From c13c2fe84e143669cf1a9a109176da94ebdb314e50efa79c451559d6815d694d Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Tue, 23 Jun 2015 06:04:19 +0000 Subject: [PATCH 1/3] - update to 3.19.2 * required for Firefox 39.0 * No new functionality is introduced in this release. This release addresses a backwards compatibility issue with the NSS 3.19.1 release. * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic implementation (part of the softoken cryptographic module used by default by NSS) was willing to generate or use was increased - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This was done as part of a security fix for Bug 1138554 / CVE-2015-4000. Applications that requested or attempted to use keys smaller then the minimum size would fail. However, this change in behaviour unintentionally broke existing NSS applications that need to generate or use such keys, via APIs such as SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey. OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/mozilla-nss?expand=0&rev=184 --- mozilla-nss.changes | 19 +++++++++++++++++++ mozilla-nss.spec | 2 +- nss-3.19.1.tar.gz | 3 --- nss-3.19.2.tar.gz | 3 +++ 4 files changed, 23 insertions(+), 4 deletions(-) delete mode 100644 nss-3.19.1.tar.gz create mode 100644 nss-3.19.2.tar.gz diff --git a/mozilla-nss.changes b/mozilla-nss.changes index 1835bb1..f03de75 100644 --- a/mozilla-nss.changes +++ b/mozilla-nss.changes @@ -1,3 +1,22 @@ +------------------------------------------------------------------- +Tue Jun 23 06:00:13 UTC 2015 - wr@rosenauer.org + +- update to 3.19.2 + * required for Firefox 39.0 + * No new functionality is introduced in this release. This release + addresses a backwards compatibility issue with the NSS 3.19.1 + release. + * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic + implementation (part of the softoken cryptographic module used + by default by NSS) was willing to generate or use was increased + - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This + was done as part of a security fix for Bug 1138554 / CVE-2015-4000. + Applications that requested or attempted to use keys smaller + then the minimum size would fail. However, this change in behaviour + unintentionally broke existing NSS applications that need to + generate or use such keys, via APIs such as + SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey. + ------------------------------------------------------------------- Sun May 31 13:22:47 UTC 2015 - wr@rosenauer.org diff --git a/mozilla-nss.spec b/mozilla-nss.spec index 181efc9..26acabb 100644 --- a/mozilla-nss.spec +++ b/mozilla-nss.spec @@ -25,7 +25,7 @@ BuildRequires: mozilla-nspr-devel >= 4.10.8 BuildRequires: pkg-config BuildRequires: sqlite-devel BuildRequires: zlib-devel -Version: 3.19.1 +Version: 3.19.2 Release: 0 # bug437293 %ifarch ppc64 diff --git a/nss-3.19.1.tar.gz b/nss-3.19.1.tar.gz deleted file mode 100644 index 15248d7..0000000 --- a/nss-3.19.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:b7be709551ec13206d8e3e8c065b894fa981c11573115e9478fa051029c52fff -size 6953537 diff --git a/nss-3.19.2.tar.gz b/nss-3.19.2.tar.gz new file mode 100644 index 0000000..5a60d73 --- /dev/null +++ b/nss-3.19.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:1306663e8f61d8449ad8cbcffab743a604dcd9f6f34232c210847c51dce2c9ae +size 6953657 From b075d4160836752978fe00f076710688027bc5cbc5400ec8f55cb13ccc92cbb6 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Wed, 24 Jun 2015 17:52:00 +0000 Subject: [PATCH 2/3] Accepting request 313427 from home:msmeissn:branches:mozilla:Factory - as the .chk files are contained in libfreebl3 and libsoftokn directly, provide the -hmac alias names to help :42 building. OBS-URL: https://build.opensuse.org/request/show/313427 OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/mozilla-nss?expand=0&rev=185 --- mozilla-nss.changes | 6 ++++++ mozilla-nss.spec | 2 ++ 2 files changed, 8 insertions(+) diff --git a/mozilla-nss.changes b/mozilla-nss.changes index f03de75..5c0d492 100644 --- a/mozilla-nss.changes +++ b/mozilla-nss.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed Jun 24 12:45:09 UTC 2015 - meissner@suse.com + +- as the .chk files are contained in libfreebl3 and libsoftokn + directly, provide the -hmac alias names to help :42 building. + ------------------------------------------------------------------- Tue Jun 23 06:00:13 UTC 2015 - wr@rosenauer.org diff --git a/mozilla-nss.spec b/mozilla-nss.spec index 26acabb..d47c5e6 100644 --- a/mozilla-nss.spec +++ b/mozilla-nss.spec @@ -126,6 +126,7 @@ any system or user configured modules. %package -n libfreebl3 Summary: Freebl library for the Network Security Services Group: System/Libraries +Provides: libfreebl3-hmac %description -n libfreebl3 Network Security Services (NSS) is a set of libraries designed to @@ -141,6 +142,7 @@ This package installs the freebl library from NSS. Summary: Network Security Services Softoken Module Group: System/Libraries Requires: libfreebl3 = %{version}-%{release} +Provides: libsoftokn3-hmac %description -n libsoftokn3 Network Security Services (NSS) is a set of libraries designed to From 440894e09443d5829f2689577829a4699a2ed12dd5b3da618e3911718598b102 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Wed, 24 Jun 2015 18:54:42 +0000 Subject: [PATCH 3/3] OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/mozilla-nss?expand=0&rev=186 --- mozilla-nss.spec | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/mozilla-nss.spec b/mozilla-nss.spec index d47c5e6..a6a5ec4 100644 --- a/mozilla-nss.spec +++ b/mozilla-nss.spec @@ -36,8 +36,8 @@ Summary: Network Security Services License: MPL-2.0 Group: System/Libraries Url: http://www.mozilla.org/projects/security/pki/nss/ -Source: https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_19_1_RTM/src/nss-%{version}.tar.gz -# hg clone https://hg.mozilla.org/projects/nss nss-3.19.1/nss ; cd nss-3.19.1/nss ; hg up NSS_3_19_1_RTM +Source: https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_19_2_RTM/src/nss-%{version}.tar.gz +# hg clone https://hg.mozilla.org/projects/nss nss-3.19.2/nss ; cd nss-3.19.2/nss ; hg up NSS_3_19_2_RTM #Source: nss-%{version}.tar.gz Source1: nss.pc.in Source3: nss-config.in