CVS commit: pkgsrc/devel/nss

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Thu Sep 24 13:07:12 UTC 2026

Modified Files:
        pkgsrc/devel/nss: Makefile distinfo

Log Message:
nss: update to 3.130.

Changes:
    Bug 2072042 - selfserv: drain connections before closing.
    Bug 2072396 - reduce core file detection frequency in CI runs.
    Bug 2074429 - applied clang-format on nss.
    Bug 2074515 - Include blapit.h to expose AES_BLOCK_SIZE and SHA_*_LENGTH.
    Bug 2073728 - remove some unused types and functions from lib/pki.
    Bug 2012680 - Testcases for DER_GetInteger error handling.
    Bug 2054712 - Don't accept post-handshake CertificateRequest in DTLS.
    Bug 1951159 -  release the decoded certificate when CERT_NewTempCertificate fails.
    Bug 2072384 - remove unnecessary certs dependencies in CI graph.
    Bug 2072554 - add missing return in do_key_slot when no internal key slot.
    Bug 2072682 - initialize referenceCount in crlutil's CRL allocations.
    Bug 2072682 - take a reference in cmsutil's CMS decrypt-key callback.
    Bug 2072682 - release-assert softoken session and db reference counts.
    Bug 2072682 - release-assert stan object reference counts.
    Bug 2072682 - release-assert pk11wrap slot, module and symkey reference counts.
    Bug 2072682 - release-assert SSL reference counts.
    Bug 2072682 - release-assert CRL and GeneralNameList reference counts.
    Bug 2072682 - free never-live symkeys directly in pk11_getKeyFromList.
    Bug 2072682 - abort on detected key object double frees.
    Bug 2072633 - return CKR_HOST_MEMORY when PORT_NewArena fails in jpakesftk.c.
    Bug 2072389 - fix uninitialized SECItem.type in SECKEY_ConvertToPublicKey.
    Bug 2047359 - propagate the PKCS#12 max element length to nested decoders.
    Bug 2068001 - Switch NSS to WIN95 target and remove Windows fiber code.
    Bug 2030245 - Add Windows ARM64 build support to NSS.
    Bug 2019001 - Update policy for mlkem1024 named group and others.
    Bug 2061391 - perform session object removals under slot lock.
    Bug 2028690 - Keep the default input size limit in NSS_CMSMessage_CreateFromDER.
    Bug 2028690 - Thread element limits through the QuickDER decoder and raise them for CRLs.
    Bug 2028690 - Limit ASN.1 group element count and total streamed input.
    Bug 2028690 - Add SEC_QuickDERDecodeItemWithLimits.
    Bug 2028690 - Place a default size limit on ASN.1 decoder inputs.
    Bug 1951159 - populate NSSCertificate::id at creation.
    Bug 2064306 - avoid VLA in tls_ech_unittest.cc.
    Bug 2070118 - Change the error from decode_error to illegal_parameter
                  for the case when update field in Key Update is neither
                  update_requested nor update_not_requested.
    Bug 2064311 - Remove HPKE internals from public headers.
    Bug 2064306 - HPKE P-256 and P-384 KEMs.
    Bug 2070669 - NSS release process improvements.
    Bug 2070421 - Set _NSPR_BUILD_ for Windows builds.
    Bug 2064502 - add tsan build for NSS in treeherder.


To generate a diff of this commit:
cvs rdiff -u -r1.303 -r1.304 pkgsrc/devel/nss/Makefile
cvs rdiff -u -r1.218 -r1.219 pkgsrc/devel/nss/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/nss/Makefile
diff -u pkgsrc/devel/nss/Makefile:1.303 pkgsrc/devel/nss/Makefile:1.304
--- pkgsrc/devel/nss/Makefile:1.303     Thu Sep 10 10:02:09 2026
+++ pkgsrc/devel/nss/Makefile   Thu Sep 24 13:07:12 2026
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile,v 1.303 2026/09/10 10:02:09 wiz Exp $
+# $NetBSD: Makefile,v 1.304 2026/09/24 13:07:12 wiz Exp $
 #
 # Release Notes
 # https://firefox-source-docs.mozilla.org/security/nss/releases/index.html
 
-DISTNAME=              nss-3.129
+DISTNAME=              nss-3.130
 CATEGORIES=            devel security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${PKGVERSION_NOREV:S/./_/g}_RTM/src/}
 

Index: pkgsrc/devel/nss/distinfo
diff -u pkgsrc/devel/nss/distinfo:1.218 pkgsrc/devel/nss/distinfo:1.219
--- pkgsrc/devel/nss/distinfo:1.218     Thu Sep 10 10:02:09 2026
+++ pkgsrc/devel/nss/distinfo   Thu Sep 24 13:07:12 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.218 2026/09/10 10:02:09 wiz Exp $
+$NetBSD: distinfo,v 1.219 2026/09/24 13:07:12 wiz Exp $
 
-BLAKE2s (nss-3.129.tar.gz) = bda9dba110d063efae30987f5065e88071752716bace7b8c5482f542119d82cd
-SHA512 (nss-3.129.tar.gz) = ffad7bd7dbbd388c88072b21553f533ed721575b1a4dabbbd65a5f62c2f9e4b0e33e45c02d5f3a68b19b364e73f4880ab82924a673bdc2d1754237cde47b6b37
-Size (nss-3.129.tar.gz) = 87255363 bytes
+BLAKE2s (nss-3.130.tar.gz) = b8aca1849da870375ad2d7987f644cdcc98fb972f1b11d41e10f9e36354d01bc
+SHA512 (nss-3.130.tar.gz) = e52d5d970acec1f88435140c119e36ba77644e95738bf90edb7b1f9cf9e5ae18466691913984b6546143aee8ab381f2588eca5c244b8e36ba2bc7c643ae1fe97
+Size (nss-3.130.tar.gz) = 87281666 bytes
 SHA1 (patch-md) = ebc903bb19456bfa111fad3c101e3f18168b43b3
 SHA1 (patch-me) = 30aa8b8e22bb687b9c71da40ea9e76b56885d1f8
 SHA1 (patch-mf) = 40e58385fb6f944f463bf00b9aad72bc4ea229d0