CVS commit: pkgsrc/devel/nss

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Thu Jan  6 12:47:51 UTC 2022

Modified Files:
        pkgsrc/devel/nss: Makefile distinfo

Log Message:
nss: update to 3.74.

Changes:
• Bug 966856 - mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses.
• Bug 1553612 - Ensure clients offer consistent ciphersuites after HRR.
• Bug 1721426 - NSS does not properly restrict server keys based on policy.
• Bug 1733003 - Set nssckbi version number to 2.54.
• Bug 1735407 - Replace Google Trust Services LLC (GTS) R4 root certificate in NSS.
• Bug 1735407 - Replace Google Trust Services LLC (GTS) R3 root certificate in NSS.
• Bug 1735407 - Replace Google Trust Services LLC (GTS) R2 root certificate in NSS.
• Bug 1735407 - Replace Google Trust Services LLC (GTS) R1 root certificate in NSS.
• Bug 1735407 - Replace GlobalSign ECC Root CA R4 in NSS.
• Bug 1733560 - Remove Expired Root Certificates from NSS - DST Root CA X3.
• Bug 1740807 - Remove Expiring Cybertrust Global Root and GlobalSign root certificates from NSS.
• Bug 1741930 - Add renewed Autoridad de Certificacion Firmaprofesional CIF A62634068 root certificate to NSS.
• Bug 1740095 - Add iTrusChina ECC root certificate to NSS.
• Bug 1740095 - Add iTrusChina RSA root certificate to NSS.
• Bug 1738805 - Add ISRG Root X2 root certificate to NSS.
• Bug 1733012 - Add Chunghwa Telecom's HiPKI Root CA - G1 root certificate to NSS.
• Bug 1738028 - Avoid a clang 13 unused variable warning in opt build.
• Bug 1735028 - Check for missing signedData field.
• Bug 1737470 - Ensure DER encoded signatures are within size limits.


To generate a diff of this commit:
cvs rdiff -u -r1.219 -r1.220 pkgsrc/devel/nss/Makefile
cvs rdiff -u -r1.144 -r1.145 pkgsrc/devel/nss/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/nss/Makefile
diff -u pkgsrc/devel/nss/Makefile:1.219 pkgsrc/devel/nss/Makefile:1.220
--- pkgsrc/devel/nss/Makefile:1.219     Thu Dec 30 15:49:14 2021
+++ pkgsrc/devel/nss/Makefile   Thu Jan  6 12:47:51 2022
@@ -1,10 +1,10 @@
-# $NetBSD: Makefile,v 1.219 2021/12/30 15:49:14 ryoon Exp $
+# $NetBSD: Makefile,v 1.220 2022/01/06 12:47:51 wiz Exp $
 #
 # release notes
 # https://firefox-source-docs.mozilla.org/security/nss/releases/index.html
 
 DISTNAME=              nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=           3.73.1
+NSS_RELEASE=           3.74.0
 CATEGORIES=            devel security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 

Index: pkgsrc/devel/nss/distinfo
diff -u pkgsrc/devel/nss/distinfo:1.144 pkgsrc/devel/nss/distinfo:1.145
--- pkgsrc/devel/nss/distinfo:1.144     Thu Dec 30 15:49:14 2021
+++ pkgsrc/devel/nss/distinfo   Thu Jan  6 12:47:51 2022
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.144 2021/12/30 15:49:14 ryoon Exp $
+$NetBSD: distinfo,v 1.145 2022/01/06 12:47:51 wiz Exp $
 
-BLAKE2s (nss-3.73.1.tar.gz) = 1a274e109336eda04e458f6fe4948473f4aac9a3cf77a8908a207e87c15fcf03
-SHA512 (nss-3.73.1.tar.gz) = 4cca26cb430f1c167ce7c3a2654c1315938c73bbd425c89d4e636a966fd052724499f34affc5764ec680eeaa080892caab28ef00fe21992421c739f7623cf071
-Size (nss-3.73.1.tar.gz) = 83931597 bytes
+BLAKE2s (nss-3.74.tar.gz) = 820d6b9e50b7d6ed65edb8251ef67d1b6aac3a4c5808ce64f5841f7eb891ef0e
+SHA512 (nss-3.74.tar.gz) = 6fb322b64a5b42e5e22e803c8985986240d2990849d576cfc4b94cdc5c4ab27f683ebc4e1cf5e0ad16c636fc32debb24ec3b2d02d5baedc8fbaedec79c908226
+Size (nss-3.74.tar.gz) = 83937875 bytes
 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1
 SHA1 (patch-me) = ffb5f119764c158c0bd789bd18fc77c61f2e9d2b
 SHA1 (patch-mf) = 40e58385fb6f944f463bf00b9aad72bc4ea229d0