Updates the nss family of packages to upstream NSS 3.32 and NSPR 4.16.
For details about new functionality and a list of bugs fixed in this release please see the upstream release notes
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.32_release_notes
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2017-3f11b3237aPlease login to add feedback.
This update has been submitted for testing by ueno.
ueno edited this update.
New build(s):
Removed build(s):
Karma has been reset.
Works. Is needed by FEDORA-2017-4c39f348a8 Can we have a quick push to stable?
works for me, no regressions noted
karma: +1
This update has been pushed to testing.
Works
Works for me. No regressions noted compared to previous version.
no regressions noted
Haven't noticed any regressions.
Works great! LGTM! =)
general functionality seem ok
No regressions noted.
openQA testing indicates this update breaks FreeIPA:
https://openqa.fedoraproject.org/tests/131453 https://openqa.fedoraproject.org/tests/130945
On both runs of the FreeIPA server test, initial server deployment failed. Please do NOT push this stable yet.
The problem seems to be that
/usr/bin/signtoolis no longer present in the nss-tools subpackage. The FreeIPA server install script expects this binary to be available, and dies when it isn't.Looking at the spec, it seems that between 3.31 and 3.32, our packagers decided that
signtoolwas "unsupported", meaning it's now installed to%{_libdir}/nss/unsupported-toolsinstead of/usr/bin. So it is actually still available, but not in the same location.Good catch. It was for https://fedoraproject.org/wiki/Changes/NSSSigntoolDeprecation, which is targeting F27. For F26 and F25, I will revert the change.
ueno edited this update.
New build(s):
Removed build(s):
Karma has been reset.
This update has been submitted for testing by ueno.
LGTM
This update has been pushed to testing.
I noticed that the Firefox release in the stable repos is broken because it's missing this dependency. I updated to test this, subsequently updated to Firefox 55.0.2, and I'm not noticing any issues… probably a good idea to expedite this to stable as soon as possible, as I imagine a lot of people will have broken Firefox upgrades until this makes it in.
no regressions noted
Karma of +3 has reached the stable threshold, please either reenable Autopush or push to stable manually to fix the firefox broken dep ( FEDORA-2017-1d16bf655e ). Thanks.
Seems good
@robatino, no, we need a few more days for testing this update and afaik firefox 55 shouldn't require nspr 4.16. see: https://bodhi.fedoraproject.org/updates/firefox-55.0-6.fc26#comment-645945
I have no idea why this happened. There was actually a buildroot override pulling in nspr-4.16, but it only lasted one day.
sudo dnf update firefox
Problem: cannot install the best update candidate for package firefox-55.0.1-1.fc26.x86_64
- nothing provides nspr >= 4.16.0 needed by firefox-55.0.2-1.fc26.x86_64
@ueno I can also confirm the issue that @robatino and @c72578 noticed with the broken Firefox update… not sure how it happened, but might be good to figure out what went wrong this time to prevent it from happening again in the future.
This needs to be pushed stable ASAP. We cannot rewind the firefox update and broken deps in updates are unacceptable.
@ueno the firefox build was done at Fri, 18 Aug 2017 08:48:28 UTC , which looks like exactly around when you submitted the buildroot override. It also looks like @stransky has just submitted another firefox update which is built back against nspr 4.15.0 again: FEDORA-2017-fa995ae904 . So if that gets karma'ed and pushed rapidly, it should solve the problem.
This update has been submitted for stable by ausil.
This update has been pushed to stable.
Please add this Firefox build to this update - it should go out with nspr 4.16: https://koji.fedoraproject.org/koji/buildinfo?buildID=960827
Ah, I see it's already stable so I'll submit the FF update.