Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 29 Jan 2020 05:35:11 +0100
From:      Jan Beich <jbeich@FreeBSD.org>
To:        Matthias Andree <matthias.andree@tu-dortmund.de>
Cc:        svn-ports-head@freebsd.org, Glen Barber <gjb@FreeBSD.org>, svn-ports-all@freebsd.org, Renato Botelho <garga@FreeBSD.org>, ports-committers@freebsd.org
Subject:   Re: svn commit: r524147 - in head/security: ca_root_nss nss
Message-ID:  <y2tq-dgn4-wny@FreeBSD.org>
In-Reply-To: <6130DF4A-9A8A-4175-B79F-6DAAB63A8872@tu-dortmund.de> (Matthias Andree's message of "Tue, 28 Jan 2020 16:43:15 %2B0000")
References:  <202001260020.00Q0K1cG087750@repo.freebsd.org> <35c29ce8-67ab-61ea-b895-f70d2b6044fa@FreeBSD.org> <a768-bvhm-wny@FreeBSD.org> <ebed3539-1691-db15-553a-be0e107cd5fc@tu-dortmund.de> <1rrk-jzz9-wny@FreeBSD.org> <6130DF4A-9A8A-4175-B79F-6DAAB63A8872@tu-dortmund.de>

next in thread | previous in thread | raw e-mail | index | archive | help
Matthias Andree <matthias.andree@tu-dortmund.de> writes:

> Am January 27, 2020 10:28:42 PM UTC schrieb Jan Beich <jbeich@FreeBSD.org>:
>>Matthias Andree <matthias.andree@tu-dortmund.de> writes:
>>
>>> Am 27.01.20 um 19:32 schrieb Jan Beich:
>>>
>>>> Renato Botelho <garga@FreeBSD.org> writes:
>>>> 
>>>>> On 25/01/20 21:20, Jan Beich wrote:
>>>>>
>>>>>> Author: jbeich
>>>>>> Date: Sun Jan 26 00:20:01 2020
>>>>>> New Revision: 524147
>>>>>> URL: https://svnweb.freebsd.org/changeset/ports/524147
>>>>>> Log:
>>>>>>    security/nss: update to 3.49.2
>>>>>>       Changes:
>>>>>>
>>https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.49.2_release_notes
>>>>>>   
>>Changes:	https://hg.mozilla.org/projects/nss/shortlog/NSS_3_49_2_RTM
>>>>>>    ABI:		https://abi-laboratory.pro/tracker/timeline/nss/
>>>>>>    Reported by:	Repology
>>>>>
>>>>> After this change it started failing to build on 11.3-STABLE armv6
>>>>> with the following error:
>>>> [...]
>>>>> In file included from gcm-arm32-neon.c:16:
>>>>> /nxb-bin/usr/lib/clang/8.0.1/include/arm_neon.h:28:2: error: "NEON
>>>>> support not enabled"
>>>>> #error "NEON support not enabled"
>>>>>  ^
>>>>> 1 error generated.
>>>> 
>>>> Needs to be reported upstream. Only Tier1 architectures are critical
>>>> enough to delay or block updates.
>>>> 
>>>
>>> Jan, the upgrade isn't marked security, why the rush?
>>
>>Agree but only after checking upstream commits. Mozilla often delays
>>advisories for bundled libraries under the veil of "responsible
>>disclosure"
>>to align with Firefox releases.
>>
>>Note, Firefox 73 which should have RC1 on 2020-02-04 (1 week from now)
>>will require NSS 3.49.2.
>
> Same story, I build each upstream release on head/ half a dozen times
> because we package RCs without marking them so. Why the rush?

I've explained in https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=214070

Downstream builds are frequently looked down for being out-of-date,
having weird configuration and non-upstreamed patches.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?y2tq-dgn4-wny>