Closed
Bug 1770397
Opened 2 years ago
Closed 2 years ago
Upgrade Firefox 91esr to use NSS 3.68.4
Categories
(Core :: Security: PSM, task, P1)
Tracking
()
RESOLVED
FIXED
People
(Reporter: djackson, Assigned: djackson)
References
(Blocks 1 open bug)
Details
(Keywords: sec-high, Whiteboard: [adv-esr91.10-])
Attachments
(1 file, 1 obsolete file)
48 bytes,
text/x-phabricator-request
|
RyanVM
:
approval-mozilla-esr91+
|
Details | Review |
No description provided.
Assignee | ||
Comment 1•2 years ago
|
||
Assignee | ||
Comment 2•2 years ago
•
|
||
Comment on attachment 9277467 [details]
Bug 1770397 - land NSS NSS_3_68_4_RTM UPGRADE_NSS_RELEASE, r=#nss-reviewers
(removed)
Attachment #9277467 -
Flags: approval-mozilla-esr91?
Assignee | ||
Updated•2 years ago
|
Attachment #9277467 -
Flags: approval-mozilla-esr91?
Updated•2 years ago
|
Attachment #9277467 -
Attachment is obsolete: true
Assignee | ||
Comment 3•2 years ago
|
||
Assignee | ||
Comment 4•2 years ago
|
||
Comment on attachment 9277470 [details]
Bug 1770397 - land NSS NSS_3_68_4_RTM UPGRADE_NSS_RELEASE, r=#nss-reviewers
ESR Uplift Approval Request
- If this is not a sec:{high,crit} bug, please state case for ESR consideration: This patch fixes a sec-high in NSS.
- User impact if declined:
- Fix Landed on Version:
- Risk to taking this patch: Low
- Why is the change risky/not risky? (and alternatives if risky): The risk is very low as the patch only ensures variables are correctly initialises and the code path is not normally active unless an attacker is attempting to inject a malicious addon.
Attachment #9277470 -
Flags: approval-mozilla-esr91?
Updated•2 years ago
|
status-firefox-esr91:
--- → affected
tracking-firefox-esr91:
--- → 101+
Updated•2 years ago
|
Group: core-security-release → crypto-core-security
No longer depends on: 1766978
Keywords: leave-open
Comment 5•2 years ago
|
||
Comment on attachment 9277470 [details]
Bug 1770397 - land NSS NSS_3_68_4_RTM UPGRADE_NSS_RELEASE, r=#nss-reviewers
Approved for 91.10esr.
Attachment #9277470 -
Flags: approval-mozilla-esr91? → approval-mozilla-esr91+
Comment 6•2 years ago
|
||
uplift |
Group: crypto-core-security → core-security-release
Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Updated•2 years ago
|
Whiteboard: [adv-esr91.10-]
Updated•11 months ago
|
Blocks: nss-uplift
Updated•2 months ago
|
Group: core-security-release
You need to log in
before you can comment on or make changes to this bug.
Description
•