Accepting request 1109133 from mozilla:Factory

OBS-URL: https://build.opensuse.org/request/show/1109133
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/mozilla-nss?expand=0&rev=208

mozilla-nss.changes

@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Tue Sep  5 10:48:46 UTC 2023 - Dominique Leuenberger <dimstar@opensuse.org>
+
+- Update to NSS 3.93:
+  + bmo#1849471 - Update zlib in NSS to 1.3.
+  + bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
+  + bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
+- Rebase nss-fips-pct-pubkeys.patch.
+
 -------------------------------------------------------------------
 Sun Aug 27 07:58:09 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
 

mozilla-nss.spec

@@ -17,14 +17,14 @@
 #
 
 
-%global nss_softokn_fips_version 3.92
+%global nss_softokn_fips_version 3.93
 %define NSPR_min_version 4.35
 %define nspr_ver %(rpm -q --queryformat '%%{VERSION}' mozilla-nspr)
 %define nssdbdir %{_sysconfdir}/pki/nssdb
 Name:           mozilla-nss
-Version:        3.92
+Version:        3.93
 Release:        0
-%define underscore_version 3_92
+%define underscore_version 3_93
 Summary:        Network Security Services
 License:        MPL-2.0
 Group:          System/Libraries

nss-3.92.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:3db192d6e882039af02ae7eaf3217ed114bb7ad83414c646772ab8021e24a254
-size 72133646

nss-3.93.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:15f54bb72048eb105f8c0e936a04b899e74c3db9a19bbc1e00acee2af9476a8a
+size 72281331

nss-fips-pct-pubkeys.patch

@@ -5,15 +5,15 @@ Index: nss/lib/softoken/pkcs11c.c
 ===================================================================
 --- nss.orig/lib/softoken/pkcs11c.c
 +++ nss/lib/softoken/pkcs11c.c
-@@ -17,6 +17,7 @@
-  *   In this implementation, session objects are only visible to the session
-  *   that created or generated them.
-  */
+@@ -20,6 +20,7 @@
+ 
+ #include <limits.h> /* for UINT_MAX and ULONG_MAX */
+ 
 +#include "lowkeyti.h"
  #include "seccomon.h"
  #include "secitem.h"
  #include "secport.h"
-@@ -4934,6 +4935,88 @@ pairwise_signverify_mech (CK_SESSION_HAN
+@@ -4963,6 +4964,88 @@ pairwise_signverify_mech (CK_SESSION_HAN
      return crv;
  }
  
@@ -102,7 +102,7 @@ Index: nss/lib/softoken/pkcs11c.c
  /*
   * FIPS 140-2 pairwise consistency check utilized to validate key pair.
   *
-@@ -5280,6 +5363,30 @@ sftk_PairwiseConsistencyCheck(CK_SESSION
+@@ -5309,6 +5392,30 @@ sftk_PairwiseConsistencyCheck(CK_SESSION
          }
      }