CVS commit: pkgsrc/devel/nss

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Tue Aug 18 22:24:41 UTC 2026

Modified Files:
        pkgsrc/devel/nss: Makefile distinfo

Log Message:
nss: update to 3.127.

Changes in NSS 3.127

- Bug 2060720 - Round ECH ClientHelloInner padding up to a multiple of 32.
- Bug 2063071 - make selfserv listen on IPv6 wildcard on dual-stack hosts.
- Bug 2059176 - EC_DerivePublicKey() failure is not propagated in sftk_mkPrivKey().
- Bug 2052210 - Generate additional test message for Thunderbird (HTML with remote image).
- Bug 1869493 - Heap-buffer overflow in AES Keywrap.
- Bug 2054609 - remove cipher suite order exception from bug 946147.
- Bug 2061107 - restore pkcs12.h for source compatibility.
- Bug 2056291 - remove support for pre-v1.0 PKCS#12.
- Bug 2054719 - fix content type tag for CMS AuthEnvelopedData plaintext.
- Bug 2060118 - remove DH_GenParam support.
- Bug 2053831 - clang format.
- Bug 2054714 - avoid leaking stale ECH outer extensions across HRR.
- Bug 2053831 - Drop CKF_VERIFY flag from CKM_HKDF_DATA derivation in ECH GREASE.
- Bug 2053831 - Adjust PK11_Derive and TLS 1.3 derivation templates for CKM_HKDF_DATA and CKO_DATA compliance.
- Bug 2053831 - Use CKF_HKDF_SALT_DATA in tls13_HkdfExtract for CKO_DATA keys per PKCS#11 v3.2.
- Bug 2057184 - Enable -Wunused-but-set-variable/-global in werror.py.
- Bug 2056846 - Remove unused policy string callback to fix -Wunused-but-set-global.
- Bug 2052709 - Convert NSS 3.126 release notes to Markdown.
- Bug 2052709 - Rename doc/rst to doc/src and update references.
- Bug 2052709 - Apply markdownlint to the converted Markdown docs.
- Bug 2052709 - Fix Markdown documentation build warnings.
- Bug 2052709 - Convert documentation from reStructuredText to Markdown (automated).


To generate a diff of this commit:
cvs rdiff -u -r1.299 -r1.300 pkgsrc/devel/nss/Makefile
cvs rdiff -u -r1.213 -r1.214 pkgsrc/devel/nss/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/nss/Makefile
diff -u pkgsrc/devel/nss/Makefile:1.299 pkgsrc/devel/nss/Makefile:1.300
--- pkgsrc/devel/nss/Makefile:1.299     Thu Aug 13 18:04:10 2026
+++ pkgsrc/devel/nss/Makefile   Tue Aug 18 22:24:41 2026
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile,v 1.299 2026/08/13 18:04:10 wiz Exp $
+# $NetBSD: Makefile,v 1.300 2026/08/18 22:24:41 wiz Exp $
 #
 # Release Notes
 # https://firefox-source-docs.mozilla.org/security/nss/releases/index.html
 
-DISTNAME=              nss-3.126.1
+DISTNAME=              nss-3.127
 CATEGORIES=            devel security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${PKGVERSION_NOREV:S/./_/g}_RTM/src/}
 

Index: pkgsrc/devel/nss/distinfo
diff -u pkgsrc/devel/nss/distinfo:1.213 pkgsrc/devel/nss/distinfo:1.214
--- pkgsrc/devel/nss/distinfo:1.213     Thu Aug 13 18:04:10 2026
+++ pkgsrc/devel/nss/distinfo   Tue Aug 18 22:24:41 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.213 2026/08/13 18:04:10 wiz Exp $
+$NetBSD: distinfo,v 1.214 2026/08/18 22:24:41 wiz Exp $
 
-BLAKE2s (nss-3.126.1.tar.gz) = f0d285efd6df42946e4870e38f47d5678e8245e67cf1c9b1a07f9cda712c3a7d
-SHA512 (nss-3.126.1.tar.gz) = 2c9bf4ffae58b7b91eba1d3a0519af2a343e6b4c12f4790d07fb5b54781e140a1371eb22be9fd5de61a6bdf27449c28de31a330b82e5d6f699e017808524eea3
-Size (nss-3.126.1.tar.gz) = 78771322 bytes
+BLAKE2s (nss-3.127.tar.gz) = 956138e7098c05619efcc5c37d665a7b51aa00432da1545f76267827da910a14
+SHA512 (nss-3.127.tar.gz) = c5293a6b68201a7d71b635c77cfdad7f032fb57fdd341ed4f2c702ed7f93795485be16f0f6994e079b5234fe362a83c3b82dae1bc335e42f0ad618d2586f23dd
+Size (nss-3.127.tar.gz) = 78736984 bytes
 SHA1 (patch-md) = ebc903bb19456bfa111fad3c101e3f18168b43b3
 SHA1 (patch-me) = 30aa8b8e22bb687b9c71da40ea9e76b56885d1f8
 SHA1 (patch-mf) = 40e58385fb6f944f463bf00b9aad72bc4ea229d0