1724869 - Upgrade Firefox 93 to use NSS 3.70

Status: RESOLVED FIXED

(Core :: Security: PSM, task, P1)

Comment 1

[Benjamin Beurdouche [:beurdouche]]

Attachment: Bug 1724869 - land NSS 56238350052a UPGRADE_NSS_RELEASE, r=djackson

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/8dc07e66f4da
land NSS 56238350052a UPGRADE_NSS_RELEASE, r=djackson

Comment 3

[Andreea Pavel [:apavel]]

https://hg.mozilla.org/mozilla-central/rev/8dc07e66f4da

Comment 4

[Benjamin Beurdouche [:beurdouche]]

Attachment: Bug 1724869 - land NSS fe82761e35aa UPGRADE_NSS_RELEASE, r=djackson

2021-08-17 Robert Relyea <[e-mail]>

* lib/softoken/lowpbe.c:
Bug 1726022 Cache additional PBE entries

Firefox password manager is slow to load (22s for 361 passwords on
an i7), using 100% CPU and causing laptop fans to spin up

Possible solution based on increasing the number of cache entries
used by the PKCS5v2 values as the current code thrashes the cache as
we use 2 pbe's per read operation.

This patch is tested for correctness, but not fixing the issue. New
test cases are needed.

[fe82761e35aa] [tip]

Comment 5

[Sandor Molnar[:smolnar]]

https://hg.mozilla.org/mozilla-central/rev/095827942660

Comment 6

[Benjamin Beurdouche [:beurdouche]]

Attachment: Bug 1724869 - land NSS NSS_3_70_BETA1 UPGRADE_NSS_RELEASE, r=jschanck

2021-08-26  Benjamin Beurdouche  <[e-mail]>

	* lib/ssl/tls13con.c:
	Backed out changeset fae49696d374
	[e55700ee052e] [NSS_3_70_BETA1] <NSS_3_70_BRANCH>

	* tests/tlsfuzzer/config.json.in, tests/tlsfuzzer/tlsfuzzer.sh:
	Backed out changeset 7c3a0a99f7fa
	[e79531c04e6b] <NSS_3_70_BRANCH>

	* automation/abi-check/previous-nss-release, lib/nss/nss.h,
	lib/softoken/softkver.h, lib/util/nssutil.h:
	Set version numbers to 3.70 Beta
	[cc0d44da6a0e]

2021-08-26  John M. Schanck  <[e-mail]>

	* tests/tlsfuzzer/config.json.in, tests/tlsfuzzer/tlsfuzzer.sh:
	Bug 1662515 - Enable tlsfuzzer/test-tls13-zero-content-type.py
	r=bbeurdouche,djackson

	[7c3a0a99f7fa]

2021-08-26  Benjamin Beurdouche  <[e-mail]>

	* lib/ssl/tls13con.c:
	Bug 1662515 - Fix incorrect alert after successful decryption
	r=djackson

	[fae49696d374]

2021-08-24  Robert Relyea  <[e-mail]>

	* tests/cert/cert.sh, tests/common/init.sh, tests/sdr/sdr.sh:
	Bug 1726022 Update test case to verify fix.

	Updated test cases to verify pbe caching fix. NOTE: putting
	passwords on databases are key to reproducing the original issue.

	[ff19b674c468]

2021-08-24  John M. Schanck  <[e-mail]>

	* gtests/ssl_gtest/tls_ech_unittest.cc:
	Bug 1714579 - Explicitly disable downgrade check in
	TlsConnectStreamTls13.EchOuterWith12Max r=nss-reviewers,bbeurdouche

	Depends on D123535

	[608fd450d499]

	* gtests/ssl_gtest/ssl_version_unittest.cc:
	Bug 1714579 - Explicitly disable downgrade check in
	TlsConnectTest.DisableFalseStartOnFallback r=nss-
	reviewers,bbeurdouche

	Depends on D122988

	[7bd94de62243]

2021-08-24  Benjamin Beurdouche  <[e-mail]>

	* lib/util/nssb64d.c:
	Formatting for lib/util
	[db95b15ce1ff]

2021-08-24  John M. Schanck  <[e-mail]>

	* lib/util/nssb64d.c:
	Bug 1681975 - Avoid using a lookup table in nssb64d r=bbeurdouche

	[d454db6ad1fb]

2021-08-24  Benjamin Beurdouche  <[e-mail]>

	* lib/freebl/sha512.c:
	Bug 1724629 - Use HW accelerated SHA2 on AArch64 Big Endian.
	r=jschanck

	[7e31b8f7f741]

2021-08-24  John M. Schanck  <[e-mail]>

	* lib/ssl/sslsock.c:
	Bug 1714579 Change default value of enableHelloDowngradeCheck to
	true r=mt

	Firefox sets enableHelloDowngradeCheck to true by default, as of
	[1576790](https://bugzilla.mozilla.org/show_bug.cgi?id=1576790). We
	have a two year old open issue noting some issues with that
	[1590870](https://bugzilla.mozilla.org/show_bug.cgi?id=1590870), but
	I see no reason not to update the default in NSS.

	[52137aa125f5]

2021-08-24  Benjamin Beurdouche  <[e-mail]>

	* gtests/pk11_gtest/pk11_hpke_unittest.cc:
	Formatting for gtests/pk11_gtest/pk11_hpke_unittest.cc r=jschanck

	The clang-format target was failing.
	https://treeherder.mozilla.org/logviewer?job_id=348100377&repo=nss-
	try

	[36bc1c231bf6]

Comment 7

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/391e84851128
land NSS NSS_3_70_BETA1 UPGRADE_NSS_RELEASE, r=jschanck

Comment 8

[Cristian Brindusan [:cbrindusan]]

https://hg.mozilla.org/mozilla-central/rev/391e84851128

Comment 9

[Benjamin Beurdouche [:beurdouche]]

Attachment: Bug 1724869 - land NSS NSS_3_70_RTM UPGRADE_NSS_RELEASE, r=beurdouche

2021-09-04 Benjamin Beurdouche <[e-mail]>

* lib/nss/nss.h, lib/softoken/softkver.h, lib/util/nssutil.h:
Set version numbers to 3.70 final
[c4e7630cbfec] [NSS_3_70_RTM] <NSS_3_70_BRANCH>

* doc/rst/releases/index.rst, doc/rst/releases/nss_3_70.rst:
Documentation: release notes for NSS 3.70
[a86217c0ce0d] <NSS_3_70_BRANCH>

2021-08-31 Benjamin Beurdouche <[e-mail]>

* doc/rst/releases/nss_3_69_1.rst:
Release notes for NSS 3.69.1
[3160cfcbec3b] <NSS_3_70_BRANCH>

2021-08-26 Benjamin Beurdouche <[e-mail]>

* .hgtags:
Added tag NSS_3_70_BETA1 for changeset e55700ee052e
[8a2ba28dd68a] <NSS_3_70_BRANCH>

Comment 10

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/88bc9cf72d60
land NSS NSS_3_70_RTM UPGRADE_NSS_RELEASE, r=beurdouche DONTBUILD

Comment 11

[Cristina Cozmuta (:CrissCozmuta)]

https://hg.mozilla.org/mozilla-central/rev/88bc9cf72d60