1520826 - Upgrade Firefox 60 ESR to use NSS 3.36.7

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement, P1)

Description

[J.C. Jones [:jcj] (he/they)]

Tracking NSS 3.36.7 for Firefox 60 ESR, tag will be NSS_3_36_7_RTM.

These fixes do not require uplift to Beta 65 (see the dependent bugs for reasons). But if that's a non-skippable-step, we can also cut an NSS 3.41 dot release for beta.

Comment 1

[J.C. Jones [:jcj] (he/they)]

NSS_3_36_7_RTM will be released tomorrow, 19 Jan.

Comment 2

[J.C. Jones [:jcj] (he/they)]

Attachment: Update to 3_36_7_RTM

[ESR Uplift Approval Request]

If this is not a sec:{high,crit} bug, please state case for ESR consideration: Thunderbird has requested uplift of these crash fixes.

User impact if declined: More crashes.

Fix Landed on Version: 3.42

Risk to taking this patch: Low

Why is the change risky/not risky? (and alternatives if risky): These are new null checks for code paths that some Thunderbird users hit more than others.

String or UUID changes made by this patch: None

Comment 3

[J.C. Jones [:jcj] (he/they)]

Release notes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notes
Sources: https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_36_7_RTM/src/
Tag: NSS_3_36_7_RTM

Comment 4

[Julien Cristau [:jcristau]]

Comment on attachment 9037821 [details]
Update to 3_36_7_RTM

nss update for 60.5esr

Comment 5

[Julien Cristau [:jcristau]]

https://hg.mozilla.org/releases/mozilla-esr60/rev/c13c0781ad99