[rpms/nss] f43: Update NSS to 3.125

[rpms/nss] f43: Update NSS to 3.125

[@ 2026-06-18 11:56 UTC (permalink / raw)]

A new commit has been pushed.

Repo   : rpms/nss
Branch : f43
Commit : e5faf1b069cd1cc353142bbfa8323794ad548b01
Author : Krenželok František <fkrenzel@redhat.com>
Date   : 2026-06-18T11:46:32+02:00
Stats  : +11/-6 in 4 file(s)
URL    : https://src.fedoraproject.org/rpms/nss/c/e5faf1b069cd1cc353142bbfa8323794ad548b01?branch=f43

Log:
Update NSS to 3.125

---
diff --git a/.gitignore b/.gitignore
index 1161321..a24febe 100644
--- a/.gitignore
+++ b/.gitignore
@@ -117,3 +117,4 @@ TestUser51.cert
 /nss-3.122.2-with-nspr-4.38.2.tar.gz
 /nss-3.123.1-with-nspr-4.38.2.tar.gz
 /nss-3.124-with-nspr-4.39.tar.gz
+/nss-3.125-with-nspr-4.39.tar.gz

diff --git a/nss-3.118-ml-dsa-unittests.patch b/nss-3.118-ml-dsa-unittests.patch
index 9afae68..d81134b 100644
--- a/nss-3.118-ml-dsa-unittests.patch
+++ b/nss-3.118-ml-dsa-unittests.patch
@@ -80311,14 +80311,14 @@ new file mode 100644
 diff --git a/gtests/pk11_gtest/pk11_gtest.gyp b/gtests/pk11_gtest/pk11_gtest.gyp
 --- a/gtests/pk11_gtest/pk11_gtest.gyp
 +++ b/gtests/pk11_gtest/pk11_gtest.gyp
-@@ -38,6 +38,7 @@
+@@ -39,6 +39,7 @@
          'pk11_kem_unittest.cc',
          'pk11_key_unittest.cc',
          'pk11_keygen.cc',
 +        'pk11_mldsa_unittest.cc',
          'pk11_module_unittest.cc',
+         'pk11_uri_unittest.cc',
          'pk11_pbe_unittest.cc',
-         'pk11_pbkdf2_unittest.cc',
 diff --git a/gtests/pk11_gtest/pk11_import_unittest.cc b/gtests/pk11_gtest/pk11_import_unittest.cc
 --- a/gtests/pk11_gtest/pk11_import_unittest.cc
 +++ b/gtests/pk11_gtest/pk11_import_unittest.cc

diff --git a/nss.spec b/nss.spec
index 1f3f48b..5a23c5f 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,5 +1,5 @@
-%global nspr_version 4.39
-%global nss_version 3.124.0
+%global nspr_version 4.39.0
+%global nss_version 3.125.0
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
@@ -7,7 +7,7 @@
 %global nss_release %baserelease
 # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when
 # release number between nss and nspr are different.
-%global nspr_release %[%baserelease+0]
+%global nspr_release %[%baserelease+1]
 # only need to update this as we added new
 # algorithms under nss policy control
 %global crypto_policies_version 20240521
@@ -1093,6 +1093,10 @@ fi
 
 
 %changelog
+* Thu Jun 18 2026 Frantisek Krenzelok <fkrenzel@redhat.com> - 3.125.0-1
+- Update NSS to 3.125.0
+- Fix NSPR versioning scheme
+
 * Mon Jun  1 2026 Frantisek Krenzelok <fkrenzel@redhat.com> - 3.124.0-1
 - Update NSS to 3.124.0
 - Remove libcrmf as it is being deprecated and we don't use it.

diff --git a/sources b/sources
index ae07bab..4ecf218 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
 SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06
 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7
 SHA512 (nss-3.118-ml-dsa-test-for-sign-verify-pkcs12_files.tar.xz) = c6440f332703ca9a3351be5a35eac42f24b9c114f54137b95691aa353cc329f0fb7016b689b2f976bc6cff66aa62760067f3226efad665a5252f37294a3d12a6
-SHA512 (nss-3.124-with-nspr-4.39.tar.gz) = a8af03f4f1ca1148e7ec847b8a5a2d6adcb7656c58243b1473bdd7ee0cbc23ad5d36c5bf62be24b7c9d6ce2b472de72013e58c246f5dca8645590093728759e9
+SHA512 (nss-3.125-with-nspr-4.39.tar.gz) = 383929a735dc49f7a75547f83f6cfd8047ed5f20e78b936bc2f34d7c2fc6a036b1c37a9c2c335a49809d702c0fcd8e2b07f5e224dee82b7b152ce53ab9c3f705