CVS commit: pkgsrc/devel/nss

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Sat Oct 24 23:49:37 UTC 2026

Modified Files:
        pkgsrc/devel/nss: Makefile distinfo

Log Message:
devel/nss: Update to 3.132

Changelog:
3.132:
Changes:
    Bug 2084101 - Remove eMudhra emSign Root CA - G3 from NSS.
    Bug 2083709 - Remove eMudhra emSign Root CA - C1 and emSign ECC
Root CA - C3 from NSS.
    Bug 2056777 - fix build failures.
    Bug 2056777 - secasn1d: propagate end-of-contents flag to
enclosing construct.
    Bug 2056777 - additional secasn1d tests for end of contents handling.
    Bug 2056777 - Changing the end_of_content for BER encoding.
    Bug 2064148 - run the FIPS-mode SSL tests in CI.
    Bug 2064148 - run fips.sh in CI.
    Bug 2064148 - run gtests in FIPS mode.
    Bug 2082675 - do not force-import an empty symmetric key.
    Bug 2082671 - allow unwrapping an EC private key without a public point.
    Bug 2064426 - DTLS1.3 must not use EndOfEarlyData (per RFC 9147
Section 5.6).
    Bug 2081444 - make clang-cl the default compiler for Windows in CI.
    Bug 2081444 - add option to build with clang-cl in CI.
    Bug 2075015 - prefer the seed format for wrapped ML-KEM and ML-DSA
private keys.
    Bug 2074404 - Encode ML-DSA private keys in PK11_ExportPrivKeyInfo.
    Bug 2074404 - Encode ML-KEM private keys in PK11_ExportPrivKeyInfo.
    Bug 2081440 - use nspr4 branch tip for CI runs.
    Bug 2082406 - Read p7env and p7verify input in binary mode on Windows.
    Bug 2082407 - p7verify, p7content: exit non-zero on invalid
signatures; fix p7verify SHA-384/512 digests.
    Bug 2050941 - libpkix http default client tests.
    Bug 2079860 - clear held back early data byte when 0rtt is rejected.
    Bug 2030245 - add Windows ARM64 CI jobs.
    Bug 2079416 - Update the wycheproof testvectors README.
    Bug 2079416 - Update ML-KEM wycheproof testvectors.
    Bug 2079416 - Update ML-DSA wycheproof testvectors.
    Bug 2079416 - Update DSA wycheproof testvectors.
    Bug 2079416 - Update RSA PKCS#1 v1.5 signature wycheproof testvectors.
    Bug 2079416 - Update RSA-PSS wycheproof testvectors.
    Bug 2079416 - Update RSA PKCS#1 v1.5 decryption wycheproof testvectors.
    Bug 2079416 - Update RSA-OAEP wycheproof testvectors.
    Bug 2079416 - Update EdDSA wycheproof testvectors.
    Bug 2079416 - Update ChaCha20-Poly1305 wycheproof testvectors.
    Bug 2079416 - Update ECDSA wycheproof testvectors.
    Bug 2079416 - Update ECDH wycheproof testvectors.
    Bug 2079416 - Update X25519 wycheproof testvectors.
    Bug 2079416 - Update HMAC wycheproof testvectors.
    Bug 2079416 - Update AES-CMAC wycheproof testvectors.
    Bug 2079416 - Update AES-CBC wycheproof testvectors.
    Bug 2079402 - read JSON directly for all wycheproof tests.
    Bug 2079457 - explicitly reject RSA PKCS#1 v1.5 ciphertexts that
are not less than the modulus.
    Bug 2075179 - finalize the PRAGMA table_info statement on error
paths in sdb_init.
    Bug 2076062 - Limit nesting depth in PKCS#12 safeContents decoder.
    Bug 2072757 - use encoded serial number to look up trust in
fill_CERTCertificateFields.
    Bug 2077359 - remove unused SEC_ASN1_MKSUB from secsign.c.
    Bug 1961826 - Run NSS_Shutdown at exit in SMIME fuzzer.
    Bug 1961826 - Add streaming decoder pass to SMIME fuzzer.
    Bug 1961826 - Verify SignerInfos in SMIME fuzzer.
    Bug 1961826 - Regenerate test certs for SMIME fuzzer.
    Bug 1961826 - Add EC cert for ECDH and decrypt key callback to SMIME fuzzer.
    Bug 1961826 - Extend the SMIME fuzzer to cover more functions.
    Bug 390374 - return NULL for deprecated PBE functions.
    Bug 2061403 - Keep sigd->digests parallel to sigd->digestAlgorithms.
    Bug 2076696 - guard against integer overflow in PK11_HPKE_Seal and
PK11_HPKE_Open.
    Bug 2076037 - ensure chacha20-poly1305 tag buffer is 16 bytes in
PK11_AEADOp.
    Bug 2077359 - remove more unused functions from NSS.
    Bug 1960284 - Don't report epoch exhaustion through FatalError.


To generate a diff of this commit:
cvs rdiff -u -r1.306 -r1.307 pkgsrc/devel/nss/Makefile
cvs rdiff -u -r1.221 -r1.222 pkgsrc/devel/nss/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/nss/Makefile
diff -u pkgsrc/devel/nss/Makefile:1.306 pkgsrc/devel/nss/Makefile:1.307
--- pkgsrc/devel/nss/Makefile:1.306     Tue Oct 20 16:59:12 2026
+++ pkgsrc/devel/nss/Makefile   Sat Oct 24 23:49:37 2026
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile,v 1.306 2026/10/20 16:59:12 wiz Exp $
+# $NetBSD: Makefile,v 1.307 2026/10/24 23:49:37 ryoon Exp $
 #
 # Release Notes
 # https://firefox-source-docs.mozilla.org/security/nss/releases/index.html
 
-DISTNAME=              nss-3.131.1
+DISTNAME=              nss-3.132
 CATEGORIES=            devel security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${PKGVERSION_NOREV:S/./_/g}_RTM/src/}
 

Index: pkgsrc/devel/nss/distinfo
diff -u pkgsrc/devel/nss/distinfo:1.221 pkgsrc/devel/nss/distinfo:1.222
--- pkgsrc/devel/nss/distinfo:1.221     Tue Oct 20 16:59:12 2026
+++ pkgsrc/devel/nss/distinfo   Sat Oct 24 23:49:37 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.221 2026/10/20 16:59:12 wiz Exp $
+$NetBSD: distinfo,v 1.222 2026/10/24 23:49:37 ryoon Exp $
 
-BLAKE2s (nss-3.131.1.tar.gz) = e23c8ecf4880ee1d2586aadf00af0a25523c7584fdbb0256dfae80888192fc16
-SHA512 (nss-3.131.1.tar.gz) = d76217d89da49bc5dbe1374a1d45bece66565dfe528ecffc8612b0a0c9aaa3060356add0b5e9f42445344c65b95a0a7e61bb6f125069f030fea2081d89aed0b5
-Size (nss-3.131.1.tar.gz) = 88058024 bytes
+BLAKE2s (nss-3.132.tar.gz) = ae8e9e60b37651da28dab314167e2a9fa4f143d8ad1dfc43a8ea928d63bb079a
+SHA512 (nss-3.132.tar.gz) = 9e0936f1b3f1480351895b371e6571440ff0bfcd0c069f0d558006e07ce870b6bebb440bc96e3e1d45fdd3c288da11c7380f3f69646ab1e3c79311f648ce12f9
+Size (nss-3.132.tar.gz) = 87788090 bytes
 SHA1 (patch-md) = ebc903bb19456bfa111fad3c101e3f18168b43b3
 SHA1 (patch-me) = 30aa8b8e22bb687b9c71da40ea9e76b56885d1f8
 SHA1 (patch-mf) = 40e58385fb6f944f463bf00b9aad72bc4ea229d0