2087387 - Update NSS to new version 52c38de2a65d7b5e576427df2a208b3a02e4aba9 from 2026-10-29 19:10:33 UTC

Status: RESOLVED DUPLICATE of bug 2088215

(Core :: Security: PSM, enhancement)

Description

[Update Bot]

This update covers 7 commits, including 3 new upstream commits I've never filed a bug on before. (They're the top 3.). Here are the overall diff statistics, and then the commit information.

---

security/nss/AGENTS.md | 188 +
security/nss/CLAUDE.md | 172 +-
security/nss/automation/release/bugzilla_cf_status_nss.py | 14 +-
security/nss/gtests/common/testvectors/chachapoly-long-vectors.h | 2453 ++++++++++
security/nss/gtests/freebl_gtest/chacha20poly1305_unittest.cc | 174 +
security/nss/gtests/freebl_gtest/freebl_gtest.gyp | 10 +
security/nss/gtests/pk11_gtest/pk11_chacha20poly1305_unittest.cc | 75 +-
security/nss/gtests/pk11_gtest/pk11_der_private_key_import_unittest.cc | 130 +
security/nss/gtests/pk11_gtest/pq_pkcs8.h | 60 +-
security/nss/gtests/ssl_gtest/ssl_loopback_unittest.cc | 18 +-
security/nss/gtests/ssl_gtest/ssl_resumption_unittest.cc | 390 +-
security/nss/gtests/ssl_gtest/tls_connect.cc | 13 +-
security/nss/gtests/ssl_gtest/tls_connect.h | 54 +-
security/nss/lib/cryptohi/seckey.c | 16 +-
security/nss/lib/freebl/Makefile | 6 +
security/nss/lib/freebl/chacha20poly1305.c | 49 +
security/nss/lib/freebl/freebl.gyp | 27 +-
security/nss/lib/pk11wrap/pk11pk12.c | 5 +
security/nss/lib/softoken/pkcs11c.c | 5 +
security/nss/lib/ssl/sslencode.c | 9 +
security/nss/lib/ssl/sslencode.h | 1 +
security/nss/lib/ssl/sslexp.h | 16 +
security/nss/lib/ssl/sslimpl.h | 10 +-
security/nss/lib/ssl/sslnonce.c | 678 +-
security/nss/lib/ssl/sslsock.c | 27 +-
security/nss/moz.yaml | 4 +-
26 files changed, 3911 insertions(+), 693 deletions(-)

---

52c38de2a65d7b5e576427df2a208b3a02e4aba9 by Goutam Tamvada <[e-mail]>

https://github.com/mozilla/nss/commit/52c38de2a65d7b5e576427df2a208b3a02e4aba9
Authored: 2026-10-29 19:10:33 +0000
Committed: 2026-10-29 19:10:33 +0000

Bug 2083840 - Move CLAUDE.md into AGENTS.md. r=nss-reviewers,jschanck

Differential Revision: https://phabricator.services.mozilla.com/D337750

--HG--
rename : CLAUDE.md => AGENTS.md

Files Added:

• AGENTS.md

Files Modified:

• CLAUDE.md

---

4bc03d2076707784b338a8687f16793f23d9f98d by Goutam Tamvada <[e-mail]>

https://github.com/mozilla/nss/commit/4bc03d2076707784b338a8687f16793f23d9f98d
Authored: 2026-10-29 19:10:33 +0000
Committed: 2026-10-29 19:10:33 +0000

Bug 2083840 - Add text to CLAUDE.md regarding code comments and searchfox-cli. r=nss-reviewers,jschanck

Differential Revision: https://phabricator.services.mozilla.com/D337749

Files Modified:

• CLAUDE.md

---

f427ea8dfdd9ef58f0c654d759e5e1c306d3f9b9 by Anna <[e-mail]>

https://github.com/mozilla/nss/commit/f427ea8dfdd9ef58f0c654d759e5e1c306d3f9b9
Authored: 2026-10-29 16:14:13 +0000
Committed: 2026-10-29 16:14:13 +0000

Bug 2084251 - Fix cf_status_nss clearing base-release bugs on point releases. r=crypto-reviewers,jschanck

Differential Revision: https://phabricator.services.mozilla.com/D335664

Files Modified:

• automation/release/bugzilla_cf_status_nss.py

---

ce819c9475b254768f4c811e4306c5f0a4fa6760 by Benjamin Beurdouche <[e-mail]>

https://github.com/mozilla/nss/commit/ce819c9475b254768f4c811e4306c5f0a4fa6760
Authored: 2026-10-28 22:00:46 +0000
Committed: 2026-10-28 22:00:46 +0000

Bug 2039884 - Use vectorized Hacl_Chacha20Poly1305_128 on aarch64 above 512 bytes. r=jschanck

Differential Revision: https://phabricator.services.mozilla.com/D300759

Files Added:

• gtests/common/testvectors/chachapoly-long-vectors.h
• gtests/freebl_gtest/chacha20poly1305_unittest.cc

Files Modified:

• gtests/freebl_gtest/freebl_gtest.gyp
• gtests/pk11_gtest/pk11_chacha20poly1305_unittest.cc
• lib/freebl/Makefile
• lib/freebl/chacha20poly1305.c
• lib/freebl/freebl.gyp

---

b11848d2b5a78d69923f91ad011f2d0e0c4f9045 by Anna <[e-mail]>

https://github.com/mozilla/nss/commit/b11848d2b5a78d69923f91ad011f2d0e0c4f9045
Authored: 2026-10-28 14:32:09 +0000
Committed: 2026-10-28 14:32:09 +0000

Bug 2046805 - Add SSL_EnablePlaintextResumptionExport experimental API r=djackson

Differential Revision: https://phabricator.services.mozilla.com/D306164

Files Modified:

• gtests/ssl_gtest/ssl_loopback_unittest.cc
• gtests/ssl_gtest/ssl_resumption_unittest.cc
• gtests/ssl_gtest/tls_connect.cc
• gtests/ssl_gtest/tls_connect.h
• lib/ssl/sslencode.c
• lib/ssl/sslencode.h
• lib/ssl/sslexp.h
• lib/ssl/sslimpl.h
• lib/ssl/sslnonce.c
• lib/ssl/sslsock.c

---

35cef6ad1c1a1189230d4e19d15840c4bad9ca24 by Anna <[e-mail]>

https://github.com/mozilla/nss/commit/35cef6ad1c1a1189230d4e19d15840c4bad9ca24
Authored: 2026-10-28 14:32:09 +0000
Committed: 2026-10-28 14:32:09 +0000

Bug 2046805 - Collapse resumption token append boilerplate into macros r=jschanck

Differential Revision: https://phabricator.services.mozilla.com/D321267

Files Modified:

• lib/ssl/sslnonce.c

---

8ba7deed92b6f3c0133dc4cbd643355adf8c5472 by Anna <[e-mail]>

https://github.com/mozilla/nss/commit/8ba7deed92b6f3c0133dc4cbd643355adf8c5472
Authored: 2026-10-28 11:08:00 +0000
Committed: 2026-10-28 11:08:00 +0000

Bug 2086058 - Reject not empty parameters in ML-KEM && ML-DSA AlgorithmIdentifiers r=crypto-reviewers,jschanck

Differential Revision: https://phabricator.services.mozilla.com/D337087

Files Modified:

• gtests/pk11_gtest/pk11_der_private_key_import_unittest.cc
• gtests/pk11_gtest/pq_pkcs8.h
• lib/cryptohi/seckey.c
• lib/pk11wrap/pk11pk12.c
• lib/softoken/pkcs11c.c

---

Comment 2

[Update Bot]

I've submitted a try run for this commit: https://treeherder.mozilla.org/jobs?repo=try&revision=67006177d1eb26aab44077092331d217aa4537d3

Comment 3

[Update Bot]

Updatebot encountered an error while trying to submit to phabricator.
Updatebot will be unable to do anything more for this library version.

Comment 4

[Update Bot]

This bug is being closed because a newer revision of the library is available.
This bug will be marked as a duplicate of it (because although this bug is older, it is superseded by the newer one).