Hello community,
here is the log from the commit of package mozilla-nss for openSUSE:Factory
checked in at 2020-09-24 16:11:54
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/mozilla-nss (Old)
and /work/SRC/openSUSE:Factory/.mozilla-nss.new.4249 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mozilla-nss"
Thu Sep 24 16:11:54 2020 rev:162 rq:835234 version:3.56
Changes:
--------
--- /work/SRC/openSUSE:Factory/mozilla-nss/mozilla-nss.changes 2020-09-03
01:08:30.512354075 +0200
+++ /work/SRC/openSUSE:Factory/.mozilla-nss.new.4249/mozilla-nss.changes
2020-09-24 16:11:55.488759439 +0200
@@ -1,0 +2,36 @@
+Thu Sep 17 13:57:18 UTC 2020 - Hans Petter Jansson <h...@suse.com>
+
+- Update nss-fips-approved-crypto-non-ec.patch to match RC2 code
+ being moved to deprecated/.
+- Remove nss-fix-dh-pkcs-derive-inverted-logic.patch. This was made
+ obsolete by upstream changes.
+
+-------------------------------------------------------------------
+Tue Sep 8 20:17:19 UTC 2020 - Wolfgang Rosenauer <w...@rosenauer.org>
+
+- update to NSS 3.56
+ Notable changes
+ * bmo#1650702 - Support SHA-1 HW acceleration on ARMv8
+ * bmo#1656981 - Use MPI comba and mulq optimizations on x86-64 MacOS.
+ * bmo#1654142 - Add CPU feature detection for Intel SHA extension.
+ * bmo#1648822 - Add stricter validation of DH keys in FIPS mode.
+ * bmo#1656986 - Properly detect arm64 during GYP build architecture
+ detection.
+ * bmo#1652729 - Add build flag to disable RC2 and relocate to
+ lib/freebl/deprecated.
+ * bmo#1656429 - Correct RTT estimate used in 0-RTT anti-replay.
+ * bmo#1588941 - Send empty certificate message when scheme selection
+ fails.
+ * bmo#1652032 - Fix failure to build in Windows arm64 makefile
+ cross-compilation.
+ * bmo#1625791 - Fix deadlock issue in nssSlot_IsTokenPresent.
+ * bmo#1653975 - Fix 3.53 regression by setting "all" as the default
+ makefile target.
+ * bmo#1659792 - Fix broken libpkix tests with unexpired PayPal cert.
+ * bmo#1659814 - Fix interop.sh failures with newer tls-interop
+ commit and dependencies.
+ * bmo#1656519 - NSPR dependency updated to 4.28
+- do not hard require mozilla-nss-certs-32bit via baselibs
+ (boo#1176206)
+
+-------------------------------------------------------------------
Old:
----
nss-3.55.tar.gz
nss-fix-dh-pkcs-derive-inverted-logic.patch
New:
----
nss-3.56.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ mozilla-nss.spec ++++++
--- /var/tmp/diff_new_pack.1ojGg9/_old 2020-09-24 16:12:01.056765008 +0200
+++ /var/tmp/diff_new_pack.1ojGg9/_new 2020-09-24 16:12:01.056765008 +0200
@@ -1,7 +1,7 @@
#
# spec file for package mozilla-nss
#
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2020 SUSE LINUX GmbH, Nuernberg, Germany.
# Copyright (c) 2006-2020 Wolfgang Rosenauer
#
# All modifications and additions to the file contributed by third parties
@@ -17,14 +17,14 @@
#
-%global nss_softokn_fips_version 3.55
-%define NSPR_min_version 4.27
+%global nss_softokn_fips_version 3.56
+%define NSPR_min_version 4.28
%define nspr_ver %(rpm -q --queryformat '%%{VERSION}' mozilla-nspr)
%define nssdbdir %{_sysconfdir}/pki/nssdb
Name: mozilla-nss
-Version: 3.55
+Version: 3.56
Release: 0
-%define underscore_version 3_55
+%define underscore_version 3_56
Summary: Network Security Services
License: MPL-2.0
Group: System/Libraries
@@ -68,7 +68,6 @@
Patch31: nss-fips-use-strong-random-pool.patch
Patch32: nss-fips-detect-fips-mode-fixes.patch
Patch34: nss-fips-combined-hash-sign-dsa-ecdsa.patch
-Patch35: nss-fix-dh-pkcs-derive-inverted-logic.patch
Patch36: nss-fips-aes-keywrap-post.patch
%if 0%{?sle_version} >= 120000 && 0%{?sle_version} < 150000
# aarch64 + gcc4.8 fails to build on SLE-12 due to undefined references
@@ -226,7 +225,6 @@
%patch31 -p1
%patch32 -p1
%patch34 -p1
-%patch35 -p1
%patch36 -p1
# additional CA certificates
++++++ baselibs.conf ++++++
--- /var/tmp/diff_new_pack.1ojGg9/_old 2020-09-24 16:12:01.120765073 +0200
+++ /var/tmp/diff_new_pack.1ojGg9/_new 2020-09-24 16:12:01.120765073 +0200
@@ -2,7 +2,7 @@
requires "mozilla-nspr-<targettype> >= 4.25"
requires "libfreebl3-<targettype>"
requires "libsoftokn3-<targettype>"
- requires "mozilla-nss-certs-<targettype>"
+ requires "libnssckbi.so"
libsoftokn3
requires "libfreebl3-<targettype> = <version>"
libsoftokn3-hmac
++++++ nss-3.55.tar.gz -> nss-3.56.tar.gz ++++++
/work/SRC/openSUSE:Factory/mozilla-nss/nss-3.55.tar.gz
/work/SRC/openSUSE:Factory/.mozilla-nss.new.4249/nss-3.56.tar.gz differ: char
5, line 1
++++++ nss-fips-approved-crypto-non-ec.patch ++++++
--- /var/tmp/diff_new_pack.1ojGg9/_old 2020-09-24 16:12:01.196765149 +0200
+++ /var/tmp/diff_new_pack.1ojGg9/_new 2020-09-24 16:12:01.196765149 +0200
@@ -6,14 +6,14 @@
# Parent 3f4d682c9a1e8b3d939c744ee249e23179db5191
imported patch nss-fips-approved-crypto-non-ec.patch
-diff --git a/lib/freebl/alg2268.c b/lib/freebl/alg2268.c
---- a/lib/freebl/alg2268.c
-+++ b/lib/freebl/alg2268.c
+diff --git a/lib/freebl/deprecated/alg2268.c b/lib/freebl/deprecated/alg2268.c
+--- a/lib/freebl/deprecated/alg2268.c
++++ b/lib/freebl/deprecated/alg2268.c
@@ -16,6 +16,8 @@
#include <stddef.h> /* for ptrdiff_t */
#endif
-+#include "fips.h"
++#include "../fips.h"
+
/*
** RC2 symmetric block cypher
