CVS commit: pkgsrc/devel/nss

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Wed Oct  7 09:47:48 UTC 2026

Modified Files:
        pkgsrc/devel/nss: Makefile distinfo

Log Message:
nss: update to 3.131.

Bug 2078438 remove unused private pkcs12, pkcs7, and smime functions.
Bug 2070738 Fix generating nss.pc with system-nspr.
Bug 2066048 replace sslSecurityInfo peerCert with peerCertDER.
Bug 2067244 remove support for inherited DSA parameters in libssl.
Bug 2017995 Fix issues with Unwrapping keys using tokens in FIPS mode.
Bug 2069886 remove Windows-only AES-CTR implementation.
Bug 2069887 improve algorithm policy enforcement for ML-DSA.
Bug 2064512 reject non-RFC 8410 curve OIDs when encoding an X25519 or Ed25519 SubjectPublicKeyInfo.
Bug 2076212 Clear freed CMS members in the destructors.
Bug 2076212 Release the previous signer certificate when re-verifying a PKCS#7 signature.
Bug 2076212 Make SEC_PKCS7DecoderAbort fail the decode.
Bug 2076212 Fail closed after an incomplete PKCS#12 decode.
Bug 2076240 remove unused NSSCryptoContext and NSSTrustDomain functions.
Bug 1993638 can’t import eddsa .p12 from OpenSSL.
Bug 2055638 fix clang format.
Bug 2072045 pk12util fails to import private key into SoftHSM token despite initialized slot and valid PKCS#12 file.
Bug 2075580 p7content: open output file in binary mode.
Bug 2068388 fix msvc build error.
Bug 2072416 use SEC_ASN1_GET for SEC_OctetStringTemplate in der_gtest.
Bug 2074663 remove unused and unexported CERT_ functions.
Bug 2072416 fix leak when decoding nested indefinite length octet strings with null arena.
Bug 2072416 Keep ASN.1 constructed-string substring allocations out of the caller’s SECItem.
Bug 2075525 link softoken_static_gtest against advapi32 on Windows.
Bug 2055638 add regression test for bug 2054616
Bug 2055583 add regression test for bug 2054719
Bug 2075289 httpserv: OCSP responses are sent without a Content-Length header.
Bug 2075021 remove unused private PK11_ functions.
Bug 2075291 avoid NULL dereference in NSS_CMSDigestContext_StartMultiple error path.
Bug 2073293 add CERT_GetDERCertTrust.
Bug 1719827 auto update key4db entry KDF iteration count on login.
Bug 2068388 reject RSA public exponents larger than 32 bits.
Bug 2075024 improve mach support for dist builds.
Bug 2037628 protect PK11SlotInfo::lastLoginCheck with PK11SlotInfo::nssTokenLock.
Bug 2047771 fix fips failures in debug builds.
Bug 2068381 fix error path double free of param_free in PK11_UnwrapPrivKey.
Bug 2074968 stub out DER_Lengths.


To generate a diff of this commit:
cvs rdiff -u -r1.304 -r1.305 pkgsrc/devel/nss/Makefile
cvs rdiff -u -r1.219 -r1.220 pkgsrc/devel/nss/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/nss/Makefile
diff -u pkgsrc/devel/nss/Makefile:1.304 pkgsrc/devel/nss/Makefile:1.305
--- pkgsrc/devel/nss/Makefile:1.304     Thu Sep 24 13:07:12 2026
+++ pkgsrc/devel/nss/Makefile   Wed Oct  7 09:47:48 2026
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile,v 1.304 2026/09/24 13:07:12 wiz Exp $
+# $NetBSD: Makefile,v 1.305 2026/10/07 09:47:48 wiz Exp $
 #
 # Release Notes
 # https://firefox-source-docs.mozilla.org/security/nss/releases/index.html
 
-DISTNAME=              nss-3.130
+DISTNAME=              nss-3.131
 CATEGORIES=            devel security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${PKGVERSION_NOREV:S/./_/g}_RTM/src/}
 

Index: pkgsrc/devel/nss/distinfo
diff -u pkgsrc/devel/nss/distinfo:1.219 pkgsrc/devel/nss/distinfo:1.220
--- pkgsrc/devel/nss/distinfo:1.219     Thu Sep 24 13:07:12 2026
+++ pkgsrc/devel/nss/distinfo   Wed Oct  7 09:47:48 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.219 2026/09/24 13:07:12 wiz Exp $
+$NetBSD: distinfo,v 1.220 2026/10/07 09:47:48 wiz Exp $
 
-BLAKE2s (nss-3.130.tar.gz) = b8aca1849da870375ad2d7987f644cdcc98fb972f1b11d41e10f9e36354d01bc
-SHA512 (nss-3.130.tar.gz) = e52d5d970acec1f88435140c119e36ba77644e95738bf90edb7b1f9cf9e5ae18466691913984b6546143aee8ab381f2588eca5c244b8e36ba2bc7c643ae1fe97
-Size (nss-3.130.tar.gz) = 87281666 bytes
+BLAKE2s (nss-3.131.tar.gz) = 16f97bf734b341e5a75b1b0a5cfeaf63c65f6e3998e0d2850d3eeead6d83f41e
+SHA512 (nss-3.131.tar.gz) = acbc09c7fb127c74df5eb34cd0c3f65d19493d1e28baa6152333b0254261a77aef39ce151159b07e0e6bf0695423144d67b387b2a3afdc3ed785eb1cf904a4c5
+Size (nss-3.131.tar.gz) = 88059889 bytes
 SHA1 (patch-md) = ebc903bb19456bfa111fad3c101e3f18168b43b3
 SHA1 (patch-me) = 30aa8b8e22bb687b9c71da40ea9e76b56885d1f8
 SHA1 (patch-mf) = 40e58385fb6f944f463bf00b9aad72bc4ea229d0