Content-Transfer-Encoding: 7bit
Content-Type: multipart/mixed; boundary="_----------=_1578627800262900"
MIME-Version: 1.0
Date: Fri, 10 Jan 2020 03:43:20 +0000
From: "Ryo ONODERA" <ryoon@netbsd.org>
Subject: CVS commit: pkgsrc/devel/nss
To: pkgsrc-changes@NetBSD.org
Reply-To: ryoon@netbsd.org
Message-Id: <20200110034320.BE377FBF4@cvs.NetBSD.org>
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: bulk

This is a multi-part message in MIME format.

--_----------=_1578627800262900
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"

Module Name:	pkgsrc
Committed By:	ryoon
Date:		Fri Jan 10 03:43:20 UTC 2020

Modified Files:
	pkgsrc/devel/nss: Makefile distinfo
	pkgsrc/devel/nss/patches: patch-me

Log Message:
nss: Update to 3.49

Changelog:
Notable Changes in NSS 3.49
 * The legacy DBM database, libnssdbm, is no longer built by default when
using gyp builds. See Bug 1594933 for details.

Bugs fixed in NSS 3.49
 * Bug 1513586 - Set downgrade sentinel for client TLS versions lower than
1.2.
 * Bug 1606025 - Remove -Wmaybe-uninitialized warning in sslsnce.c
 * Bug 1606119 - Fix PPC HW Crypto build failure
 * Bug 1605545 - Memory leak in Pk11Install_Platform_Generate
 * Bug 1602288 - Fix build failure due to missing posix signal.h
 * Bug 1588714 - Implement CheckARMSupport for Win64/aarch64
 * Bug 1585189 - NSS database uses 3DES instead of AES to encrypt DB entries
 * Bug 1603257 - Fix UBSAN issue in softoken CKM_NSS_CHACHA20_CTR
initialization
 * Bug 1590001 - Additional HRR Tests (CVE-2019-17023)
 * Bug 1600144 - Treat ClientHello with message_seq of 1 as a second
ClientHello
 * Bug 1603027 - Test that ESNI is regenerated after HelloRetryRequest
 * Bug 1593167 - Intermittent mis-reporting potential security risk
SEC_ERROR_UNKNOWN_ISSUER
 * Bug 1535787 - Fix automation/release/nss-release-helper.py on MacOS
 * Bug 1594933 - Disable building DBM by default
 * Bug 1562548 - Improve GCM perfomance on aarch32


To generate a diff of this commit:
cvs rdiff -u -r1.175 -r1.176 pkgsrc/devel/nss/Makefile
cvs rdiff -u -r1.103 -r1.104 pkgsrc/devel/nss/distinfo
cvs rdiff -u -r1.5 -r1.6 pkgsrc/devel/nss/patches/patch-me

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.


--_----------=_1578627800262900
Content-Disposition: inline
Content-Length: 3350
Content-Transfer-Encoding: binary
Content-Type: text/x-diff; charset=us-ascii

Modified files:

Index: pkgsrc/devel/nss/Makefile
diff -u pkgsrc/devel/nss/Makefile:1.175 pkgsrc/devel/nss/Makefile:1.176
--- pkgsrc/devel/nss/Makefile:1.175	Sat Dec 28 23:04:04 2019
+++ pkgsrc/devel/nss/Makefile	Fri Jan 10 03:43:20 2020
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.175 2019/12/28 23:04:04 ryoon Exp $
+# $NetBSD: Makefile,v 1.176 2020/01/10 03:43:20 ryoon Exp $
 
 DISTNAME=		nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=		3.48.0
+NSS_RELEASE=		3.49.0
 CATEGORIES=		security
 MASTER_SITES=		${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 

Index: pkgsrc/devel/nss/distinfo
diff -u pkgsrc/devel/nss/distinfo:1.103 pkgsrc/devel/nss/distinfo:1.104
--- pkgsrc/devel/nss/distinfo:1.103	Sat Dec 28 23:04:04 2019
+++ pkgsrc/devel/nss/distinfo	Fri Jan 10 03:43:20 2020
@@ -1,13 +1,13 @@
-$NetBSD: distinfo,v 1.103 2019/12/28 23:04:04 ryoon Exp $
+$NetBSD: distinfo,v 1.104 2020/01/10 03:43:20 ryoon Exp $
 
-SHA1 (nss-3.48.tar.gz) = 4a1f06ba4bfa06da2df94a98c793b17942a58652
-RMD160 (nss-3.48.tar.gz) = 4bdf2b350cf61cf401de6e6275d160779929cc95
-SHA512 (nss-3.48.tar.gz) = 71aefe323501dd8d750ed36606554f2e67ecb2bca85b55bc798d5dfc3a47f3d454348ca950971aaaafb16f6d847c098d2b1c40d40b50380e0c2540ed1b9a9e9a
-Size (nss-3.48.tar.gz) = 76481237 bytes
+SHA1 (nss-3.49.tar.gz) = f25d673a8b19730837f073f3c1b776e74fdbf4a4
+RMD160 (nss-3.49.tar.gz) = e4d3389a1ea1198efcca2be9aff49691596cd08d
+SHA512 (nss-3.49.tar.gz) = 7d8df73a2e585585a7cb3f887af3f933854984479531b3dd30316873bdd92c130e2fadb54e7b3b1f0b10675b1bce09112ef39860d74ef6f0df7b57bf430bd072
+Size (nss-3.49.tar.gz) = 76488781 bytes
 SHA1 (patch-am) = fea682bf03bc8b645049f93ed58554ca45f47aca
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1
-SHA1 (patch-me) = dd6adff2cd3ca61925b566210a8b9697348bd45e
+SHA1 (patch-me) = a0d4bf85652c0cdac7fdf95dc2fb7545d66349cd
 SHA1 (patch-mf) = 534fe5f711f60dadc3432bc805a6153535f11709
 SHA1 (patch-mg) = 3c878548c98bdea559a3e653e63e0ed22a2a8834
 SHA1 (patch-mh) = a46d3098a85c3a4a57895a9845bc1741fc5e9561

Index: pkgsrc/devel/nss/patches/patch-me
diff -u pkgsrc/devel/nss/patches/patch-me:1.5 pkgsrc/devel/nss/patches/patch-me:1.6
--- pkgsrc/devel/nss/patches/patch-me:1.5	Tue Dec  3 14:29:21 2019
+++ pkgsrc/devel/nss/patches/patch-me	Fri Jan 10 03:43:20 2020
@@ -1,9 +1,9 @@
-$NetBSD: patch-me,v 1.5 2019/12/03 14:29:21 ryoon Exp $
+$NetBSD: patch-me,v 1.6 2020/01/10 03:43:20 ryoon Exp $
 
 Add DragonFly support.
 Always include GCM for aarch64.
 
---- nss/lib/freebl/Makefile.orig	2019-11-19 19:55:30.000000000 +0000
+--- nss/lib/freebl/Makefile.orig	2020-01-03 20:27:43.000000000 +0000
 +++ nss/lib/freebl/Makefile
 @@ -101,6 +101,9 @@ endif
  ifdef NSS_NO_INIT_SUPPORT
@@ -23,8 +23,8 @@ Always include GCM for aarch64.
 +    EXTRA_SRCS += aes-armv8.c
  endif
  ifeq ($(CPU_ARCH),arm)
-     ifdef CC_IS_CLANG
-@@ -318,7 +321,7 @@ endif
+     EXTRA_SRCS += gcm-arm32-neon.c
+@@ -320,7 +323,7 @@ endif
  # to bind the blapi function references in FREEBLVector vector
  # (ldvector.c) to the blapi functions defined in the freebl
  # shared libraries.
@@ -33,7 +33,7 @@ Always include GCM for aarch64.
      MKSHLIB += -Wl,-Bsymbolic
  endif
  
-@@ -470,7 +473,11 @@ else
+@@ -472,7 +475,11 @@ else
      ifdef NS_USE_GCC
  	LD = gcc
  	AS = gcc


--_----------=_1578627800262900--