Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mozilla-nss for openSUSE:Factory checked in at 2025-07-26 13:39:44 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mozilla-nss (Old) and /work/SRC/openSUSE:Factory/.mozilla-nss.new.13279 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mozilla-nss" Sat Jul 26 13:39:44 2025 rev:231 rq:1295675 version:3.113 Changes: -------- --- /work/SRC/openSUSE:Factory/mozilla-nss/mozilla-nss.changes 2025-07-09 17:25:55.561350523 +0200 +++ /work/SRC/openSUSE:Factory/.mozilla-nss.new.13279/mozilla-nss.changes 2025-07-26 13:39:46.717435741 +0200 @@ -1,0 +2,15 @@ +Mon Jul 21 13:51:01 UTC 2025 - Martin Sirringhaus <martin.sirringh...@suse.com> + +- update to NSS 3.113 + * bmo#1963792 - Fix alias for mac workers on try. + * bmo#198090 - Part 1: Use AES in the SDR (NSS) r=simonf,nss-reviewers,rrelyea + * bmo#1968764 - Bump nssckbi version to 2.78. + * bmo#1967548 - Turn off Websites Trust Bit for Chunghwa Telecom ePKI Root in FF 141. + * bmo#1965556 - fix frame pointers in intel-gcm.s. + * bmo#1971510 - Typo in release notes for NSS 101.4. + * bmo#1968665 - Improve nss-release-helper.py. + * bmo#1930800 - shlibsign is broken in System FIPS mode. + * bmo#1954612 - Need up update NSS for PKCS 3.1: Move IPSEC to 3.1 + * bmo#1965327 - PKCS #11 v3.2 header files. + +------------------------------------------------------------------- Old: ---- nss-3.112.tar.gz New: ---- nss-3.113.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mozilla-nss.spec ++++++ --- /var/tmp/diff_new_pack.y53I8P/_old 2025-07-26 13:39:49.325542921 +0200 +++ /var/tmp/diff_new_pack.y53I8P/_new 2025-07-26 13:39:49.329543086 +0200 @@ -17,15 +17,15 @@ # -%global nss_softokn_fips_version 3.112 +%global nss_softokn_fips_version 3.113 %define NSPR_min_version 4.36 %define nspr_ver %(rpm -q --queryformat '%%{VERSION}' mozilla-nspr) %define nssdbdir %{_sysconfdir}/pki/nssdb %global crypto_policies_version 20210218 Name: mozilla-nss -Version: 3.112 +Version: 3.113 Release: 0 -%define underscore_version 3_112 +%define underscore_version 3_113 Summary: Network Security Services License: MPL-2.0 Group: System/Libraries ++++++ nss-3.112.tar.gz -> nss-3.113.tar.gz ++++++ /work/SRC/openSUSE:Factory/mozilla-nss/nss-3.112.tar.gz /work/SRC/openSUSE:Factory/.mozilla-nss.new.13279/nss-3.113.tar.gz differ: char 5, line 1 ++++++ nss-fips-approved-crypto-non-ec.patch ++++++ --- /var/tmp/diff_new_pack.y53I8P/_old 2025-07-26 13:39:49.565552784 +0200 +++ /var/tmp/diff_new_pack.y53I8P/_new 2025-07-26 13:39:49.569552949 +0200 @@ -726,9 +726,7 @@ /* ------------------------- Hashing Operations ----------------------- */ { CKM_SHA224, { 0, 0, CKF_HSH }, 1, SFTKFIPSNone }, { CKM_SHA224_HMAC, { 112, 224, CKF_SGN }, 1, SFTKFIPSNone }, -@@ -139,44 +190,86 @@ SFTKFIPSAlgorithmList sftk_fips_mechs[] - { CKM_SHA512_HMAC, { 256, 512, CKF_SGN }, 1, SFTKFIPSNone }, - { CKM_SHA512_HMAC_GENERAL, { 256, 512, CKF_SGN }, 1, SFTKFIPSNone }, +@@ -141,46 +192,88 @@ SFTKFIPSAlgorithmList sftk_fips_mechs[] /* --------------------- Secret Key Operations ------------------------ */ - { CKM_GENERIC_SECRET_KEY_GEN, { 8, 256, CKF_GEN }, 1, SFTKFIPSNone }, + { CKM_GENERIC_SECRET_KEY_GEN, { 112, 512, CKF_GEN }, 1, SFTKFIPSNone }, @@ -805,6 +803,10 @@ + { CKM_NSS_SP800_108_DOUBLE_PIPELINE_KDF_DERIVE_DATA, { 112, CK_MAX, CKF_KDF }, 1, SFTKFIPSChkHashSp800, + offsetof(CK_SP800_108_KDF_PARAMS, prfType) }, /* --------------------IPSEC ----------------------- */ + { CKM_IKE2_PRF_PLUS_DERIVE, { 8, 255 * 64, CKF_KDF }, 1, SFTKFIPSNone }, + { CKM_IKE_PRF_DERIVE, { 8, 64, CKF_KDF }, 1, SFTKFIPSNone }, + { CKM_IKE1_PRF_DERIVE, { 8, 64, CKF_KDF }, 1, SFTKFIPSNone }, + { CKM_IKE1_EXTENDED_DERIVE, { 8, 255 * 64, CKF_KDF }, 1, SFTKFIPSNone }, - { CKM_NSS_IKE_PRF_PLUS_DERIVE, { 8, 255 * 64, CKF_KDF }, 1, SFTKFIPSNone }, - { CKM_NSS_IKE_PRF_DERIVE, { 8, 64, CKF_KDF }, 1, SFTKFIPSNone }, - { CKM_NSS_IKE1_PRF_DERIVE, { 8, 64, CKF_KDF }, 1, SFTKFIPSNone },