Accepting request 1109028 from home:dimstar:Factory

- Update to NSS 3.93:
  + bmo#1849471 - Update zlib in NSS to 1.3.
  + bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  + bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.

OBS-URL: https://build.opensuse.org/request/show/1109028
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/mozilla-nss?expand=0&rev=426
This commit is contained in:
Wolfgang Rosenauer 2023-09-05 18:57:40 +00:00 committed by Git OBS Bridge
parent 9e6f8a1c39
commit a91fce9daa
5 changed files with 21 additions and 12 deletions

View File

@ -1,3 +1,12 @@
-------------------------------------------------------------------
Tue Sep 5 10:48:46 UTC 2023 - Dominique Leuenberger <dimstar@opensuse.org>
- Update to NSS 3.93:
+ bmo#1849471 - Update zlib in NSS to 1.3.
+ bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
+ bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
------------------------------------------------------------------- -------------------------------------------------------------------
Sun Aug 27 07:58:09 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org> Sun Aug 27 07:58:09 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>

View File

@ -17,14 +17,14 @@
# #
%global nss_softokn_fips_version 3.92 %global nss_softokn_fips_version 3.93
%define NSPR_min_version 4.35 %define NSPR_min_version 4.35
%define nspr_ver %(rpm -q --queryformat '%%{VERSION}' mozilla-nspr) %define nspr_ver %(rpm -q --queryformat '%%{VERSION}' mozilla-nspr)
%define nssdbdir %{_sysconfdir}/pki/nssdb %define nssdbdir %{_sysconfdir}/pki/nssdb
Name: mozilla-nss Name: mozilla-nss
Version: 3.92 Version: 3.93
Release: 0 Release: 0
%define underscore_version 3_92 %define underscore_version 3_93
Summary: Network Security Services Summary: Network Security Services
License: MPL-2.0 License: MPL-2.0
Group: System/Libraries Group: System/Libraries

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:3db192d6e882039af02ae7eaf3217ed114bb7ad83414c646772ab8021e24a254
size 72133646

3
nss-3.93.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:15f54bb72048eb105f8c0e936a04b899e74c3db9a19bbc1e00acee2af9476a8a
size 72281331

View File

@ -5,15 +5,15 @@ Index: nss/lib/softoken/pkcs11c.c
=================================================================== ===================================================================
--- nss.orig/lib/softoken/pkcs11c.c --- nss.orig/lib/softoken/pkcs11c.c
+++ nss/lib/softoken/pkcs11c.c +++ nss/lib/softoken/pkcs11c.c
@@ -17,6 +17,7 @@ @@ -20,6 +20,7 @@
* In this implementation, session objects are only visible to the session
* that created or generated them. #include <limits.h> /* for UINT_MAX and ULONG_MAX */
*/
+#include "lowkeyti.h" +#include "lowkeyti.h"
#include "seccomon.h" #include "seccomon.h"
#include "secitem.h" #include "secitem.h"
#include "secport.h" #include "secport.h"
@@ -4934,6 +4935,88 @@ pairwise_signverify_mech (CK_SESSION_HAN @@ -4963,6 +4964,88 @@ pairwise_signverify_mech (CK_SESSION_HAN
return crv; return crv;
} }
@ -102,7 +102,7 @@ Index: nss/lib/softoken/pkcs11c.c
/* /*
* FIPS 140-2 pairwise consistency check utilized to validate key pair. * FIPS 140-2 pairwise consistency check utilized to validate key pair.
* *
@@ -5280,6 +5363,30 @@ sftk_PairwiseConsistencyCheck(CK_SESSION @@ -5309,6 +5392,30 @@ sftk_PairwiseConsistencyCheck(CK_SESSION
} }
} }