1353740 - Upgrade Firefox 53 to NSS 3.29.5

Status: RESOLVED FIXED

(Core :: Security: PSM, defect)

Description

[Franziskus Kiefer [:franziskus]]

Attachment: upgrade to 3.29.4

This NSS point release fixes bug 1344380 and bug 1345089.

Comment 1

[Liz Henry (:lizzard) (relman/hg->git project)]

Comment on attachment 8854871 [details]
upgrade to 3.29.4

NSS upgrade, ok for beta 53.

Comment 2

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/releases/mozilla-beta/rev/0a5c564fe17e

Comment 3

[Kai Engert [:KaiE:]]

The 3.29.4 release tag contains a mistake. It was created for a snapshot that still identifies itself as the older version 3.29.3

Because old-configure.in was changed to require version 3.29.4, I don't understand why the build process succeeded. Maybe that check is only active when building with an external NSS.

I would like to create an updated NSS release, that correctly self-identifies. Since the NSS 3.29.4 release archive has already been uploaded to the download, I wonder if it's sufficient to simply replace the already-released file. I wonder if it's better if we skip 3.29.4, and instead release a corrected 3.29.5 ?

Comment 4

[Kai Engert [:KaiE:]]

Franziskus agreed on IRC that we skip version 3.29.4 and remove the already released source archives.
Instead we'll release NSS 3.29.5

I'll handle that, and I'll reuse the approval flags from this bug.

Comment 5

[Kai Engert [:KaiE:]]

Ryan will land the 3.29.5 version number fix.

Comment 6

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/releases/mozilla-beta/rev/1e864c7e0023