CVS commit: pkgsrc/devel/nss

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Wed Jun  3 08:51:26 UTC 2020

Modified Files:
        pkgsrc/devel/nss: Makefile distinfo
Removed Files:
        pkgsrc/devel/nss/patches: patch-mh

Log Message:
nss: Update to 3.53

Changelog:
Notable Changes in NSS 3.53

* When using the Makefiles, NSS can be built in parallel, speeding up those
builds to more similar performance as the build.sh/ninja/gyp system. (Bug
290526)

* SEED is now moved into a new freebl directory freebl/deprecated (Bug
1636389).

  - SEED will be disabled by default in a future release of NSS. At that time,
users will need to set the compile-time flag (Bug 1622033) to disable that
deprecation in order to use the algorithm.

  - Algorithms marked as deprecated will ultimately be removed.

* Several root certificates in the Mozilla program now set the
CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can query to
further refine trust decisions. (Bug 1618404, Bug 1621159) If a builtin
certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp before the  SCT or
NotBefore date of a certificate that builtin issued, then clients can elect
not to trust it.
  - This attribute provides a more graceful phase-out for certificate
authorities than complete removal from the root certificate builtin store.

Bugs fixed in NSS 3.53

* Bug 1640260 - Initialize PBE params (ASAN fix)
* Bug 1618404 - Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
* Bug 1621159 - Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and
SK ID root certs
* Bug 1629414 - PPC64: Correct compilation error between VMX vs. VSX vector
instructions
* Bug 1639033 - Fix various compile warnings in NSS
* Bug 1640041 - Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
* Bug 1640042 - Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
* Bug 1638289 - Avoid multiple definitions of SHA{256,384,512}_* symbols when
linking libfreeblpriv3.so in Firefox on ppc64le
* Bug 1636389 - Relocate deprecated SEED algorithm
* Bug 1637083 - lib/ckfw: No such file or directory. Stop.
* Bug 1561331 - Additional modular inverse test
* Bug 1629553 - Rework and cleanup gmake builds
* Bug 1438431 - Remove mkdepend and "depend" make target
* Bug 290526 - Support parallel building of NSS when using the Makefiles
* Bug 1636206 - HACL* update after changes in libintvector.h
* Bug 1636058 - Fix building NSS on Debian s390x, mips64el, and riscv64
* Bug 1622033 - Add option to build without SEED


To generate a diff of this commit:
cvs rdiff -u -r1.184 -r1.185 pkgsrc/devel/nss/Makefile
cvs rdiff -u -r1.113 -r1.114 pkgsrc/devel/nss/distinfo
cvs rdiff -u -r1.2 -r0 pkgsrc/devel/nss/patches/patch-mh

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/nss/Makefile
diff -u pkgsrc/devel/nss/Makefile:1.184 pkgsrc/devel/nss/Makefile:1.185
--- pkgsrc/devel/nss/Makefile:1.184     Tue Jun  2 08:23:39 2020
+++ pkgsrc/devel/nss/Makefile   Wed Jun  3 08:51:26 2020
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.184 2020/06/02 08:23:39 adam Exp $
+# $NetBSD: Makefile,v 1.185 2020/06/03 08:51:26 ryoon Exp $
 
 DISTNAME=              nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=           3.52.0
-PKGREVISION=           1
+NSS_RELEASE=           3.53.0
 CATEGORIES=            security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 

Index: pkgsrc/devel/nss/distinfo
diff -u pkgsrc/devel/nss/distinfo:1.113 pkgsrc/devel/nss/distinfo:1.114
--- pkgsrc/devel/nss/distinfo:1.113     Wed May  6 01:09:43 2020
+++ pkgsrc/devel/nss/distinfo   Wed Jun  3 08:51:26 2020
@@ -1,16 +1,15 @@
-$NetBSD: distinfo,v 1.113 2020/05/06 01:09:43 ryoon Exp $
+$NetBSD: distinfo,v 1.114 2020/06/03 08:51:26 ryoon Exp $
 
-SHA1 (nss-3.52.tar.gz) = 4ff9fcff59fab1c4b0f00d3f3ac6015d0253d242
-RMD160 (nss-3.52.tar.gz) = be6af426ba8e19566b82c2f409875bd094a9bd2e
-SHA512 (nss-3.52.tar.gz) = a45baf38717bceda03c292b2c01def680a24a846327e17d36044a85e30ed40c68220c78c0a2c3025c11778ee58f5d5eb0fff1b4cd274b95c408fb59e394e62c6
-Size (nss-3.52.tar.gz) = 81220587 bytes
+SHA1 (nss-3.53.tar.gz) = 5631fd7a50ec5991052a9fa15fe775c34c8969e7
+RMD160 (nss-3.53.tar.gz) = 1d48251dbc1dbacce6ed669a67c2f870b9ba62a3
+SHA512 (nss-3.53.tar.gz) = 280edf24356b764584200bff949af4a7f88514ee8ac80bf5348a9a844a8b1eb263e9aa1d772644bd8bb1bd195c12b6cc173280cfc88cd97e56562e1c40e71503
+Size (nss-3.53.tar.gz) = 81178428 bytes
 SHA1 (patch-am) = fea682bf03bc8b645049f93ed58554ca45f47aca
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1
 SHA1 (patch-me) = 3b23fb15a1a22204604ebe64345bb30734a131ba
 SHA1 (patch-mf) = 534fe5f711f60dadc3432bc805a6153535f11709
 SHA1 (patch-mg) = 3c878548c98bdea559a3e653e63e0ed22a2a8834
-SHA1 (patch-mh) = a46d3098a85c3a4a57895a9845bc1741fc5e9561
 SHA1 (patch-mj) = 08ca1a37afce99e0292a20348fc6855547f44e8a
 SHA1 (patch-mn) = 5b79783e48249044be1a904a6cfd20ba175b5fd4
 SHA1 (patch-nss_cmd_platlibs.mk) = 01f4350de601b29c94e8a791a28daca226866bb6