1906193 - Upgrade Firefox 130 to use NSS 3.103

Status: RESOLVED FIXED

(Core :: Security: PSM, task, P1)

Description

[John Schanck [:jschanck]]

Schedule:

• Tree open: July 3, 2024
• Tree closed / beta: July 25, 2024
• Release: August 1, 2024

Comment 1

[John Schanck [:jschanck]]

Attachment: Bug 1906193 - land NSS 525c5044cc9e UPGRADE_NSS_RELEASE, r=keeler

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/c058dd79bdd4
land NSS 525c5044cc9e UPGRADE_NSS_RELEASE, r=keeler

Comment 3

[Serban Stanca [:SerbanS]]

https://hg.mozilla.org/mozilla-central/rev/c058dd79bdd4

Comment 4

[Anna Weine]

Attachment: Bug 1906193 - land NSS NSS_3_103_BETA1 UPGRADE_NSS_RELEASE, r=#nss-reviewers

2024-07-25 John Schanck <[e-mail]>

* lib/softoken/pkcs11u.c:
Bug 1908623 - move list size check after lock acquisition in
sftk_PutObjectToList. r=rrelyea,nss-reviewers

[0ec88bb52740] [NSS_3_103_BETA1]

2024-07-25 Maurice Dauer <[e-mail]>

* fuzz/tls_client_config.cc, fuzz/tls_client_config.h,
fuzz/tls_client_target.cc:
Bug 1899542: Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
r=djackson

This should also resolve a fuzz blocker reported by OSS-Fuzz, see:
Bug 1904037.

[ea475f7b0998]

2024-07-24 Kai Engert <[e-mail]>

* automation/taskcluster/docker-acvp/bin/checkout.sh,
automation/taskcluster/scripts/build.sh,
automation/taskcluster/scripts/build_gyp.sh,
automation/taskcluster/scripts/build_nspr.sh,
automation/taskcluster/scripts/check_abi.sh,
automation/taskcluster/scripts/gen_coverage_report.sh,
automation/taskcluster/scripts/run_scan_build.sh,
automation/taskcluster/windows/build.sh,
automation/taskcluster/windows/build_gyp.sh:
Bug 1909638 - Follow-up to fix test for presence of file nspr.patch.
r=jschanck

[51a800758d39]

2024-07-24 Maurice Dauer <[e-mail]>

* fuzz/options/dtls-client-no_fuzzer_mode.options, fuzz/options/dtls-
client.options, fuzz/options/dtls-server-no_fuzzer_mode.options,
fuzz/options/dtls-server.options, fuzz/options/quickder.options,
fuzz/options/tls-client-no_fuzzer_mode.options, fuzz/options/tls-
client.options, fuzz/options/tls-server-no_fuzzer_mode.options,
fuzz/options/tls-server.options:
Bug 1903783: Adjust libFuzzer size limits, r=djackson

[912794cba535]

* fuzz/fuzz.gyp, fuzz/tls_client_config.cc, fuzz/tls_client_config.h,
fuzz/tls_client_target.cc, fuzz/tls_server_target.cc:
Bug 1899542: Add fuzzing support for
SSL_SetCertificateCompressionAlgorithm, SSL_SetClientEchConfigs,
SSL_VersionRangeSet and SSL_AddExternalPsk, r=djackson

[2a14bf8169a0]

* fuzz/tls_client_config.cc, fuzz/tls_client_config.h,
fuzz/tls_client_target.cc:
Bug 1899542: Add fuzzing support for SSL_ENABLE_GREASE and
SSL_ENABLE_CH_EXTENSION_PERMUTATION, r=djackson

[36727d17c0e9]

2024-07-24 John Schanck <[e-mail]>

* doc/rst/releases/index.rst:
Documentation: update index.rst
[d35358352e50]

* doc/rst/releases/nss_3_102_1.rst:
Documentation: release notes for 3.102.1
[91d8d3c69d48]

* doc/rst/releases/nss_3_101.2.rst:
Documentation: release notes for 3.101.2
[aeae6d36e00c]

* doc/rst/releases/nss_3_90_4.rst:
Documentation: release notes for NSS 3.90.4
[f594ad038b45]

2024-07-24 Kai Engert <[e-mail]>

* automation/taskcluster/docker-acvp/bin/checkout.sh,
automation/taskcluster/scripts/build.sh,
automation/taskcluster/scripts/build_gyp.sh,
automation/taskcluster/scripts/build_nspr.sh,
automation/taskcluster/scripts/check_abi.sh,
automation/taskcluster/scripts/gen_coverage_report.sh,
automation/taskcluster/scripts/run_scan_build.sh,
automation/taskcluster/windows/build.sh,
automation/taskcluster/windows/build_gyp.sh:
Bug 1909638 - NSS automation should always cleanup the NSPR tree.
r=jschanck
[91cebd092953]

2024-07-24 Anna Weine <[e-mail]>

* lib/pk11wrap/pk11skey.c:
Bug 590806 - Freeing symKey in pk11_PubDeriveECKeyWithKDF when a
key_size is 0 and wrong kdf r=nss-reviewers,jschanck

[eed1dfdf09a7]

2024-07-22 Mike Hommey <[e-mail]>

* gtests/nss_bogo_shim/nss_bogo_shim.gyp,
gtests/ssl_gtest/ssl_gtest.gyp:
Bug 1908831 - Don't link zlib where it's not needed. r=nss-
reviewers,jschanck

[a6aa3cd05772]

2024-07-22 Anna Weine <[e-mail]>

* lib/cryptohi/seckey.c:
Bug 1908597 - Removing dead code from X25519 seckey.c r=jschanck

[964825d7bfa1]

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/9514a36309f9
land NSS NSS_3_103_BETA1 UPGRADE_NSS_RELEASE, r=nss-reviewers,jschanck

Comment 6

[Sandor Molnar[:smolnar]]

https://hg.mozilla.org/mozilla-central/rev/9514a36309f9

Comment 7

[Anna Weine]

Attachment: Bug 1906193 - land NSS NSS_3_103_RTM UPGRADE_NSS_RELEASE, r=#nss-reviewers

Comment 8

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/825e01903465
land NSS NSS_3_103_RTM UPGRADE_NSS_RELEASE, r=nss-reviewers,keeler

Comment 9

[Norisz Fay [:noriszfay]]

https://hg.mozilla.org/mozilla-central/rev/825e01903465