1296266 - Upgrade Firefox 51 to NSS 3.27

Status: RESOLVED FIXED

(Core :: Security: PSM, defect, P1)

Description

[Kai Engert (:KaiE:)]

Upgrade Firefox 51 to NSS 3.27, which is currently being developed.

We should start by landing a beta tag into mozilla-central for testing, and use this bug to track further uplifts, until we're ready to land 3.27 RTM.

Comment 1

[Franziskus Kiefer [:franziskus]]

https://treeherder.mozilla.org/#/jobs?repo=try&revision=fa71813d904d

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/b671b4869b10
Land NSS_3_27_BETA1, r=kaie

Comment 3

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/b671b4869b10

Comment 4

[Liz Henry (:lizzard) (relman/hg->git project)]

Seems like a good idea to track for 51.

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/4044c6fd7e48
Land NSS_3_27_BETA2, r=me

Comment 6

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/4044c6fd7e48

Comment 7

[Kai Engert (:KaiE:)]

Tagged NSS_3_27_BETA3 and started a try build:
https://treeherder.mozilla.org/#/jobs?repo=try&revision=0a08925056fc

Comment 8

[Kai Engert (:KaiE:)]

(In reply to Kai Engert (:kaie) from comment #7)
> Tagged NSS_3_27_BETA3 and started a try build:
> https://treeherder.mozilla.org/#/jobs?repo=try&revision=0a08925056fc

I don't see any security related failures, only some intermittent test failures.
Will proceed to land with r=ttaubert from IRC.

Comment 9

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/979e180c5045
NSS_3_27_BETA3, r=ttaubert

Comment 10

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/979e180c5045

Comment 11

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/d2b50233313c
NSS 3.27 tip d9f7136f2ae3, r=ttaubert

Comment 12

[Pulsebot]

Backout by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/6695283842f0
Backed out changeset d2b50233313c - h2 breakage

Comment 13

[Franziskus Kiefer [:franziskus]]

https://treeherder.mozilla.org/#/jobs?repo=try&revision=44fbdcc69ba1

Comment 14

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/a5183ca6cbad
NSS 3.27 tip d9f7136f2ae3, r=ttaubert

Comment 15

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

https://hg.mozilla.org/mozilla-central/rev/a5183ca6cbad

Comment 16

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/aca64a177c44
land NSS_3_27_BETA4, r=franziskus

Comment 18

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/aca64a177c44

Comment 19

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/aca64a177c44

Comment 20

[Franziskus Kiefer [:franziskus]]

Attachment: upgrade-to-327rtm

Aurora 51 uses a beta version of NSS.
We must upgrade it to the final release tag.
This is a placeholder attachment, which lists the command used to uplift the RTM tag.

Comment 21

[Kai Engert (:KaiE:)]

When landing a new RTM tag, we also must update the configure files to require this newer version.

Comment 22

[Kai Engert (:KaiE:)]

(In reply to Kai Engert (:kaie) from comment #21)
> When landing a new RTM tag, we also must update the configure files to
> require this newer version.

I see this is already done, old-configure.in alraedy requires NSS 3.27

Comment 23

[Kai Engert (:KaiE:)]

Marking bug as fixed on mozilla-central.

m-c 52 has already been updated to a more recent NSS development snapshot, which includes all changes from the NSS 3.27 release.

Comment 24

[Ritu Kothari (:ritu) (Inactive, please n-i to RyanVM, jcristau, or pascal)]

Comment on attachment 8794787 [details]
upgrade-to-327rtm

NSS update, Aurora51+

Comment 25

[Kai Engert (:KaiE:)]

https://hg.mozilla.org/releases/mozilla-aurora/rev/a19681a469f93b621ad1b8e8410cbe67e54b9b3c