Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mozilla-nss for openSUSE:Factory checked in at 2025-12-04 11:21:51 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mozilla-nss (Old) and /work/SRC/openSUSE:Factory/.mozilla-nss.new.1939 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mozilla-nss" Thu Dec 4 11:21:51 2025 rev:234 rq:1320938 version:3.118.1 Changes: -------- --- /work/SRC/openSUSE:Factory/mozilla-nss/mozilla-nss.changes 2025-10-18 14:36:16.850568787 +0200 +++ /work/SRC/openSUSE:Factory/.mozilla-nss.new.1939/mozilla-nss.changes 2025-12-04 11:26:59.154786133 +0100 @@ -1,0 +2,29 @@ +Thu Nov 20 08:56:04 UTC 2025 - Martin Sirringhaus <[email protected]> + +- update to NSS 3.118.1 + * bmo#1999517 - pk11wrap selects incorrect slot for CKM_ML_KEM* + +- update to NSS 3.118 + * bmo#1994866 - Remove four Commscope root certificates from NSS + * bmo#1996036 - fix try pushes with --nspr-patch to actually apply the patch + * bmo#1995512 - Support for NIST Curves compressed points + * bmo#1985058 - Destroy certificate on error paths + * bmo#1990242 - Move NSS DB password hash away from SHA-1 + * bmo#1983313 - support secp384r1mlkem1024 + * bmo#1991549 - vendor latest ML-KEM code from libcrux + * bmo#1991549 - add mlk-kem-1024 tests + * bmo#1996717 - use the correct directory for FStar_UInt_8_16_32_64.h in source consistency test + * bmo#1766767 - Move scripts to python3 + * bmo#1983313 - add mlkem1024 support in freebl + * bmo#1983313 - support secp256r1mlkem768 + * bmo#1983313 - Make mlkem768x25519 the default + * bmo#1983320 - ML-DSA SGN and VFY interfaces + * bmo#1988625 - Align FIPS interfaces count with array + * bmo#1989477 - Ensure CKK_ML_KEM has derive CK_FALSE + * bmo#1992128 - Add script for tagging an NSS release + * bmo#1992128 - Remove the globals from nss-release-helper.py + * bmo#1992128 - Add release helper command for generating the release index + * bmo#1992128 - Add release helper command for generating a release note + * bmo#1992128 - Add release helper command for freezing a branch + +------------------------------------------------------------------- Old: ---- nss-3.117.tar.gz New: ---- nss-3.118.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mozilla-nss.spec ++++++ --- /var/tmp/diff_new_pack.UsdkXF/_old 2025-12-04 11:27:02.518928489 +0100 +++ /var/tmp/diff_new_pack.UsdkXF/_new 2025-12-04 11:27:02.518928489 +0100 @@ -17,15 +17,15 @@ # -%global nss_softokn_fips_version 3.117 -%define NSPR_min_version 4.36 +%global nss_softokn_fips_version 3.118.1 +%define NSPR_min_version 4.37 %define nspr_ver %(rpm -q --queryformat '%%{VERSION}' mozilla-nspr) %define nssdbdir %{_sysconfdir}/pki/nssdb %global crypto_policies_version 20210218 Name: mozilla-nss -Version: 3.117 +Version: 3.118.1 Release: 0 -%define underscore_version 3_117 +%define underscore_version 3_118_1 Summary: Network Security Services License: MPL-2.0 Group: System/Libraries ++++++ nss-3.117.tar.gz -> nss-3.118.1.tar.gz ++++++ /work/SRC/openSUSE:Factory/mozilla-nss/nss-3.117.tar.gz /work/SRC/openSUSE:Factory/.mozilla-nss.new.1939/nss-3.118.1.tar.gz differ: char 5, line 1 ++++++ nss-fips-constructor-self-tests.patch ++++++ --- /var/tmp/diff_new_pack.UsdkXF/_old 2025-12-04 11:27:02.770939153 +0100 +++ /var/tmp/diff_new_pack.UsdkXF/_new 2025-12-04 11:27:02.778939491 +0100 @@ -63,9 +63,9 @@ /*********************************************************************/ extern const SECHashObject *HASH_GetRawHashObject(HASH_HashType hashType); -@@ -1962,6 +1962,9 @@ SECStatus MLDSA_VerifyInit(MLDSAPublicKe - SECStatus MLDSA_VerifyUpdate(MLDSAContext *ctx, const SECItem *data); - SECStatus MLDSA_VerifyFinal(MLDSAContext *ctx, const SECItem *signature); +@@ -1969,6 +1969,9 @@ SECStatus MLDSA_VerifyFinal(MLDSAContext + */ + SECStatus EC_DecompressPublicKey(const SECItem *publicCompressed, const ECParams *params, SECItem *publicUncompressed); +/* Unconditionally run the integrity check. */ +extern void BL_FIPSRepeatIntegrityCheck(void); @@ -910,7 +910,7 @@ /* Version 3.013 came to here */ -@@ -942,6 +942,9 @@ struct FREEBLVectorStr { +@@ -945,6 +945,9 @@ struct FREEBLVectorStr { /* Add new function pointers at the end of this struct and bump * FREEBL_VERSION at the beginning of this file. */ @@ -1530,9 +1530,9 @@ =================================================================== --- nss.orig/lib/freebl/ldvector.c +++ nss/lib/freebl/ldvector.c -@@ -459,6 +459,8 @@ static const struct FREEBLVectorStr vect - MLDSA_VerifyFinal, - /* End of version 3.031 */ +@@ -462,6 +462,8 @@ static const struct FREEBLVectorStr vect + EC_DecompressPublicKey, + /* End of version 3.032 */ + /* SUSE patch: Goes last */ + BL_FIPSRepeatIntegrityCheck
