From 521acd1a2e353f7b519cb1585ae47217c228c701c72bd5ff51e1c635552dca8a Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Mon, 20 Feb 2017 11:58:02 +0000 Subject: [PATCH] - update to NSS 3.28.3 * This is a patch release to fix binary compatibility issues. NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were in violation with the NSS compatibility promise. ECParams, which is part of the public API of the freebl/softokn parts of NSS, had been changed to include an additional attribute. That size increase caused crashes or malfunctioning with applications that use that data structure directly, or indirectly through ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey, or potentially other data structures that reference ECParams. The change has been reverted to the original state in bug bmo#1334108. SECKEYECPublicKey had been extended with a new attribute, named "encoding". If an application passed type SECKEYECPublicKey to NSS (as part of SECKEYPublicKey), the NSS library read the uninitialized attribute. With this NSS release SECKEYECPublicKey.encoding is deprecated. NSS no longer reads the attribute, and will always set it to ECPoint_Undefined. See bug bmo#1340103. OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/mozilla-nss?expand=0&rev=231 --- mozilla-nss.changes | 25 +++++++++++++++++++++++++ mozilla-nss.spec | 8 ++++---- nss-3.28.2.tar.gz | 3 --- nss-3.28.3.tar.gz | 3 +++ 4 files changed, 32 insertions(+), 7 deletions(-) delete mode 100644 nss-3.28.2.tar.gz create mode 100644 nss-3.28.3.tar.gz diff --git a/mozilla-nss.changes b/mozilla-nss.changes index 1b7d8c3..dddff5c 100644 --- a/mozilla-nss.changes +++ b/mozilla-nss.changes @@ -1,3 +1,28 @@ +------------------------------------------------------------------- +Mon Feb 20 11:53:55 UTC 2017 - wr@rosenauer.org + +- update to NSS 3.28.3 + * This is a patch release to fix binary compatibility issues. + NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were + in violation with the NSS compatibility promise. + + ECParams, which is part of the public API of the freebl/softokn + parts of NSS, had been changed to include an additional attribute. + That size increase caused crashes or malfunctioning with applications + that use that data structure directly, or indirectly through + ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey, + or potentially other data structures that reference ECParams. + The change has been reverted to the original state in bug + bmo#1334108. + + SECKEYECPublicKey had been extended with a new attribute, named + "encoding". If an application passed type SECKEYECPublicKey to NSS + (as part of SECKEYPublicKey), the NSS library read the uninitialized + attribute. With this NSS release SECKEYECPublicKey.encoding is + deprecated. NSS no longer reads the attribute, and will always + set it to ECPoint_Undefined. See bug bmo#1340103. +- requires NSPR >= 4.13.1 + ------------------------------------------------------------------- Sun Feb 12 07:31:29 UTC 2017 - wr@rosenauer.org diff --git a/mozilla-nss.spec b/mozilla-nss.spec index e7c8712..d70e62a 100644 --- a/mozilla-nss.spec +++ b/mozilla-nss.spec @@ -21,11 +21,11 @@ Name: mozilla-nss BuildRequires: gcc-c++ -BuildRequires: mozilla-nspr-devel >= 4.13 +BuildRequires: mozilla-nspr-devel >= 4.13.1 BuildRequires: pkg-config BuildRequires: sqlite-devel BuildRequires: zlib-devel -Version: 3.28.2 +Version: 3.28.3 Release: 0 # bug437293 %ifarch ppc64 @@ -36,8 +36,8 @@ Summary: Network Security Services License: MPL-2.0 Group: System/Libraries Url: http://www.mozilla.org/projects/security/pki/nss/ -Source: https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_28_2_RTM/src/nss-%{version}.tar.gz -# hg clone https://hg.mozilla.org/projects/nss nss-3.28.2/nss ; cd nss-3.28.2/nss ; hg up NSS_3_28_2_RTM +Source: https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_28_3_RTM/src/nss-%{version}.tar.gz +# hg clone https://hg.mozilla.org/projects/nss nss-3.28.3/nss ; cd nss-3.28.3/nss ; hg up NSS_3_28_3_RTM #Source: nss-%{version}.tar.gz Source1: nss.pc.in Source3: nss-config.in diff --git a/nss-3.28.2.tar.gz b/nss-3.28.2.tar.gz deleted file mode 100644 index 32ac478..0000000 --- a/nss-3.28.2.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:4249f65c2150b9a3f9e60cbe76ef0cb8e3ebed37848192611a1f0592f5db510e -size 7451885 diff --git a/nss-3.28.3.tar.gz b/nss-3.28.3.tar.gz new file mode 100644 index 0000000..6b32256 --- /dev/null +++ b/nss-3.28.3.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:dd3c4f0f8e132eef3c7c40b7d3208741d0fabe26fec322b4e4fe6d6f5e143df3 +size 7452825