1770337 - Upgrade Firefox 101 to use NSS 3.78.1

Status: RESOLVED FIXED

(Core :: Security: PSM, task, P1)

Comment 1

[Dennis Jackson]

Attachment: Bug 1770337 - land NSS NSS_3_78_1_RTM UPGRADE_NSS_RELEASE, r=#nss-reviewers

2022-05-20 Dennis Jackson <[e-mail]>

* doc/rst/releases/index.rst, doc/rst/releases/nss_3_78_1.rst:
Release notes for NSS 3.78.1
[1892ac0bb68d] [NSS_3_78_1_RTM] <NSS_3_78_BRANCH>

2022-05-16 Dennis Jackson <[e-mail]>

* cmd/smimetools/cmsutil.c, lib/smime/cmsdigest.c:
Bug 1767590 - Initialize pointers passed to
NSS_CMSDigestContext_FinishMultiple r=#nss-reviewers,kaie

 As NSS_CMSDigestContext_FinishMultiple may leave its outparam
unchanged when it returns SECSuccess, ensure that we set the value
to NULL prior to invoking it. If this has happened because data was
missing and hence the digest was never updated, the secasn1d parser
will notice the missing child and raise a decodeError.

[f90a530a6606] <NSS_3_78_BRANCH>

2022-05-19 John M. Schanck <[e-mail]>

* lib/ckfw/wrap.c:
Bug 1766978 - improve error handling after
nssCKFWInstance_CreateObjectHandle. r=djackson

[1c30ba79a5f8] <NSS_3_78_BRANCH>

2022-05-20 Dennis Jackson <[e-mail]>

* lib/nss/nss.h, lib/softoken/softkver.h, lib/util/nssutil.h:
Set version numbers to 3.78.1 final
[0d9296f60e29] <NSS_3_78_BRANCH>

2022-04-28 Dennis Jackson <[e-mail]>

* .hgtags:
Added tag NSS_3_78_RTM for changeset 30fe50c80e23
[ccf9be30b3b2] <NSS_3_78_BRANCH>

Comment 2

[Dennis Jackson]

Comment on attachment 9277455 [details]
Bug 1770337 - land NSS NSS_3_78_1_RTM UPGRADE_NSS_RELEASE, r=#nss-reviewers

Note: See approvals / requests in parent bugs.

Beta/Release Uplift Approval Request

• User impact if declined: This patch fixes a sec-high memory safety bug in NSS which impacts Firefox users via addon signatures and also a threading issue causing numerous crashes.
• Is this code covered by automated tests?: Yes
• Has the fix been verified in Nightly?: No
• Needs manual test from QE?: No
• If yes, steps to reproduce:
• List of other uplifts needed: None
• Risk to taking this patch: Low
• Why is the change risky/not risky? (and alternatives if risky): The sec-high fixes are in a codepath which is not used during normal addon verification and is only triggered when given malicious inputs. The threading fix is considered high-confidence.
• String changes made/needed:
• Is Android affected?: Yes

Comment 3

[Ryan VanderMeulen [:RyanVM]]

Comment on attachment 9277455 [details]
Bug 1770337 - land NSS NSS_3_78_1_RTM UPGRADE_NSS_RELEASE, r=#nss-reviewers

Approved for 101.0rc1.

Comment 4

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/releases/mozilla-beta/rev/5c7f45fbad67