nss: update to 3.117.

Changes:

  • Bug 1992218 - fix memory leak in secasn1decode_unittest.cc.
  • Bug 1988913 - Add OISTE roots.
  • Bug 1976051 - Add runbook for certdata.txt changes.
  • Bug 1991666 - dbtool: close databases before shutdown.
  • Bug 1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates.
  • Bug 1956754 - don’t flush base64 when buffer is null.
  • Bug 1989541 - Set use_pkcs5_pbkd2_params2_only=1 for fuzzing builds.
  • Bug 1989480 - mozilla::pkix: recognize the qcStatements extension for QWACs.
  • Bug 1980465 - Fix a big-endian-problematic cast in zlib calls.
  • Bug 1962321 - Revert removing out/ directory after ossfuzz build.
  • Bug 1988524 - Add Cryptofuzz to OSS-Fuzz build.
  • Bug 1984704 - Add PKCS#11 trust tests.
  • Bug 1983308 - final disable dsa patch cert.sh.
  • Bug 1983320 - ml-dsa: move tls 1.3 to use streaming signatures.
  • Bug 1983320 - ml-dsa: Prep Create a FindOidTagByString function.
  • Bug 1983320 - ml-dsa: softoken changes.
  • Bug 1983320 - ml-dsa: der key decode.
  • Bug 1983320 - ml-dsa: Prep colapse the overuse of keyType outside of pk11wrap and cryptohi.
  • Bug 1983320 - ml-dsa: Prep Create a CreateSignatureAlgorithmID function.

Author: 0-wiz-0

devel/nss/Makefile

@@ -1,10 +1,10 @@
-# $NetBSD: Makefile,v 1.283 2025/09/12 07:26:08 wiz Exp $
+# $NetBSD: Makefile,v 1.284 2025/10/03 15:48:46 wiz Exp $
 #
 # release notes
 # https://firefox-source-docs.mozilla.org/security/nss/releases/index.html
 
 DISTNAME=		nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=		3.116.0
+NSS_RELEASE=		3.117.0
 CATEGORIES=		devel security
 MASTER_SITES=		${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 
@@ -139,7 +139,7 @@ MOD_MINOR_VERSION=	${NSS_RELEASE:S/3.//:C/\.[0-9]*//}
 MOD_PATCH_VERSION=	${NSS_RELEASE:C/[0-9.]*\.//}
 NSS_DIST_DIR_VERSION=	${MOD_MAJOR_VERSION}_${MOD_MINOR_VERSION}_${MOD_PATCH_VERSION}
 
-NSPR_MINIMUM_VERSION=	4.35
+NSPR_MINIMUM_VERSION=	4.37
 
 PKGCONFIG_OVERRIDE=	nss.pc
 

devel/nss/distinfo

@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.197 2025/09/12 07:26:08 wiz Exp $
+$NetBSD: distinfo,v 1.198 2025/10/03 15:48:46 wiz Exp $
 
-BLAKE2s (nss-3.116.tar.gz) = 14c32dd7c5b46fcd8f0221236a25ce83b1aaef9aa32959e18f4b1d2fcf1a7774
-SHA512 (nss-3.116.tar.gz) = 35ce4d077b733bb27a235583a27d085a988e0ac09a8390ce482e037c2fd5724a39044e01865d9a78632bd23fe26db0f5508dc27dc7640b2713c784ce8533639f
-Size (nss-3.116.tar.gz) = 76661970 bytes
+BLAKE2s (nss-3.117.tar.gz) = 1064c3bf57943618c3154dd1c27a049e5d5d878adfbbb315b8f4ed9c65c5c6bf
+SHA512 (nss-3.117.tar.gz) = 12e6eaa67d290fc8146dee2d92017fd481e4969d556870ec4200aab8d2590efe63686ca9cca5cc1b95c7078cc0ab7f1e27e77de5a1a2b75c4f1f3b4b65c700fe
+Size (nss-3.117.tar.gz) = 76684970 bytes
 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1
 SHA1 (patch-me) = ffb5f119764c158c0bd789bd18fc77c61f2e9d2b
 SHA1 (patch-mf) = 40e58385fb6f944f463bf00b9aad72bc4ea229d0