Thunderbird 102 crashes with present CACert.org S/MIME cert installed
Categories
(MailNews Core :: Security: S/MIME, defect, P1)
Tracking
(thunderbird_esr91 wontfix, thunderbird_esr102 fixed, thunderbird103 affected)
People
(Reporter: KaiE, Unassigned)
References
Details
(Whiteboard: [nss bug 1777672 will fix])
If an S/MIME cert from CACert.org S/MIME is installed, and I attempt to configure the s/mime certs in account settings, I crash.
Crash is inside NSS, see separate bug 1777672.
We need an NSS 3.79 dot x release to get this fixed, and then uplift the release to mozilla-esr102.
This bug is for tracking the need of the uplift.
Reporter | ||
Updated•3 years ago
|
Comment 1•3 years ago
|
||
Do you get a crash report?
Reporter | ||
Comment 2•3 years ago
|
||
(In reply to Wayne Mery (:wsmwk) from comment #1)
Do you get a crash report?
No, I'm using my local build.
Reporter | ||
Comment 3•3 years ago
|
||
Fixing this crash will require an update to the NSS library, and an uplift into mozilla-central.
Fixing Thunderbird 102.x will require a NSS 3.79.x bugfix release with the patch from bug 1777672, and uplifting that NSS release into the mozilla-esr102 branch.
Updated•3 years ago
|
Updated•3 years ago
|
Reporter | ||
Comment 4•3 years ago
|
||
(In reply to Kai Engert (:KaiE:) from comment #3)
Fixing Thunderbird 102.x will require a NSS 3.79.x bugfix release with the patch from bug 1777672, and uplifting that NSS release into the mozilla-esr102 branch.
See bug 1780022
Reporter | ||
Updated•3 years ago
|
Comment 5•3 years ago
|
||
According to bug 1777672, this predates version 102
Comment 6•2 years ago
|
||
Do we have a crash signature?
Reporter | ||
Comment 7•2 years ago
|
||
Wayne, the bug is already understood and fixed on the NSS level, see dependency.
We're waiting for library uplift into mozilla core.
Comment 8•2 years ago
|
||
Looks like it's already applied. https://hg.mozilla.org/releases/mozilla-esr102/file/tip/security/nss/lib/certhigh/certvfy.c#l1916
Reporter | ||
Comment 9•2 years ago
|
||
NSS 3.79.2 with this fix was released. I've now asked to make it an official dependency in bug 1797468.
Reporter | ||
Comment 10•2 years ago
|
||
We should no longer get any crash reports with 102.6, if all distributions honor the NSS dependency upgrade from bug 1797468.
Updated•2 years ago
|
Description
•