Bug 204332 - security/nss: update to 3.20.1 (CVE-2015-7181, CVE-2015-7182)
Summary: security/nss: update to 3.20.1 (CVE-2015-7181, CVE-2015-7182)
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: freebsd-gecko (Nobody)
URL:
Keywords: patch, patch-ready, security
Depends on: 204277
Blocks:
  Show dependency treegraph
 
Reported: 2015-11-06 12:38 UTC by Christoph Moench-Tegeder
Modified: 2015-11-28 18:12 UTC (History)
2 users (show)

See Also:


Attachments
drop-in upgrade (1.21 KB, patch)
2015-11-06 12:38 UTC, Christoph Moench-Tegeder
no flags Details | Diff
poudriere testport log (902.87 KB, text/plain)
2015-11-06 12:43 UTC, Christoph Moench-Tegeder
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Christoph Moench-Tegeder freebsd_committer freebsd_triage 2015-11-06 12:38:10 UTC
Created attachment 162851 [details]
drop-in upgrade

Drop-In upgrade.

Security:
https://www.mozilla.org/en-US/security/advisories/mfsa2015-133/

Note: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_Releases does not show the new version yet.

This upgrade requires the nspr update from 204277
Comment 1 Christoph Moench-Tegeder freebsd_committer freebsd_triage 2015-11-06 12:43:52 UTC
Created attachment 162852 [details]
poudriere testport log
Comment 2 commit-hook freebsd_committer freebsd_triage 2015-11-20 00:39:08 UTC
A commit references this bug:

Author: jbeich
Date: Fri Nov 20 00:38:43 UTC 2015
New revision: 401981
URL: https://svnweb.freebsd.org/changeset/ports/401981

Log:
  gecko: catch up with 2015-11-03 release train

  - Update NSPR to 4.10.10 [1]
  - Update NSS to 3.20.1 [2]
  - Update Firefox ESR and libxul to 38.4.0
  - Update Firefox to 42.0 [2]
  - Update SeaMonkey to 2.39

  Changes:	http://mozilla.6506.n7.nabble.com/ANNOUNCE-NSPR-4-10-10-Release-td346822.html
  Changes:	https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20.1_release_notes
  Changes:	https://www.mozilla.org/en-US/firefox/42.0/releasenotes/
  Changes:	http://www.seamonkey-project.org/news#2015-11-08
  PR:		204277 [1], 204332 [2], 203099
  Submitted by:	swills, Christoph Moench-Tegeder
  MFH:		2015Q4
  Security:	9d04936c-75f1-4a2c-9ade-4c1708be5df9

Changes:
  head/Mk/Uses/gecko.mk
  head/devel/nspr/Makefile
  head/devel/nspr/distinfo
  head/security/ca_root_nss/Makefile
  head/security/ca_root_nss/distinfo
  head/security/nss/Makefile
  head/security/nss/distinfo
  head/www/firefox/Makefile
  head/www/firefox/distinfo
  head/www/firefox/files/patch-bug1181382
  head/www/firefox/files/patch-bug702179
  head/www/firefox/files/patch-bug779713
  head/www/firefox/files/patch-bug981348
  head/www/firefox/files/patch-media_libav_config__unix.h
  head/www/firefox/files/patch-memory-jemalloc-Makefile.in
  head/www/firefox/files/patch-soundtouch-no-factory
  head/www/firefox/files/patch-toolkit_system_unixproxy_nsLibProxySettings.cpp
  head/www/firefox/files/patch-z-bug517422
  head/www/firefox-esr/Makefile
  head/www/firefox-esr/distinfo
  head/www/firefox-esr-i18n/Makefile
  head/www/firefox-esr-i18n/distinfo
  head/www/firefox-i18n/Makefile
  head/www/firefox-i18n/distinfo
  head/www/libxul/Makefile
  head/www/libxul/distinfo
  head/www/linux-firefox/Makefile
  head/www/linux-firefox/distinfo
  head/www/linux-firefox/pkg-plist
  head/www/linux-seamonkey/Makefile
  head/www/linux-seamonkey/distinfo
  head/www/linux-seamonkey/pkg-plist
  head/www/seamonkey/Makefile
  head/www/seamonkey/distinfo
  head/www/seamonkey/files/extra-patch-bug1125514
  head/www/seamonkey/files/patch-bug1021761
  head/www/seamonkey/files/patch-bug1103858
  head/www/seamonkey/files/patch-bug1112904
  head/www/seamonkey/files/patch-bug1122547
  head/www/seamonkey/files/patch-bug1125579
  head/www/seamonkey/files/patch-bug1125580
  head/www/seamonkey/files/patch-bug1128161
  head/www/seamonkey/files/patch-bug1143411
  head/www/seamonkey/files/patch-bug292127
  head/www/seamonkey/files/patch-bug702179
  head/www/seamonkey/files/patch-bug779713
  head/www/seamonkey/files/patch-bug826985
  head/www/seamonkey/files/patch-bug847568
  head/www/seamonkey/files/patch-bug899126
  head/www/seamonkey/files/patch-bug981348
  head/www/seamonkey/files/patch-build-pgo-profileserver.py
  head/www/seamonkey/files/patch-config-baseconfig.mk
  head/www/seamonkey/files/patch-ijg-libjpeg
  head/www/seamonkey/files/patch-ldap_ldap-sdk.mozbuild
  head/www/seamonkey/files/patch-media-libstagefright-foundation-AString.cpp
  head/www/seamonkey/files/patch-media-mtransport-third_party-nICEr-src-util-mbslen.c
  head/www/seamonkey/files/patch-media-webrtc-trunk-src-system_wrappers-source-spreadsortlib-spreadsort.hpp
  head/www/seamonkey/files/patch-media_libav_config__unix.h
  head/www/seamonkey/files/patch-modules-libpref-init-all.js
  head/www/seamonkey/files/patch-mozilla-config-baseconfig.mk
  head/www/seamonkey/files/patch-mozilla-media-libstagefright-foundation-AString.cpp
  head/www/seamonkey/files/patch-mozilla-media-mtransport-third_party-nICEr-src-util-mbslen.c
  head/www/seamonkey/files/patch-mozilla-media-webrtc-trunk-src-system_wrappers-source-spreadsortlib-spreadsort.hpp
  head/www/seamonkey/files/patch-mozilla-memory-jemalloc-Makefile.in
  head/www/seamonkey/files/patch-mozilla-memory-jemalloc-configure.ac
  head/www/seamonkey/files/patch-mozilla_toolkit_mozapps_installer_packager_mk
  head/www/seamonkey/files/patch-soundtouch-no-factory
  head/www/seamonkey/files/patch-suite-app-nsSuiteApp.cpp
  head/www/seamonkey/files/patch-toolkit_mozapps_installer_packager_mk
  head/www/seamonkey/files/patch-toolkit_system_unixproxy_nsLibProxySettings.cpp
  head/www/seamonkey/files/patch-z-bug517422
  head/www/seamonkey-i18n/Makefile
  head/www/seamonkey-i18n/distinfo
Comment 3 commit-hook freebsd_committer freebsd_triage 2015-11-24 01:18:52 UTC
A commit references this bug:

Author: jbeich
Date: Tue Nov 24 01:18:25 UTC 2015
New revision: 402340
URL: https://svnweb.freebsd.org/changeset/ports/402340

Log:
  MFH: r401981, r402196

  gecko: catch up with 2015-11-03 release train

  - Update NSPR to 4.10.10 [1]
  - Update NSS to 3.20.1 [2]
  - Update Firefox ESR and libxul to 38.4.0
  - Update Firefox to 42.0 [2]
  - Update SeaMonkey to 2.39

  Changes:	http://mozilla.6506.n7.nabble.com/ANNOUNCE-NSPR-4-10-10-Release-td346822.html
  Changes:	https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20.1_release_notes
  Changes:	https://www.mozilla.org/en-US/firefox/42.0/releasenotes/
  Changes:	http://www.seamonkey-project.org/news#2015-11-08
  PR:		204277 [1], 204332 [2], 203099
  Submitted by:	swills, Christoph Moench-Tegeder
  Security:	9d04936c-75f1-4a2c-9ade-4c1708be5df9
  Approved by:	ports-secteam (feld), portmgr (erwin)

Changes:
_U  branches/2015Q4/
  branches/2015Q4/Mk/Uses/gecko.mk
  branches/2015Q4/devel/nspr/Makefile
  branches/2015Q4/devel/nspr/distinfo
  branches/2015Q4/security/ca_root_nss/Makefile
  branches/2015Q4/security/ca_root_nss/distinfo
  branches/2015Q4/security/nss/Makefile
  branches/2015Q4/security/nss/distinfo
  branches/2015Q4/www/firefox/Makefile
  branches/2015Q4/www/firefox/distinfo
  branches/2015Q4/www/firefox/files/patch-bug1181382
  branches/2015Q4/www/firefox/files/patch-bug702179
  branches/2015Q4/www/firefox/files/patch-bug779713
  branches/2015Q4/www/firefox/files/patch-bug981348
  branches/2015Q4/www/firefox/files/patch-media_libav_config__unix.h
  branches/2015Q4/www/firefox/files/patch-memory-jemalloc-Makefile.in
  branches/2015Q4/www/firefox/files/patch-soundtouch-no-factory
  branches/2015Q4/www/firefox/files/patch-toolkit_system_unixproxy_nsLibProxySettings.cpp
  branches/2015Q4/www/firefox/files/patch-z-bug517422
  branches/2015Q4/www/firefox-esr/Makefile
  branches/2015Q4/www/firefox-esr/distinfo
  branches/2015Q4/www/firefox-esr-i18n/Makefile
  branches/2015Q4/www/firefox-esr-i18n/distinfo
  branches/2015Q4/www/firefox-i18n/Makefile
  branches/2015Q4/www/firefox-i18n/distinfo
  branches/2015Q4/www/libxul/Makefile
  branches/2015Q4/www/libxul/distinfo
  branches/2015Q4/www/linux-firefox/Makefile
  branches/2015Q4/www/linux-firefox/distinfo
  branches/2015Q4/www/linux-firefox/pkg-plist
  branches/2015Q4/www/linux-seamonkey/Makefile
  branches/2015Q4/www/linux-seamonkey/distinfo
  branches/2015Q4/www/linux-seamonkey/pkg-plist
  branches/2015Q4/www/seamonkey/Makefile
  branches/2015Q4/www/seamonkey/distinfo
  branches/2015Q4/www/seamonkey/files/extra-patch-bug1125514
  branches/2015Q4/www/seamonkey/files/patch-bug1021761
  branches/2015Q4/www/seamonkey/files/patch-bug1103858
  branches/2015Q4/www/seamonkey/files/patch-bug1112904
  branches/2015Q4/www/seamonkey/files/patch-bug1122547
  branches/2015Q4/www/seamonkey/files/patch-bug1125579
  branches/2015Q4/www/seamonkey/files/patch-bug1125580
  branches/2015Q4/www/seamonkey/files/patch-bug1128161
  branches/2015Q4/www/seamonkey/files/patch-bug1143411
  branches/2015Q4/www/seamonkey/files/patch-bug292127
  branches/2015Q4/www/seamonkey/files/patch-bug702179
  branches/2015Q4/www/seamonkey/files/patch-bug779713
  branches/2015Q4/www/seamonkey/files/patch-bug826985
  branches/2015Q4/www/seamonkey/files/patch-bug847568
  branches/2015Q4/www/seamonkey/files/patch-bug899126
  branches/2015Q4/www/seamonkey/files/patch-bug981348
  branches/2015Q4/www/seamonkey/files/patch-build-pgo-profileserver.py
  branches/2015Q4/www/seamonkey/files/patch-config-baseconfig.mk
  branches/2015Q4/www/seamonkey/files/patch-ijg-libjpeg
  branches/2015Q4/www/seamonkey/files/patch-ldap_ldap-sdk.mozbuild
  branches/2015Q4/www/seamonkey/files/patch-media-libstagefright-foundation-AString.cpp
  branches/2015Q4/www/seamonkey/files/patch-media-mtransport-third_party-nICEr-src-util-mbslen.c
  branches/2015Q4/www/seamonkey/files/patch-media-webrtc-trunk-src-system_wrappers-source-spreadsortlib-spreadsort.hpp
  branches/2015Q4/www/seamonkey/files/patch-media_libav_config__unix.h
  branches/2015Q4/www/seamonkey/files/patch-modules-libpref-init-all.js
  branches/2015Q4/www/seamonkey/files/patch-mozilla-config-baseconfig.mk
  branches/2015Q4/www/seamonkey/files/patch-mozilla-media-libstagefright-foundation-AString.cpp
  branches/2015Q4/www/seamonkey/files/patch-mozilla-media-mtransport-third_party-nICEr-src-util-mbslen.c
  branches/2015Q4/www/seamonkey/files/patch-mozilla-media-webrtc-trunk-src-system_wrappers-source-spreadsortlib-spreadsort.hpp
  branches/2015Q4/www/seamonkey/files/patch-mozilla-memory-jemalloc-Makefile.in
  branches/2015Q4/www/seamonkey/files/patch-mozilla-memory-jemalloc-configure.ac
  branches/2015Q4/www/seamonkey/files/patch-mozilla_toolkit_mozapps_installer_packager_mk
  branches/2015Q4/www/seamonkey/files/patch-soundtouch-no-factory
  branches/2015Q4/www/seamonkey/files/patch-suite-app-nsSuiteApp.cpp
  branches/2015Q4/www/seamonkey/files/patch-toolkit_mozapps_installer_packager_mk
  branches/2015Q4/www/seamonkey/files/patch-toolkit_system_unixproxy_nsLibProxySettings.cpp
  branches/2015Q4/www/seamonkey/files/patch-z-bug517422
  branches/2015Q4/www/seamonkey-i18n/Makefile
  branches/2015Q4/www/seamonkey-i18n/distinfo
Comment 4 Mark Felder freebsd_committer freebsd_triage 2015-11-27 21:19:06 UTC
Can someone please MFH these security fixes? Thanks!
Comment 5 Mark Felder freebsd_committer freebsd_triage 2015-11-28 18:12:57 UTC
(In reply to Mark Felder from comment #4)

Nevermind, this was already MFH. I'm guessing the packages hadn't hit the mirror yet for the person who reported it was missing.