1445731 - Upgrade Firefox 61 to use NSS 3.37

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement, P1)

Description

[J.C. Jones [:jcj] (he/him)]

Tracking NSS 3.37 for Firefox 61.

Comment 1

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/4ea43e2a1cfe
land NSS 1053cc7b45a2 UPGRADE_NSS_RELEASE, r=me

Comment 2

[Andreea Pavel [:apavel]]

Backed out for build bustages at build bustages at /src/security/nss/lib/freebl/verified/Hacl_Poly1305_32

Push that caused the failures: https://treeherder.mozilla.org/#/jobs?repo=mozilla-inbound&revision=4ea43e2a1cfe95e606cfe4ff358cd61fc4cb3596

Failure log: https://treeherder.mozilla.org/logviewer.html#?job_id=168044679&repo=mozilla-inbound

Backout: https://hg.mozilla.org/integration/mozilla-inbound/rev/fdf32a9d5f21464f566398e9c093176ff3bd4f90

Comment 3

[Franziskus Kiefer [:franziskus]]

The issue from bug 1441219 should be resolved (NSS CI doesn't have non-intel 32-bit machines, thus no guarantees/tests).

Comment 4

[J.C. Jones [:jcj] (he/him)]

Thanks. Fix went in https://hg.mozilla.org/projects/nss/rev/f0d4789c89169de0641b8b4e8b7cd2cec015d4dd , I'm preparing a new uplift.

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/30b30a7267c7
land NSS f0d4789c8916 UPGRADE_NSS_RELEASE, r=me

Comment 7

[Cristian Brindusan [:cbrindusan]]

https://hg.mozilla.org/mozilla-central/rev/30b30a7267c7

Comment 8

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/8072ac80797b
land NSS c5dffd6269ea UPGRADE_NSS_RELEASE, r=me

Comment 9

[Tiberius Oros[:tiberius_oros]]

https://hg.mozilla.org/mozilla-central/rev/8072ac80797b

Comment 10

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/2fdd9bac3094
land NSS 1bde21f90bd1 UPGRADE_NSS_RELEASE, r=me

Comment 11

[Raul Gurzau (:RaulG)]

https://hg.mozilla.org/mozilla-central/rev/2fdd9bac3094

Comment 12

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/f4f472ea0a55
land NSS dedf5290c679 UPGRADE_NSS_RELEASE, r=me

Comment 13

[Bogdan Tara[:bogdan_tara | bogdant]]

https://hg.mozilla.org/mozilla-central/rev/f4f472ea0a55

Comment 14

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/280491d65d24
land NSS 6ae3ab8a1e7b UPGRADE_NSS_RELEASE, r=me

Comment 15

[Narcis Beleuzu [:NarcisB]]

https://hg.mozilla.org/mozilla-central/rev/280491d65d24

Comment 16

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/f51236743c91
land NSS 954032211d2d UPGRADE_NSS_RELEASE, r=me

Comment 17

[Cosmin Sabou [:CosminS]]

https://hg.mozilla.org/mozilla-central/rev/f51236743c91

Comment 18

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/0037f2516d10
land NSS 2eefd697d661 UPGRADE_NSS_RELEASE, r=me

Comment 19

[Stefan Hindli [:stefan_hindli]]

https://hg.mozilla.org/mozilla-central/rev/0037f2516d10

Comment 20

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/c6757ad801fe
land NSS c1a4035420c3 UPGRADE_NSS_RELEASE, r=me

Comment 21

[Stefan Hindli [:stefan_hindli]]

https://hg.mozilla.org/mozilla-central/rev/c6757ad801fe

Comment 22

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/dd2d50a70a7e
land NSS 3e452651e282 UPGRADE_NSS_RELEASE, r=me

Comment 23

[Cosmin Sabou [:CosminS]]

https://hg.mozilla.org/mozilla-central/rev/dd2d50a70a7e

Comment 24

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/cf1d0f4340ef
land NSS NSS_3_37_BETA2 UPGRADE_NSS_RELEASE, r=me

Comment 25

[Stefan Hindli [:stefan_hindli]]

https://hg.mozilla.org/mozilla-central/rev/cf1d0f4340ef

Comment 26

[Kai Engert (:KaiE:)]

When uplifting the final 3.37 version, please remember to update old-configure.in

    AM_PATH_NSS(3.36, [MOZ_SYSTEM_NSS=1], [AC_MSG_ERROR([you don't have NSS installed or your version is too old])])

should be changed to

    AM_PATH_NSS(3.37, [MOZ_SYSTEM_NSS=1], [AC_MSG_ERROR([you don't have NSS installed or your version is too old])])

Comment 27

[J.C. Jones [:jcj] (he/him)]

(In reply to Kai Engert (:kaie:) from comment #26)
> When uplifting the final 3.37 version, please remember to update
> old-configure.in
> 
>     AM_PATH_NSS(3.36, [MOZ_SYSTEM_NSS=1], [AC_MSG_ERROR([you don't have NSS
> installed or your version is too old])])
> 
> should be changed to
> 
>     AM_PATH_NSS(3.37, [MOZ_SYSTEM_NSS=1], [AC_MSG_ERROR([you don't have NSS
> installed or your version is too old])])

I presume this needs to happen on every release; we should add it to https://wiki.mozilla.org/NSS/Release_Management#Upgrading_mozilla-central

Comment 28

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/b95fbd8db183
land NSS NSS_3_37_RTM UPGRADE_NSS_RELEASE, r=me

Comment 29

[Cristian Brindusan [:cbrindusan]]

https://hg.mozilla.org/mozilla-central/rev/b95fbd8db183