diff --git a/mozilla-nss.changes b/mozilla-nss.changes index 3fc58a1..61a38c3 100644 --- a/mozilla-nss.changes +++ b/mozilla-nss.changes @@ -1,3 +1,12 @@ +------------------------------------------------------------------- +Tue Sep 5 10:48:46 UTC 2023 - Dominique Leuenberger + +- Update to NSS 3.93: + + bmo#1849471 - Update zlib in NSS to 1.3. + + bmo#1848183 - softoken: iterate hashUpdate calls for long inputs. + + bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980). +- Rebase nss-fips-pct-pubkeys.patch. + ------------------------------------------------------------------- Sun Aug 27 07:58:09 UTC 2023 - Wolfgang Rosenauer diff --git a/mozilla-nss.spec b/mozilla-nss.spec index 501551b..eef93d4 100644 --- a/mozilla-nss.spec +++ b/mozilla-nss.spec @@ -17,14 +17,14 @@ # -%global nss_softokn_fips_version 3.92 +%global nss_softokn_fips_version 3.93 %define NSPR_min_version 4.35 %define nspr_ver %(rpm -q --queryformat '%%{VERSION}' mozilla-nspr) %define nssdbdir %{_sysconfdir}/pki/nssdb Name: mozilla-nss -Version: 3.92 +Version: 3.93 Release: 0 -%define underscore_version 3_92 +%define underscore_version 3_93 Summary: Network Security Services License: MPL-2.0 Group: System/Libraries diff --git a/nss-3.92.tar.gz b/nss-3.92.tar.gz deleted file mode 100644 index 2581283..0000000 --- a/nss-3.92.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:3db192d6e882039af02ae7eaf3217ed114bb7ad83414c646772ab8021e24a254 -size 72133646 diff --git a/nss-3.93.tar.gz b/nss-3.93.tar.gz new file mode 100644 index 0000000..cf59aa2 --- /dev/null +++ b/nss-3.93.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:15f54bb72048eb105f8c0e936a04b899e74c3db9a19bbc1e00acee2af9476a8a +size 72281331 diff --git a/nss-fips-pct-pubkeys.patch b/nss-fips-pct-pubkeys.patch index 79dea5a..cab50e2 100644 --- a/nss-fips-pct-pubkeys.patch +++ b/nss-fips-pct-pubkeys.patch @@ -5,15 +5,15 @@ Index: nss/lib/softoken/pkcs11c.c =================================================================== --- nss.orig/lib/softoken/pkcs11c.c +++ nss/lib/softoken/pkcs11c.c -@@ -17,6 +17,7 @@ - * In this implementation, session objects are only visible to the session - * that created or generated them. - */ +@@ -20,6 +20,7 @@ + + #include /* for UINT_MAX and ULONG_MAX */ + +#include "lowkeyti.h" #include "seccomon.h" #include "secitem.h" #include "secport.h" -@@ -4934,6 +4935,88 @@ pairwise_signverify_mech (CK_SESSION_HAN +@@ -4963,6 +4964,88 @@ pairwise_signverify_mech (CK_SESSION_HAN return crv; } @@ -102,7 +102,7 @@ Index: nss/lib/softoken/pkcs11c.c /* * FIPS 140-2 pairwise consistency check utilized to validate key pair. * -@@ -5280,6 +5363,30 @@ sftk_PairwiseConsistencyCheck(CK_SESSION +@@ -5309,6 +5392,30 @@ sftk_PairwiseConsistencyCheck(CK_SESSION } }