CVS commit: pkgsrc/devel/nss

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Thu Feb 15 22:46:50 UTC 2024

Modified Files:
        pkgsrc/devel/nss: Makefile distinfo

Log Message:
nss: update to 3.98.

Changes:

   - Bug 1780432 - (CVE-2023-5388) Timing attack against RSA
     decryption in TLS.
   - Bug 1879513 - Certificate Compression: enabling the check
     that the compression was advertised.
   - Bug 1831552 - Move Windows workers to
     nss-1/b-win2022-alpha.
   - Bug 1879945 - Remove Email trust bit from OISTE WISeKey
     Global Root GC CA.
   - Bug 1877344 - Replace `distutils.spawn.find_executable`
     with `shutil.which` within `mach` in `nss`.
   - Bug 1548723 - Certificate Compression: Updating
     nss_bogo_shim to support Certificate compression.
   - Bug 1548723 - TLS Certificate Compression (RFC 8879)
     Implementation.
   - Bug 1875356 - Add valgrind annotations to freebl kyber
     operations for constant-time execution tests.
   - Bug 1870673 - Set nssckbi version number to 2.66.
   - Bug 1874017 - Add Telekom Security roots.
   - Bug 1873095 - Add D-Trust 2022 S/MIME roots.
   - Bug 1865450 - Remove expired Security Communication RootCA1
     root.
   - Bug 1876179 - move keys to a slot that supports
     concatenation in PK11_ConcatSymKeys.
   - Bug 1876800 - remove unmaintained tls-interop tests.
   - Bug 1874937 - bogo: add support for the -ipv6 and -shim-id
     shim flags.
   - Bug 1874937 - bogo: add support for the -curves shim flag
     and update Kyber expectations.
   - Bug 1874937 - bogo: adjust expectation for a key usage bit
     test.
   - Bug 1757758 - mozpkix: add option to ignore invalid subject
     alternative names.
   - Bug 1841029 - Fix selfserv not stripping `publicname:` from
     -X value.
   - Bug 1876390 - take ownership of ecckilla shims.
   - Bug 1874458 - add valgrind annotations to freebl/ec.c.
   - Bug  864039 - PR_INADDR_ANY needs PR_htonl before
     assignment to inet.ip.
   - Bug 1875965 - Update zlib to 1.3.1.


To generate a diff of this commit:
cvs rdiff -u -r1.255 -r1.256 pkgsrc/devel/nss/Makefile
cvs rdiff -u -r1.176 -r1.177 pkgsrc/devel/nss/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/nss/Makefile
diff -u pkgsrc/devel/nss/Makefile:1.255 pkgsrc/devel/nss/Makefile:1.256
--- pkgsrc/devel/nss/Makefile:1.255     Tue Jan 23 00:42:19 2024
+++ pkgsrc/devel/nss/Makefile   Thu Feb 15 22:46:50 2024
@@ -1,10 +1,10 @@
-# $NetBSD: Makefile,v 1.255 2024/01/23 00:42:19 wiz Exp $
+# $NetBSD: Makefile,v 1.256 2024/02/15 22:46:50 wiz Exp $
 #
 # release notes
 # https://firefox-source-docs.mozilla.org/security/nss/releases/index.html
 
 DISTNAME=              nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=           3.97.0
+NSS_RELEASE=           3.98.0
 CATEGORIES=            devel security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 

Index: pkgsrc/devel/nss/distinfo
diff -u pkgsrc/devel/nss/distinfo:1.176 pkgsrc/devel/nss/distinfo:1.177
--- pkgsrc/devel/nss/distinfo:1.176     Tue Jan 23 00:42:19 2024
+++ pkgsrc/devel/nss/distinfo   Thu Feb 15 22:46:50 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.176 2024/01/23 00:42:19 wiz Exp $
+$NetBSD: distinfo,v 1.177 2024/02/15 22:46:50 wiz Exp $
 
-BLAKE2s (nss-3.97.tar.gz) = 3c642bba6d88e9aae4f2a40e3a3ca93954e2f4ce0bddfe2b6172c227aa006cc2
-SHA512 (nss-3.97.tar.gz) = 1ad6ac6ff626dc187f42b313c1088ef4b4ac0ee3e156d37824c36e778faa977e8f132302ac00d74aa8f9903e791a0fee6cecb5244d2601e0825cc125b6f33d6a
-Size (nss-3.97.tar.gz) = 76664827 bytes
+BLAKE2s (nss-3.98.tar.gz) = 40e79df33afc9bf1c194d9410ee19bc9ea7216df15cf67d28fe784c3b467d192
+SHA512 (nss-3.98.tar.gz) = 4f335c5c284eff6424745cc15e32037715a915f6f61687ec36a8ffaef0e45d152602a1be275bbb2f14650c7d258d6488430cdcf512b18ba7cb73cd43ac625681
+Size (nss-3.98.tar.gz) = 76685475 bytes
 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1
 SHA1 (patch-me) = ffb5f119764c158c0bd789bd18fc77c61f2e9d2b
 SHA1 (patch-mf) = 40e58385fb6f944f463bf00b9aad72bc4ea229d0