From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 15 Mar 2024 05:06:39 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1rkyq7-0077lR-1b for lore@lore.pengutronix.de; Fri, 15 Mar 2024 05:06:39 +0100 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1rkyq6-0001x3-Sm; Fri, 15 Mar 2024 05:06:38 +0100 Received: from drehscheibe.grey.stw.pengutronix.de ([2a0a:edc0:0:c01:1d::a2]) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1rkype-0001Zh-3p; Fri, 15 Mar 2024 05:06:10 +0100 Received: from [2a0a:edc0:0:1101:1d::54] (helo=dude05.red.stw.pengutronix.de) by drehscheibe.grey.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1rkypd-006QqP-Lc; Fri, 15 Mar 2024 05:06:09 +0100 Received: from mol by dude05.red.stw.pengutronix.de with local (Exim 4.96) (envelope-from ) id 1rkypd-0032e7-21; Fri, 15 Mar 2024 05:06:09 +0100 From: Michael Olbrich To: ptxdist@pengutronix.de Date: Fri, 15 Mar 2024 05:06:09 +0100 Message-Id: <20240315040609.725148-1-m.olbrich@pengutronix.de> X-Mailer: git-send-email 2.39.2 In-Reply-To: <20240217181315.1538468-2-christian.melki@t2data.com> References: <20240217181315.1538468-2-christian.melki@t2data.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: Re: [ptxdist] [APPLIED] nss: Version bump. 3.97 -> 3.98 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Christian Melki Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Thanks, applied as 416e7934e7641d46513ef12d24b4e105141f4eca. Michael [sent from post-receive hook] On Fri, 15 Mar 2024 05:06:09 +0100, Christian Melki wrote: > https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_98.html > Plugs CVE: CVE-2023-5388 - Timing attack against RSA decryption in TLS > > * Forward patchset, applies cleanly. > > Signed-off-by: Christian Melki > Message-Id: <20240217181315.1538468-2-christian.melki@t2data.com> > Signed-off-by: Michael Olbrich > > diff --git a/patches/nss-3.97/0001-nss-fix-nsinstall-build.patch b/patches/nss-3.98/0001-nss-fix-nsinstall-build.patch > similarity index 100% > rename from patches/nss-3.97/0001-nss-fix-nsinstall-build.patch > rename to patches/nss-3.98/0001-nss-fix-nsinstall-build.patch > diff --git a/patches/nss-3.97/0002-add-nss.pc.in.patch b/patches/nss-3.98/0002-add-nss.pc.in.patch > similarity index 100% > rename from patches/nss-3.97/0002-add-nss.pc.in.patch > rename to patches/nss-3.98/0002-add-nss.pc.in.patch > diff --git a/patches/nss-3.97/0003-HACK-don-t-build-commands-that-need-zlib.patch b/patches/nss-3.98/0003-HACK-don-t-build-commands-that-need-zlib.patch > similarity index 100% > rename from patches/nss-3.97/0003-HACK-don-t-build-commands-that-need-zlib.patch > rename to patches/nss-3.98/0003-HACK-don-t-build-commands-that-need-zlib.patch > diff --git a/patches/nss-3.97/0004-HACK-fix-parallel-building-issue.patch b/patches/nss-3.98/0004-HACK-fix-parallel-building-issue.patch > similarity index 100% > rename from patches/nss-3.97/0004-HACK-fix-parallel-building-issue.patch > rename to patches/nss-3.98/0004-HACK-fix-parallel-building-issue.patch > diff --git a/patches/nss-3.97/0005-fix-dependency-generation.patch b/patches/nss-3.98/0005-fix-dependency-generation.patch > similarity index 100% > rename from patches/nss-3.97/0005-fix-dependency-generation.patch > rename to patches/nss-3.98/0005-fix-dependency-generation.patch > diff --git a/patches/nss-3.97/series b/patches/nss-3.98/series > similarity index 100% > rename from patches/nss-3.97/series > rename to patches/nss-3.98/series > diff --git a/rules/nss.make b/rules/nss.make > index 4a795817170a..8a0d7250008a 100644 > --- a/rules/nss.make > +++ b/rules/nss.make > @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_NSS) += nss > # > # Paths and names > # > -NSS_VERSION := 3.97 > -NSS_MD5 := 66da5ddb30ebf742338d4f7f180fb329 > +NSS_VERSION := 3.98 > +NSS_MD5 := 4502fcae1b32da310fffdfb3c67f6985 > NSS := nss-$(NSS_VERSION) > NSS_SUFFIX := tar.gz > NSS_URL := https://ftp.mozilla.org/pub/security/nss/releases/NSS_$(subst .,_,$(NSS_VERSION))_RTM/src/$(NSS).$(NSS_SUFFIX)