Red Hat Bugzilla – Bug 949845
[RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue
Last modified: 2013-08-05 11:55:11 EDT
This bug has been copied from bug #918948 and has been proposed to be backported to 5.9 z-stream (EUS).
Code review changes at https://bugzilla.redhat.com/show_bug.cgi?id=918948#c10 I'll attach next deltas relative to what has already been pushed to git.
That code review done for rhel-5.10 is applicable here.
Created attachment 733416 [details] Changes requested from the code review
Created attachment 733417 [details] Changes requested from the code review V2 plus other stuff I noticed Revised previous to drop the sharedb versions ot the blank db's and the pkcs11.txt config file from the sources list as we aren't installing them.
I should remove the BuildRequires: sqlite-devel line.
Comment on attachment 733417 [details] Changes requested from the code review V2 plus other stuff I noticed r- This doesn't turn off sqlite, it builds an NSS with it's own copy of sqlite, which will then either 1) overwrite the system sqlite (bad), or 2) won't work because it can't find the symbols it needs in the system sqlite library (also bad). bob
Created attachment 735050 [details] changes requested from the code review V3
Created attachment 738161 [details] changes to rebase from nss-3.13.6-2 to nss-3.14.3-3
Comment on attachment 738161 [details] changes to rebase from nss-3.13.6-2 to nss-3.14.3-3 r+ let me review the sqlite patch as well, but the spec looks goo.
Comment on attachment 738161 [details] changes to rebase from nss-3.13.6-2 to nss-3.14.3-3 ok, it's there in the big diff... r+ stands, it's ready to go. bob
Created attachment 738708 [details] use old sqlite api's on rhel-5 if at all
Created attachment 738710 [details] ignore system sqlite as it can't be supported on rhel-5
Created attachment 747462 [details] Required RHEL-5 only changes to add& set NO_FORK_CHECK to keep ABI semantics
Created attachment 747464 [details] Required RHEL-5 only changes to add& set NO_FORK_CHECK to keep ABI semantics Same as previous version but needed to fix a couple of incorrect comments.
Comment on attachment 747464 [details] Required RHEL-5 only changes to add& set NO_FORK_CHECK to keep ABI semantics r+ Though I need a few questions answered: What is nss-nochktest.patch. clearly you meant to remove it because it's in the comments, but I don't think it's related to fork check. Where is the actual fork check patch. the diff is just the .spec file. bob
OK, the diff button didn't show the forkcheck patch file, but it's there. r+ stands.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2013-1135.html