Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package mozilla-nss for openSUSE:Factory
checked in at 2025-07-09 17:25:53
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/mozilla-nss (Old)
and /work/SRC/openSUSE:Factory/.mozilla-nss.new.7373 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mozilla-nss"
Wed Jul 9 17:25:53 2025 rev:230 rq:1291170 version:3.112
Changes:
--------
--- /work/SRC/openSUSE:Factory/mozilla-nss/mozilla-nss.changes 2025-05-02
14:55:35.776232340 +0200
+++ /work/SRC/openSUSE:Factory/.mozilla-nss.new.7373/mozilla-nss.changes
2025-07-09 17:25:55.561350523 +0200
@@ -1,0 +2,28 @@
+Wed Jun 25 04:19:52 UTC 2025 - Wolfgang Rosenauer <w...@rosenauer.org>
+
+- update to NSS 3.112
+ * bmo#1963792 - Fix alias for mac workers on try
+ * bmo#1966786 - ensure all options can be configured with
+ SSL_OptionSet and SSL_OptionSetDefault
+ * bmo#1931930 - ABI/API break in ssl certificate processing
+ * bmo#1955971 - remove unnecessary assertion in
+ sec_asn1d_init_state_based_on_template.
+ * bmo#1965754 - update taskgraph to v14.2.1.
+ * bmo#1964358 - Workflow for automation of the release on GitHub
+ when pushing a tag
+ * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
+ * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
+ * bmo#1951396 - update taskgraph to v14.1.1
+ * bmo#1962503 - Partial fix for ACVP build CI job
+ * bmo#1961827 - Initialize find in sftk_searchDatabase
+ * bmo#1963121 - Add clang-18 to extra builds
+ * bmo#1963044 - Fault tolerant git fetch for fuzzing
+ * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
+ * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or
+ CMSDEBUG are set
+ * bmo#1961835 - fix content type tag check in
+ NSS_CMSMessage_ContainsCertsOrCrls.
+ * bmo#1963102 - Remove Cryptofuzz CI version check
+- Modify bmo1962556.patch to catch OBS specific errors
+
+-------------------------------------------------------------------
Old:
----
nss-3.110.tar.gz
New:
----
nss-3.112.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ mozilla-nss.spec ++++++
--- /var/tmp/diff_new_pack.vqIyNz/_old 2025-07-09 17:25:57.821444548 +0200
+++ /var/tmp/diff_new_pack.vqIyNz/_new 2025-07-09 17:25:57.821444548 +0200
@@ -17,15 +17,15 @@
#
-%global nss_softokn_fips_version 3.110
+%global nss_softokn_fips_version 3.112
%define NSPR_min_version 4.36
%define nspr_ver %(rpm -q --queryformat '%%{VERSION}' mozilla-nspr)
%define nssdbdir %{_sysconfdir}/pki/nssdb
%global crypto_policies_version 20210218
Name: mozilla-nss
-Version: 3.110
+Version: 3.112
Release: 0
-%define underscore_version 3_110
+%define underscore_version 3_112
Summary: Network Security Services
License: MPL-2.0
Group: System/Libraries
@@ -323,7 +323,20 @@
source ../obstestenv.sh
cd tests
./all.sh
-if grep "FAILED" ../../../tests_results/security/localhost.1/output.log ; then
+# This file can live at different places when built in OBS or using "osc
build":
+if [ -s ../../../tests_results/security/localhost.1/output.log ]; then
+ output_log=../../../tests_results/security/localhost.1/output.log
+elif [ -s ../../tests_results/security/localhost.1/output.log ]; then
+ output_log=../../tests_results/security/localhost.1/output.log
+elif [ -s ../tests_results/security/localhost.1/output.log ]; then
+ output_log=../tests_results/security/localhost.1/output.log
+elif [ -s ../security/localhost.1/output.log ]; then
+ output_log=../security/localhost.1/output.log
+else
+ echo "Cannot find tests_results output.log - Assuming testsuite failed"
+ exit 1
+fi
+if grep "FAILED" $output_log ; then
echo "Testsuite FAILED"
exit 1
fi
++++++ bmo1962556.patch ++++++
--- /var/tmp/diff_new_pack.vqIyNz/_old 2025-07-09 17:25:57.945449707 +0200
+++ /var/tmp/diff_new_pack.vqIyNz/_new 2025-07-09 17:25:57.949449873 +0200
@@ -12,34 +12,19 @@
PR_CONNECT_RESET_ERROR (-5961L)
so I modified the upstreamed patch to grep for both
-diff --git a/tests/ssl/ssl.sh b/tests/ssl/ssl.sh
-index cd03bbcb4c..3030ea2c4f 100755
---- a/tests/ssl/ssl.sh
-+++ b/tests/ssl/ssl.sh
+Index: nss/tests/ssl/ssl.sh
+===================================================================
+--- nss.orig/tests/ssl/ssl.sh
++++ nss/tests/ssl/ssl.sh
@@ -982,8 +982,8 @@ ssl_policy_pkix_ocsp()
echo " vfyserv -o wrong.host.badssl.com -d ${P_R_SERVERDIR} 2>&1 | tee
${P_R_SERVERDIR}/vfy.out"
vfyserv -o wrong.host.badssl.com -d ${P_R_SERVERDIR} 2>&1 | tee
${P_R_SERVERDIR}/vfy.out
# make sure we have the domain mismatch, not bad signature error
-- echo "grep 12276 ${P_R_SERVERDIR}/vfy.out"
-- grep 12276 ${P_R_SERVERDIR}/vfy.out
+- echo "grep -E '12276|5961' ${P_R_SERVERDIR}/vfy.out"
+- grep -E '12276|5961' ${P_R_SERVERDIR}/vfy.out
+ echo "grep -E '12276|5961|5973' ${P_R_SERVERDIR}/vfy.out"
+ grep -E '12276|5961|5973' ${P_R_SERVERDIR}/vfy.out
RET=$?
html_msg $RET $RET_EXP "${testname}" \
"produced a returncode of $RET, expected is $RET_EXP"
-@@ -1023,12 +1023,12 @@ ssl_policy_selfserv()
- SAVE_SERVER_OPTIONS=${SERVER_OPTIONS}
- # make sure policy is working in the multiprocess case is working on
- # UNIX-like OS's. Other OS's can't properly clean up the child processes
-- # when our test suite kills the parent, so just use the single process
-+ # when our test suite kills the parent, so just use the single process
- # self serve for them
- # if [ "${OS_ARCH}" != "WINNT" ]; then
- # SERVER_OPTIONS="-M 3 ${SERVER_OPTIONS}"
- # fi
--
-+
- start_selfserv $CIPHER_SUITES
-
- SERVER_OPTIONS="${SAVE_SERVER_OPTIONS}"
++++++ nss-3.110.tar.gz -> nss-3.112.tar.gz ++++++
/work/SRC/openSUSE:Factory/mozilla-nss/nss-3.110.tar.gz
/work/SRC/openSUSE:Factory/.mozilla-nss.new.7373/nss-3.112.tar.gz differ: char
5, line 1
