Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mozilla-nss for openSUSE:Factory checked in at 2021-08-24 10:54:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mozilla-nss (Old) and /work/SRC/openSUSE:Factory/.mozilla-nss.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mozilla-nss" Tue Aug 24 10:54:04 2021 rev:177 rq:913334 version:3.68 Changes: -------- --- /work/SRC/openSUSE:Factory/mozilla-nss/mozilla-nss.changes 2021-08-16 10:13:13.922982621 +0200 +++ /work/SRC/openSUSE:Factory/.mozilla-nss.new.1899/mozilla-nss.changes 2021-08-24 10:54:29.860350761 +0200 @@ -1,0 +2,6 @@ +Wed Aug 18 12:41:56 UTC 2021 - Hans Petter Jansson <[email protected]> + +- Update nss-fips-constructor-self-tests.patch to fix crashes + reported by upstream. This was likely affecting WebRTC calls. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mozilla-nss.spec ++++++ --- /var/tmp/diff_new_pack.wLbZxI/_old 2021-08-24 10:54:31.180349013 +0200 +++ /var/tmp/diff_new_pack.wLbZxI/_new 2021-08-24 10:54:31.180349013 +0200 @@ -69,7 +69,7 @@ Patch26: nss-fips-combined-hash-sign-dsa-ecdsa.patch Patch27: nss-fips-aes-keywrap-post.patch Patch28: nss-btrfs-sqlite.patch -Patch37: nss-fips-fix-missing-nspr.patch +Patch29: nss-fips-fix-missing-nspr.patch %if 0%{?sle_version} >= 120000 && 0%{?sle_version} < 150000 # aarch64 + gcc4.8 fails to build on SLE-12 due to undefined references BuildRequires: gcc9-c++ @@ -226,7 +226,7 @@ %patch26 -p1 %patch27 -p1 %patch28 -p1 -%patch37 -p2 +%patch29 -p2 # additional CA certificates #cd security/nss/lib/ckfw/builtins ++++++ nss-fips-constructor-self-tests.patch ++++++ --- /var/tmp/diff_new_pack.wLbZxI/_old 2021-08-24 10:54:31.300348855 +0200 +++ /var/tmp/diff_new_pack.wLbZxI/_new 2021-08-24 10:54:31.300348855 +0200 @@ -67,7 +67,7 @@ =================================================================== --- /dev/null +++ nss/lib/freebl/fips-selftest.inc -@@ -0,0 +1,293 @@ +@@ -0,0 +1,296 @@ +/* + * PKCS #11 FIPS Power-Up Self Test - common stuff. + * @@ -250,7 +250,10 @@ + strncat(full_lib_name, SHLIB_VERSION"."SHLIB_SUFFIX, l); + l -= strlen(SHLIB_VERSION"."SHLIB_SUFFIX); +#if 1 -+ rv = BLAPI_SHVerify(full_lib_name, addr, &err); ++ if (NULL == addr) ++ rv = BLAPI_SHVerifyFile(full_lib_name, &err); ++ else ++ rv = BLAPI_SHVerify(full_lib_name, addr, &err); +#else + rv = 1; +#endif @@ -930,7 +933,7 @@ =================================================================== --- /dev/null +++ nss/lib/softoken/fips.c -@@ -0,0 +1,33 @@ +@@ -0,0 +1,36 @@ +#include "../freebl/fips-selftest.inc" + +#include "fips.h" @@ -958,9 +961,12 @@ +{ + fips_state = fips_initTest("softokn", (PRFuncPtr)fips_initTestSoftoken, fips_checkCryptoSoftoken); + -+ /* The legacy DB must be checked unconditionally. The check is performed by -+ * its constructor. */ -+ dlopen (SHLIB_PREFIX "nssdbm" SHLIB_VERSION "." SHLIB_SUFFIX, RTLD_LAZY); ++ /* The legacy DB must be checked unconditionally in FIPS mode. */ ++ ++ if (fips_state) ++ { ++ fips_state = fips_initTest("nssdbm", (PRFuncPtr) NULL, NULL); ++ } + + return; +}
