1637369 - Upgrade Firefox 77 to NSS 3.52.1

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement, P1)

Description

[J.C. Jones [:jcj] (he/they)]

[Tracking Requested - why for this release]:

This security bug tracks the release of NSS 3.52.1, a security release of NSS 3.52, destined for Firefox 77. When ready, the tag will be NSS_3_52_1_RTM.

This release will fix security bugs being disclosed on or after 2 June 2020, co-incident with ESR 68.9 and Firefox 77.

[Tracking Requested - why for this release]:
This will fix one or more serious vulnerabilities in Firefox cryptography code that affect Firefox 77. See the bugs for their individual sec approvals.

Comment 1

[J.C. Jones [:jcj] (he/they)]

Attachment: Bug 1637369 - land NSS NSS_3_52_1_RTM UPGRADE_NSS_RELEASE, r=kjacobs

2020-05-19 J.C. Jones <[e-mail]>

* lib/nss/nss.h, lib/softoken/softkver.h, lib/util/nssutil.h:
Set version numbers to 3.52.1 final
[83d296f12b3e] [NSS_3_52_1_RTM] <NSS_3_52_BRANCH>

2020-04-23 Robert Relyea <[e-mail]>

* lib/freebl/dsa.c:
Bug 1631576 - Force a fixed length for DSA exponentiation
r=pereida,bbrumley

[a5a9937948c8] <NSS_3_52_BRANCH>

2020-05-01 J.C. Jones <[e-mail]>

* .hgtags:
Added tag NSS_3_52_RTM for changeset befc258c4336
[92f61e8d8203] <NSS_3_52_BRANCH>

Comment 2

[J.C. Jones [:jcj] (he/they)]

Comment on attachment 9150286 [details]
Bug 1637369 - land NSS NSS_3_52_1_RTM UPGRADE_NSS_RELEASE, r=kjacobs

Beta/Release Uplift Approval Request

• User impact if declined: sec-high
• Is this code covered by automated tests?: Yes
• Has the fix been verified in Nightly?: No
• Needs manual test from QE?: No
• If yes, steps to reproduce:
• List of other uplifts needed: None
• Risk to taking this patch: Medium
• Why is the change risky/not risky? (and alternatives if risky): There are no low-risk crypto algorithm changes. There's reasonable coverage of the changes made as to correctness, and analysis indicates the bug in question is resolved.
• String changes made/needed: n/a

Comment 3

[Ryan VanderMeulen [:RyanVM]]

Comment on attachment 9150286 [details]
Bug 1637369 - land NSS NSS_3_52_1_RTM UPGRADE_NSS_RELEASE, r=kjacobs

Approved for 77.0b8

Comment 4

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/releases/mozilla-beta/rev/d64b298d08bc3847778e99a510cc341a7f4dac09