Closed Bug 1724869 Opened 4 months ago Closed 3 months ago

Upgrade Firefox 93 to use NSS 3.70

Categories

(Core :: Security: PSM, task, P1)

Firefox 93
task

Tracking

()

RESOLVED FIXED
93 Branch
Tracking Status
firefox93 --- fixed

People

(Reporter: beurdouche, Assigned: beurdouche)

Details

(Whiteboard: [nss-fx])

Attachments

(4 files)

No description provided.
Pushed by bbeurdouche@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/8dc07e66f4da
land NSS 56238350052a UPGRADE_NSS_RELEASE, r=djackson

2021-08-17 Robert Relyea <rrelyea@redhat.com>

* lib/softoken/lowpbe.c:
Bug 1726022 Cache additional PBE entries

Firefox password manager is slow to load (22s for 361 passwords on
an i7), using 100% CPU and causing laptop fans to spin up

Possible solution based on increasing the number of cache entries
used by the PKCS5v2 values as the current code thrashes the cache as
we use 2 pbe's per read operation.

This patch is tested for correctness, but not fixing the issue. New
test cases are needed.

[fe82761e35aa] [tip]
2021-08-26  Benjamin Beurdouche  <bbeurdouche@mozilla.com>

	* lib/ssl/tls13con.c:
	Backed out changeset fae49696d374
	[e55700ee052e] [NSS_3_70_BETA1] <NSS_3_70_BRANCH>

	* tests/tlsfuzzer/config.json.in, tests/tlsfuzzer/tlsfuzzer.sh:
	Backed out changeset 7c3a0a99f7fa
	[e79531c04e6b] <NSS_3_70_BRANCH>

	* automation/abi-check/previous-nss-release, lib/nss/nss.h,
	lib/softoken/softkver.h, lib/util/nssutil.h:
	Set version numbers to 3.70 Beta
	[cc0d44da6a0e]

2021-08-26  John M. Schanck  <jschanck@mozilla.com>

	* tests/tlsfuzzer/config.json.in, tests/tlsfuzzer/tlsfuzzer.sh:
	Bug 1662515 - Enable tlsfuzzer/test-tls13-zero-content-type.py
	r=bbeurdouche,djackson

	[7c3a0a99f7fa]

2021-08-26  Benjamin Beurdouche  <bbeurdouche@mozilla.com>

	* lib/ssl/tls13con.c:
	Bug 1662515 - Fix incorrect alert after successful decryption
	r=djackson

	[fae49696d374]

2021-08-24  Robert Relyea  <rrelyea@redhat.com>

	* tests/cert/cert.sh, tests/common/init.sh, tests/sdr/sdr.sh:
	Bug 1726022 Update test case to verify fix.

	Updated test cases to verify pbe caching fix. NOTE: putting
	passwords on databases are key to reproducing the original issue.

	[ff19b674c468]

2021-08-24  John M. Schanck  <jschanck@mozilla.com>

	* gtests/ssl_gtest/tls_ech_unittest.cc:
	Bug 1714579 - Explicitly disable downgrade check in
	TlsConnectStreamTls13.EchOuterWith12Max r=nss-reviewers,bbeurdouche

	Depends on D123535

	[608fd450d499]

	* gtests/ssl_gtest/ssl_version_unittest.cc:
	Bug 1714579 - Explicitly disable downgrade check in
	TlsConnectTest.DisableFalseStartOnFallback r=nss-
	reviewers,bbeurdouche

	Depends on D122988

	[7bd94de62243]

2021-08-24  Benjamin Beurdouche  <bbeurdouche@mozilla.com>

	* lib/util/nssb64d.c:
	Formatting for lib/util
	[db95b15ce1ff]

2021-08-24  John M. Schanck  <jschanck@mozilla.com>

	* lib/util/nssb64d.c:
	Bug 1681975 - Avoid using a lookup table in nssb64d r=bbeurdouche

	[d454db6ad1fb]

2021-08-24  Benjamin Beurdouche  <bbeurdouche@mozilla.com>

	* lib/freebl/sha512.c:
	Bug 1724629 - Use HW accelerated SHA2 on AArch64 Big Endian.
	r=jschanck

	[7e31b8f7f741]

2021-08-24  John M. Schanck  <jschanck@mozilla.com>

	* lib/ssl/sslsock.c:
	Bug 1714579 Change default value of enableHelloDowngradeCheck to
	true r=mt

	Firefox sets enableHelloDowngradeCheck to true by default, as of
	[1576790](https://bugzilla.mozilla.org/show_bug.cgi?id=1576790). We
	have a two year old open issue noting some issues with that
	[1590870](https://bugzilla.mozilla.org/show_bug.cgi?id=1590870), but
	I see no reason not to update the default in NSS.

	[52137aa125f5]

2021-08-24  Benjamin Beurdouche  <bbeurdouche@mozilla.com>

	* gtests/pk11_gtest/pk11_hpke_unittest.cc:
	Formatting for gtests/pk11_gtest/pk11_hpke_unittest.cc r=jschanck

	The clang-format target was failing.
	https://treeherder.mozilla.org/logviewer?job_id=348100377&repo=nss-
	try

	[36bc1c231bf6]
Pushed by bbeurdouche@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/391e84851128
land NSS NSS_3_70_BETA1 UPGRADE_NSS_RELEASE, r=jschanck

2021-09-04 Benjamin Beurdouche <bbeurdouche@mozilla.com>

* lib/nss/nss.h, lib/softoken/softkver.h, lib/util/nssutil.h:
Set version numbers to 3.70 final
[c4e7630cbfec] [NSS_3_70_RTM] <NSS_3_70_BRANCH>

* doc/rst/releases/index.rst, doc/rst/releases/nss_3_70.rst:
Documentation: release notes for NSS 3.70
[a86217c0ce0d] <NSS_3_70_BRANCH>

2021-08-31 Benjamin Beurdouche <bbeurdouche@mozilla.com>

* doc/rst/releases/nss_3_69_1.rst:
Release notes for NSS 3.69.1
[3160cfcbec3b] <NSS_3_70_BRANCH>

2021-08-26 Benjamin Beurdouche <bbeurdouche@mozilla.com>

* .hgtags:
Added tag NSS_3_70_BETA1 for changeset e55700ee052e
[8a2ba28dd68a] <NSS_3_70_BRANCH>
Pushed by bbeurdouche@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/88bc9cf72d60
land NSS NSS_3_70_RTM UPGRADE_NSS_RELEASE, r=beurdouche DONTBUILD
Keywords: leave-open
Status: ASSIGNED → RESOLVED
Closed: 3 months ago
Resolution: --- → FIXED
Target Milestone: --- → 93 Branch
You need to log in before you can comment on or make changes to this bug.