Accepting request 810949 from mozilla:Factory

OBS-URL: https://build.opensuse.org/request/show/810949
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/mozilla-nss?expand=0&rev=158

mozilla-nss.changes

@@ -1,3 +1,18 @@
+-------------------------------------------------------------------
+Tue May 26 09:08:26 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- update to NSS 3.52.1
+  * required for Firefox 77.0
+  Notable changes
+  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
+  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
+    ChaChaPoly (bmo#1623374)
+  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
+    (bmo#1612493)
+  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
+    (bmo#1631576, boo#1171978)
+- removed obsolete nss-kremlin-ppc64le.patch
+
 -------------------------------------------------------------------
 Wed Apr 29 13:54:42 UTC 2020 - Martin Liška <mliska@suse.cz>
 

mozilla-nss.spec

@@ -17,14 +17,14 @@
 #
 
 
-%global nss_softokn_fips_version 3.51
+%global nss_softokn_fips_version 3.52
 %define NSPR_min_version 4.25
 %define nspr_ver %(rpm -q --queryformat '%%{VERSION}' mozilla-nspr)
 %define nssdbdir %{_sysconfdir}/pki/nssdb
 Name:           mozilla-nss
-Version:        3.51.1
+Version:        3.52.1
 Release:        0
-%define underscore_version 3_51_1
+%define underscore_version 3_52_1
 Summary:        Network Security Services
 License:        MPL-2.0
 Group:          System/Libraries
@@ -49,7 +49,6 @@ Patch4:         add-relro-linker-option.patch
 Patch5:         malloc.patch
 Patch6:         bmo-1400603.patch
 Patch7:         nss-sqlitename.patch
-Patch8:         nss-kremlin-ppc64le.patch
 BuildRequires:  gcc-c++
 BuildRequires:  pkgconfig
 BuildRequires:  pkgconfig(nspr) >= %{NSPR_min_version}
@@ -180,7 +179,6 @@ cd nss
 %endif
 %patch6 -p1
 %patch7 -p1
-%patch8 -p1
 # additional CA certificates
 #cd security/nss/lib/ckfw/builtins
 #cat %{SOURCE2} >> certdata.txt

nss-3.51.1.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:085c5eaceef040eddea639e2e068e70f0e368f840327a678ef74ae3d6c15ca78
-size 78310874

nss-3.52.1.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:bcc81ac33aeb4ecad182dc21e34d2c97bcc148fd7b9e76f85bebb892405a9278
+size 81222116

nss-kremlin-ppc64le.patch

@@ -1,30 +0,0 @@
-Index: nss/lib/freebl/verified/kremlin/include/kremlin/internal/types.h
-===================================================================
---- nss.orig/lib/freebl/verified/kremlin/include/kremlin/internal/types.h
-+++ nss/lib/freebl/verified/kremlin/include/kremlin/internal/types.h
-@@ -56,7 +56,9 @@ typedef const char *Prims_string;
- #include <emmintrin.h>
- typedef __m128i FStar_UInt128_uint128;
- #elif !defined(KRML_VERIFIED_UINT128) && !defined(_MSC_VER) && \
--    (defined(__x86_64__) || defined(__x86_64) || defined(__aarch64__))
-+    (defined(__x86_64__) || defined(__x86_64) || defined(__aarch64__) || \
-+     defined(__powerpc64__) || \
-+     defined(__s390x__))
- typedef unsigned __int128 FStar_UInt128_uint128;
- #else
- typedef struct FStar_UInt128_uint128_s {
-Index: nss/lib/freebl/verified/kremlin/kremlib/dist/minimal/fstar_uint128_gcc64.h
-===================================================================
---- nss.orig/lib/freebl/verified/kremlin/kremlib/dist/minimal/fstar_uint128_gcc64.h
-+++ nss/lib/freebl/verified/kremlin/kremlib/dist/minimal/fstar_uint128_gcc64.h
-@@ -25,7 +25,9 @@
- #include "LowStar_Endianness.h"
- 
- #if !defined(KRML_VERIFIED_UINT128) && !defined(_MSC_VER) && \
--    (defined(__x86_64__) || defined(__x86_64) || defined(__aarch64__))
-+    (defined(__x86_64__) || defined(__x86_64) || defined(__aarch64__) || \
-+     defined(__powerpc64__) || \
-+     defined(__s390x__))
- 
- /* GCC + using native unsigned __int128 support */
-