Changelog for nss-softokn-freebl-3.14.3-23.3.el6_8.i686.rpm :
Mon May 23 14:00:00 2016 Elio Maldonado - 3.14.3-23.3
- Build using the proper RHEL-6.8-Z release target
- Resolves: Bug 1337821

Fri May 20 14:00:00 2016 Elio Maldonado - 3.14.3-23.2
- Bump the release tag
- Turn off AVX if the OS (or VM) doesn\'t support it.
- Resolves: Bug 1337821

Fri May 20 14:00:00 2016 Bob Relyea - 3.14.3-23.1
- Turn off AVX if the OS (or VM) doesn\'t support it.
- Resolves: Bug 1337821

Mon Aug 10 14:00:00 2015 Elio Maldonado - 3.14.3-23
- Pick up upstream freebl patch for CVE-2015-2730
- Check for P == Q or P ==-Q before adding P and Q

Wed Jan 28 13:00:00 2015 Bob Relyea - 3.14.3-22
- fix permissions on dracut install file.
- Resolves: Bug 1182297

Fri Jan 16 13:00:00 2015 Bob Relyea - 3.14.3-21
- Require nss-softokn-freebl of at least the same version and release
- Resolves: Bug 1182662 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm

Thu Jan 8 13:00:00 2015 Bob Relyea - 3.14.3-20
- keep a dummy libfreebl3.chk to keep dracut happy.

Mon Dec 1 13:00:00 2014 Bob Relyea - 3.14.3-19
- Resolves: Bug 1166921 - nss-softokn recent change causes application to segfault

Wed Oct 22 14:00:00 2014 Bob Relyea - 3.14.3-18
- Silent sigchld events

Thu Sep 25 14:00:00 2014 Kai Engert - 3.14.3-17
- Adjust patch to be compatible with legacy softokn API.
- Resolves: Bug 1145432 - CVE-2014-1568

Tue Sep 23 14:00:00 2014 Elio Maldonado - 3.14.3-16
- Resolves: Bug 1145432 - CVE-2014-1568

Thu Aug 7 14:00:00 2014 Elio Maldonado - 3.14.3-15
- Fix shlibsign to return non-zero on failure
- Resolves: Bug 587634 - shlibsign returns 0 although if fails

Mon Jun 9 14:00:00 2014 Bob Relyea - 3.14.3.14
- Final Fips review comments.

Mon Apr 7 14:00:00 2014 Bob Relyea - 3.14.3.13
- Fips review comments.

Tue Mar 25 13:00:00 2014 Elio Maldonado - 3.14.3-12
- Avoid call to sdb_measureAccess in lib/softoken/sdb.c s_open if NSS_SDB_USE_CACHE is \"yes\" or \"no\"
- Resolves: Bug 1044666 - Can curl HTTPS requests make fewer access system calls?

Tue Mar 25 13:00:00 2014 Elio Maldonado - 3.14.3-11
- Skip calls to CHECK_FORK in {C & NSC}_GetFunctionList
- Resolves: Bug 1053437 - Admin server segfault when configuration DS configured on SSL port

Mon Mar 24 13:00:00 2014 Bob Relyea - 3.14.3.10
- add fips precheck back into softokn.

Tue Sep 24 14:00:00 2013 Elio Maldonado - 3.14.3-9
- back out -fips package changes

Fri Sep 20 14:00:00 2013 Elio Maldonado - 3.14.3-8
- Enable new packaging but don\'t apply nss-fips-post.patch
- Related: rhbz#1008513 - Unable to login in fips mode

Thu Sep 19 14:00:00 2013 Elio Maldonado - 3.14.3-7
- Fix the PR_Access stub to actually access the correct permissions
- Resolves: rhbz#1008513 - Unable to login in fips mode
- Run the lowhash tests
- Require nspr-4.0.0 and nss-util-3.15.1

Thu Sep 12 14:00:00 2013 Elio Maldonado - 3.14.3-6
- create -fips packages
- patch submitted by Bob Relyea
- fix the script that splits softoken off from nss
- patch nss/cmd/lib/basicutil.c to build against nss-util-3.15.1
- Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]

Mon Jul 29 14:00:00 2013 Elio Maldonado - 3.14.3-5
- Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released
- Display cpuifo as part of the tests and make NSS_DISABLE_HW_GCM the environment variable to test for
- When appling the patches use a backup file suffix that better describes the patch purpose

Thu May 23 14:00:00 2013 Elio Maldonado - 3.14.3-4
- Enable ECC support for suite b and add upstream fixes for aec gcm
- Use the unstripped upstream sources with ecc support
- Limit the ECC support to suite b
- Apply several upstream aes gcm fixes
- Rename macros EC_MIN_KEY_BITS and EC_MAX_KEY_BITS per upstream
- Resolves: rhbz#960208 - Enable ECC in nss-softoken
- Related: rhbz#919172

Fri Apr 26 14:00:00 2013 Elio Maldonado - 3.14.3-3
- Add patch to conditionally compile according to old or new sqlite api
- new is used on rhel-6 while rhel-5 uses old but we need the same code for both
- Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue

Tue Apr 9 14:00:00 2013 Elio Maldonado - 3.14.3-2
- Revert to using a code patch for relro support
- Related: rhbz#919172

Sun Mar 24 13:00:00 2013 Elio Maldonado - 3.14.3-1
- Update to NSS_3_14_3_RTM
- Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
- Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib before the signing commands in __spec_install_post scriplet
to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
- Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
- Don\'t install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
- Update the licence to MPLv2.0

Sat Mar 23 13:00:00 2013 Elio Maldonado - 3.12.9-12
- Bootstrapping of the builroot in preparation for rebase to 3.14.3
- Remove hasht.h from the %files devel list to prevent update conflicts with nss-util
- With 3.14.3 hasht.h will be provided by nss-util-devel
- Related: rhbz#919172 - rebase nss-softokn to 3.14.3

Thu Oct 27 14:00:00 2011 Elio Maldonado - 3.12.9-11
- Bug 748524 - On NSS_NoDB_Init don\'t try to open pkcs11.txt or secmod.db

Mon Oct 24 14:00:00 2011 Elio Maldonado - 3.12.9-10
- Bug 747053 - FIPS changes for NSS, more DRBG tests

Tue Sep 27 14:00:00 2011 Elio Maldonado - 3.12.9-9
- Add relro support for executables and shared libraries

Mon Jul 25 14:00:00 2011 Elio Maldonado - 3.12.9-8
- Include the patch

Mon Jul 25 14:00:00 2011 Elio Maldonado - 3.12.9-7
- Fix the tag

Fri Jul 22 14:00:00 2011 Elio Maldonado - 3.12.9-5
- Add partial RELRO support as a security enhancement

Thu Jun 23 14:00:00 2011 Elio Maldonado - 3.12.9-5
- Retagging to pick up latest patch - Resolves: rhbz#710298

Thu Jun 23 14:00:00 2011 Elio Maldonado - 3.12.9-4
- Resolves: rhbz#710298 - fix intel optimized aes code to handle case where input and ouput are in the same buffer

Sun Feb 27 13:00:00 2011 Elio Maldonado - 3.12.9-3
- Add requires nss-softokn-freebl-devel to devel

Fri Feb 4 13:00:00 2011 Elio Maldonado - 3.12.9-2
- Add headers for nss-softokn-freebl-devel and expand the description

Mon Jan 17 13:00:00 2011 Elio Maldonado - 3.12.9-1
- Update to 3.12.9
- Enable Intel AES Hardware optimizations

Fri Oct 1 14:00:00 2010 Elio Maldonado - 3.12.8-1
- Update to 3.12.8

Thu Aug 26 14:00:00 2010 Elio Maldonado - 3.12.7-1.1
- Retagging to remove an obsolete file

Thu Aug 26 14:00:00 2010 Elio Maldonado - 3.12.7-1
- Update to 3.12.7

Thu Aug 5 14:00:00 2010 Elio Maldonado - 3.12.4-19
- Turn off Intel AES optimizations

Tue Jun 8 14:00:00 2010 Elio Maldonado - 3.12.6-2.1
- Don\'t enable FIPS when CONFIG_CRYPTO_FIPS=n
- Fix typo in the package description
- Fix capitalization error in prelink conflict statement
- Require nspr 4.8.4

Wed Apr 21 14:00:00 2010 Elio Maldonado - 3.12.4-17
- Updated prelink patch

Thu Apr 15 14:00:00 2010 Elio Maldonado - 3.12.4-16
- allow prelink of softoken and freebl. Change the verify code to use
prelink -u if prelink is installed. Fix by Robert Relyea

Mon Jan 18 13:00:00 2010 Elio Maldonado - 3.12.4-11
- Move libfreebl3.so and its .chk file to /lib{64} keeping
- symbolic links to them in /usr/lib{64} so as not break others

Mon Jan 18 13:00:00 2010 Elio Maldonado - 3.12.4-10.3
- fix broken global

Sun Jan 17 13:00:00 2010 Elio Maldonado - 3.12.4-10.2
- rebuilt for RHEL-6-test-build

Fri Jan 15 13:00:00 2010 Elio Maldonado - 3.12.4-10.1
- Update to 3.12.4, reenable installing and pick up fixes from F-12

Wed Aug 19 14:00:00 2009 Elio Maldonado 3.12.3.99.3-8.1
- Disable installing until conflicts are relsoved

Wed Aug 19 14:00:00 2009 Elio Maldonado 3.12.3.99.3-8
- Initial build