded.org/?p=openembedded-core.git&a=commit;h=11e728e64e37eec72ed0cb3fb4d5a49ddeb88666

Author: Li Wang <li.wang at windriver.com>
Date:   Mon May 19 13:42:53 2014 +0800

nss: CVE-2013-1740

the patch comes from:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-1740
https://bugzilla.mozilla.org/show_bug.cgi?id=919877
https://bugzilla.mozilla.org/show_bug.cgi?id=713933

changeset:   10946:f28426e944ae
user:        Wan-Teh Chang <wtc at google.com>
date:        Tue Nov 26 16:44:39 2013 -0800
summary:     Bug 713933: Handle the return value of both ssl3_HandleRecord calls

changeset:   10945:774c7dec7565
user:        Wan-Teh Chang <wtc at google.com>
date:        Mon Nov 25 19:16:23 2013 -0800
summary:     Bug 713933: Declare the |falseStart| local variable in the smallest

changeset:   10848:141fae8fb2e8
user:        Wan-Teh Chang <wtc at google.com>
date:        Mon Sep 23 11:25:41 2013 -0700
summary:     Bug 681839: Allow SSL_HandshakeNegotiatedExtension to be called before the handshake is finished, r=brian at briansmith.org

changeset:   10898:1b9c43d28713
user:        Brian Smith <brian at briansmith.org>
date:        Thu Oct 31 15:40:42 2013 -0700
summary:     Bug 713933: Make SSL False Start work with asynchronous certificate validation, r=wtc

Signed-off-by: Li Wang <li.wang at windriver.com>
Signed-off-by: Roy Li <rongqing.li at windriver.com>
Signed-off-by: Saul Wold <sgw at linux.intel.com>

---

 .../nss/files/nss-CVE-2013-1740.patch              | 916 +++++++++++++++++++++
 meta/recipes-support/nss/nss.inc                   |   1 +
 2 files changed, 917 insertions(+)

Diff:   http://git.openembedded.org/?p=openembedded-core.git/?a=commitdiff;h=11e728e64e37eec72ed0cb3fb4d5a49ddeb88666