Hello community, here is the log from the commit of package mozilla-nss for openSUSE:Factory checked in at Sat Aug 8 01:32:00 CEST 2009. -------- --- GNOME/mozilla-nss/mozilla-nss.changes 2009-08-03 18:47:11.000000000 +0200 +++ mozilla-nss/mozilla-nss.changes 2009-08-07 14:34:48.000000000 +0200 @@ -1,0 +2,6 @@ +Fri Aug 7 13:10:22 CEST 2009 - wr@rosenauer.org + +- update to recent snapshot (20090806) +- libnssdbm3.so has to be signed starting with 3.12.4 + +------------------------------------------------------------------- calling whatdependson for head-i586 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mozilla-nss.spec ++++++ --- /var/tmp/diff_new_pack.ulDcu5/_old 2009-08-08 01:30:10.000000000 +0200 +++ /var/tmp/diff_new_pack.ulDcu5/_new 2009-08-08 01:30:10.000000000 +0200 @@ -29,7 +29,7 @@ %endif License: GPL v2 or later ; LGPL v2.1 or later ; MPL Version: 3.12.3.99 -Release: 1 +Release: 2 # bug437293 %ifarch ppc64 Obsoletes: mozilla-nss-64bit @@ -190,6 +190,7 @@ # copy dynamic libs cp -L lib/libnss3.so \ lib/libnssdbm3.so \ + lib/libnssdbm3.chk \ lib/libnssutil3.so \ lib/libnssckbi.so \ lib/libsmime3.so \ @@ -259,6 +260,7 @@ %{__arch_install_post} \ %{__os_install_post} \ LD_LIBRARY_PATH=$RPM_BUILD_ROOT/%{_lib}:$RPM_BUILD_ROOT%{_libdir} $RPM_BUILD_ROOT%{_libexecdir}/nss/shlibsign -i $RPM_BUILD_ROOT%{_libdir}/libsoftokn3.so \ + LD_LIBRARY_PATH=$RPM_BUILD_ROOT/%{_lib}:$RPM_BUILD_ROOT%{_libdir} $RPM_BUILD_ROOT%{_libexecdir}/nss/shlibsign -i $RPM_BUILD_ROOT%{_libdir}/libnssdbm3.so \ LD_LIBRARY_PATH=$RPM_BUILD_ROOT/%{_lib}:$RPM_BUILD_ROOT%{_libdir} $RPM_BUILD_ROOT%{_libexecdir}/nss/shlibsign -i $RPM_BUILD_ROOT/%{_lib}/libfreebl3.so \ %{nil} @@ -295,6 +297,7 @@ %{_libdir}/libnsssqlite3.so %endif %{_libdir}/libsoftokn3.chk +%{_libdir}/libnssdbm3.chk %files devel %defattr(644, root, root, 755) ++++++ nss-3.12.3.99.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/nss-3.12.3.99/mozilla/security/coreconf/config.mk new/nss-3.12.3.99/mozilla/security/coreconf/config.mk --- old/nss-3.12.3.99/mozilla/security/coreconf/config.mk 2009-06-05 04:14:49.000000000 +0200 +++ new/nss-3.12.3.99/mozilla/security/coreconf/config.mk 2009-08-07 13:09:39.000000000 +0200 @@ -194,6 +194,11 @@ DEFINES += -DNSS_DISABLE_DBM endif +ifdef NSS_NO_FORK_CHECK +DEFINES += -DNO_FORK_CHECK +DEFINES += -DNO_CHECK_FORK +endif + # Avoid building object leak test code for optimized library ifndef BUILD_OPT ifdef PKIX_OBJECT_LEAK_TEST diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/nss-3.12.3.99/mozilla/security/nss/lib/libpkix/pkix/checker/pkix_ocspchecker.c new/nss-3.12.3.99/mozilla/security/nss/lib/libpkix/pkix/checker/pkix_ocspchecker.c --- old/nss-3.12.3.99/mozilla/security/nss/lib/libpkix/pkix/checker/pkix_ocspchecker.c 2009-04-24 21:13:51.000000000 +0200 +++ new/nss-3.12.3.99/mozilla/security/nss/lib/libpkix/pkix/checker/pkix_ocspchecker.c 2009-08-07 13:09:40.000000000 +0200 @@ -187,7 +187,7 @@ } PKIX_CHECK( - PKIX_PL_OcspCertID_GetFreshCacheStatus(cid, NULL, + PKIX_PL_OcspCertID_GetFreshCacheStatus(cid, date, &hasFreshStatus, &statusIsGood, &resultCode, @@ -321,7 +321,7 @@ } PKIX_CHECK( - pkix_pl_OcspResponse_GetStatusForCert(cid, response, + pkix_pl_OcspResponse_GetStatusForCert(cid, response, date, &passed, &resultCode, plContext), PKIX_OCSPRESPONSEGETSTATUSFORCERTFAILED); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/nss-3.12.3.99/mozilla/security/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_ocspresponse.c new/nss-3.12.3.99/mozilla/security/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_ocspresponse.c --- old/nss-3.12.3.99/mozilla/security/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_ocspresponse.c 2009-04-14 18:13:30.000000000 +0200 +++ new/nss-3.12.3.99/mozilla/security/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_ocspresponse.c 2009-08-07 13:09:40.000000000 +0200 @@ -970,10 +970,12 @@ pkix_pl_OcspResponse_GetStatusForCert( PKIX_PL_OcspCertID *cid, PKIX_PL_OcspResponse *response, + PKIX_PL_Date *validity, PKIX_Boolean *pPassed, SECErrorCodes *pReturnCode, void *plContext) { + PRTime time = 0; SECStatus rv = SECFailure; SECStatus rvCache; PRBool certIDWasConsumed = PR_FALSE; @@ -989,11 +991,19 @@ PKIX_NULLCHECK_TWO(response->signerCert, response->request); PKIX_NULLCHECK_TWO(cid, cid->certID); + if (validity != NULL) { + PKIX_Error *er = pkix_pl_Date_GetPRTime(validity, &time, plContext); + PKIX_DECREF(er); + } + if (!time) { + time = PR_Now(); + } + rv = cert_ProcessOCSPResponse(response->handle, response->nssOCSPResponse, cid->certID, response->signerCert, - PR_Now(), + time, &certIDWasConsumed, &rvCache); if (certIDWasConsumed) { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/nss-3.12.3.99/mozilla/security/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_ocspresponse.h new/nss-3.12.3.99/mozilla/security/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_ocspresponse.h --- old/nss-3.12.3.99/mozilla/security/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_ocspresponse.h 2008-11-01 00:02:55.000000000 +0100 +++ new/nss-3.12.3.99/mozilla/security/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_ocspresponse.h 2009-08-07 13:09:40.000000000 +0200 @@ -113,6 +113,7 @@ pkix_pl_OcspResponse_GetStatusForCert( PKIX_PL_OcspCertID *cid, PKIX_PL_OcspResponse *response, + PKIX_PL_Date *validity, PKIX_Boolean *pPassed, SECErrorCodes *pReturnCode, void *plContext); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/nss-3.12.3.99/mozilla/security/nss/lib/pk11wrap/pk11auth.c new/nss-3.12.3.99/mozilla/security/nss/lib/pk11wrap/pk11auth.c --- old/nss-3.12.3.99/mozilla/security/nss/lib/pk11wrap/pk11auth.c 2009-06-16 08:15:23.000000000 +0200 +++ new/nss-3.12.3.99/mozilla/security/nss/lib/pk11wrap/pk11auth.c 2009-08-07 13:09:40.000000000 +0200 @@ -483,10 +483,17 @@ int oldLen; CK_SESSION_HANDLE rwsession; - if (newpw == NULL) newpw = ""; - if (oldpw == NULL) oldpw = ""; - newLen = PORT_Strlen(newpw); - oldLen = PORT_Strlen(oldpw); + /* use NULL values to trigger the protected authentication path */ + if (slot->protectedAuthPath) { + if (newpw == NULL) newLen = 0; + if (oldpw == NULL) oldLen = 0; + } else { + if (newpw == NULL) newpw = ""; + if (oldpw == NULL) oldpw = ""; + newLen = PORT_Strlen(newpw); + oldLen = PORT_Strlen(oldpw); + } + /* get a rwsession */ rwsession = PK11_GetRWSession(slot); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/nss-3.12.3.99/mozilla/security/nss/lib/softoken/softoknt.h new/nss-3.12.3.99/mozilla/security/nss/lib/softoken/softoknt.h --- old/nss-3.12.3.99/mozilla/security/nss/lib/softoken/softoknt.h 2009-01-28 00:13:21.000000000 +0100 +++ new/nss-3.12.3.99/mozilla/security/nss/lib/softoken/softoknt.h 2009-08-07 13:09:40.000000000 +0200 @@ -36,7 +36,7 @@ * the terms of any one of the MPL, the GPL or the LGPL. * * ***** END LICENSE BLOCK ***** */ -/* $Id: softoknt.h,v 1.5 2009/01/27 23:13:21 rrelyea%redhat.com Exp $ */ +/* $Id: softoknt.h,v 1.6 2009/08/03 16:58:28 christophe.ravel.bugs%sun.com Exp $ */ #ifndef _SOFTOKNT_H_ #define _SOFTOKNT_H_ @@ -88,7 +88,7 @@ NSS_AUDIT_SELF_TEST, NSS_AUDIT_SET_PIN, NSS_AUDIT_UNWRAP_KEY, - NSS_AUDIT_WRAP_KEY, + NSS_AUDIT_WRAP_KEY } NSSAuditType; #endif /* _SOFTOKNT_H_ */ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org