Closed Bug 2090046 Opened 8 days ago Closed 7 days ago

Update NSS to new version 62c8047d74ac50a27ff7c456c48d6d25893ea3a2 from 2026-11-06 01:11:10 UTC

Categories

(Core :: Security: PSM, enhancement)

Product:
Core
Component:
Security: PSM
Type:
enhancement

Tracking

()

Status:
RESOLVED FIXED
Milestone:
162 Branch
Tracking Flags:
Tracking Status
firefox162 --- fixed

People

(Reporter: update-bot, Assigned: jschanck)

References

(Blocks 1 open bug)

Details

(Whiteboard: [3pl-filed][task_id: Ay3MEMkaQgqvnuFWnBBdDQ])

Attachments

(1 external file)

This update covers 22 commits, including 15 new upstream commits I've never filed a bug on before. (They're the top 15.). Here are the overall diff statistics, and then the commit information.

security/manager/ssl/RootHashes.inc | 36 -
security/nss/automation/abi-check/previous-nss-release | 2 +-
security/nss/build.sh | 19 +-
security/nss/cmd/manifest.mn | 7 +-
security/nss/cmd/modutil/Makefile | 8 -
security/nss/cmd/modutil/README | 2 -
security/nss/cmd/modutil/install-ds.c | 1522 --------
security/nss/cmd/modutil/install-ds.h | 260 -
security/nss/cmd/modutil/install.c | 944 -----
security/nss/cmd/modutil/install.h | 100 -
security/nss/cmd/modutil/installparse.c | 479 --
security/nss/cmd/modutil/installparse.h | 7 -
security/nss/cmd/modutil/installparse.l | 137 -
security/nss/cmd/modutil/installparse.y | 104 -
security/nss/cmd/modutil/instsec.c | 153 -
security/nss/cmd/modutil/lex.Pk11Install_yy.c | 1607 --------
security/nss/cmd/modutil/manifest.mn | 9 +-
security/nss/cmd/modutil/modutil.c | 81 +-
security/nss/cmd/modutil/modutil.gyp | 13 +-
security/nss/cmd/modutil/pk11jar.html | 272 -
security/nss/cmd/modutil/rules.mk | 26 -
security/nss/cmd/modutil/specification.html | 25 +-
security/nss/cmd/platlibs.mk | 3 +-
security/nss/cmd/signtool/Makefile | 44 -
security/nss/cmd/signtool/README | 128 -
security/nss/cmd/signtool/certgen.c | 708 ---
security/nss/cmd/signtool/javascript.c | 1817 ----------
security/nss/cmd/signtool/list.c | 206 -
security/nss/cmd/signtool/manifest.mn | 27 -
security/nss/cmd/signtool/sign.c | 874 ----
security/nss/cmd/signtool/signtool.c | 1066 -----
security/nss/cmd/signtool/signtool.gyp | 33 -
security/nss/cmd/signtool/signtool.h | 113 -
security/nss/cmd/signtool/util.c | 1051 -----
security/nss/cmd/signtool/verify.c | 337 -
security/nss/cmd/signtool/zip.c | 676 ---
security/nss/cmd/signtool/zip.h | 69 -
security/nss/coreconf/config.gypi | 44 +
security/nss/coreconf/fuzz.sh | 2 +-
security/nss/coreconf/nspr.sh | 4 +-
security/nss/coreconf/sanitizers.sh | 49 +
security/nss/doc/Makefile | 6 +-
security/nss/doc/html/modutil.html | 145 +-
security/nss/doc/html/signtool.html | 284 -
security/nss/doc/html/signver.html | 4 +-
security/nss/doc/modutil.xml | 274 +-
security/nss/doc/nroff/modutil.1 | 577 +---
security/nss/doc/nroff/signtool.1 | 681 ---
security/nss/doc/nroff/signver.1 | 6 +-
security/nss/doc/signtool.xml | 681 ---
security/nss/doc/signver.xml | 4 +-
security/nss/doc/src/build.md | 4 -
security/nss/exports.gyp | 1 -
security/nss/gtests/mozpkix_gtest/mozpkix_gtest.gyp | 7 +-
security/nss/gtests/mozpkix_gtest/pkixcert_extension_tests.cpp | 31 +
security/nss/gtests/pk11_gtest/pk11_hmac_unittest.cc | 22 +
security/nss/gtests/pk11_gtest/pk11_module_unittest.cc | 4 +-
security/nss/gtests/ssl_gtest/manifest.mn | 1 +
security/nss/gtests/ssl_gtest/ssl_gtest.gyp | 1 +
security/nss/gtests/ssl_gtest/ssl_peer_cert_unittest.cc | 101 +
security/nss/gtests/ssl_gtest/ssl_resumption_unittest.cc | 76 +-
security/nss/gtests/ssl_gtest/tls_agent.cc | 2 +
security/nss/gtests/ssl_gtest/tls_agent.h | 2 +
security/nss/lib/Makefile | 4 +-
security/nss/lib/ckfw/builtins/certdata.txt | 350 +-
security/nss/lib/ckfw/builtins/nssckbi.h | 4 +-
security/nss/lib/jar/Makefile | 23 -
security/nss/lib/jar/exports.gyp | 27 -
security/nss/lib/jar/jar-ds.c | 36 -
security/nss/lib/jar/jar-ds.h | 77 -
security/nss/lib/jar/jar.c | 694 ---
security/nss/lib/jar/jar.gyp | 33 -
security/nss/lib/jar/jar.h | 372 --
security/nss/lib/jar/jarfile.c | 980 -----
security/nss/lib/jar/jarfile.h | 76 -
security/nss/lib/jar/jarint.c | 52 -
security/nss/lib/jar/jarint.h | 54 -
security/nss/lib/jar/jarnav.c | 63 -
security/nss/lib/jar/jarsign.c | 260 -
security/nss/lib/jar/jarver.c | 1208 ------
security/nss/lib/jar/jzconf.h | 189 -
security/nss/lib/jar/jzlib.h | 916 -----
security/nss/lib/jar/manifest.mn | 26 -
security/nss/lib/mozpkix/Makefile | 67 +
security/nss/lib/mozpkix/include/pkix/pkixder.h | 2 +-
security/nss/lib/mozpkix/include/pkix/pkixutil.h | 5 +
security/nss/lib/mozpkix/lib/Makefile | 47 +
security/nss/lib/mozpkix/lib/manifest.mn | 26 +
security/nss/lib/mozpkix/lib/pkixcert.cpp | 17 +-
security/nss/lib/mozpkix/manifest.mn | 9 +
security/nss/lib/mozpkix/mozpkix.gyp | 55 +
security/nss/lib/mozpkix/mozpkix_cxx.gypi | 27 +
security/nss/lib/mozpkix/mozpkix_cxx.mk | 20 +
security/nss/lib/nss/nss.h | 6 +-
security/nss/lib/softoken/softkver.h | 6 +-
security/nss/lib/ssl/Makefile | 2 +
security/nss/lib/ssl/config.mk | 4 +
security/nss/lib/ssl/manifest.mn | 4 +
security/nss/lib/ssl/mozpkixwrappers.cpp | 47 +
security/nss/lib/ssl/ssl.gyp | 6 +
security/nss/lib/ssl/sslcert.c | 72 -
security/nss/lib/ssl/sslexp.h | 23 +-
security/nss/lib/ssl/sslimpl.h | 10 +-
security/nss/lib/ssl/sslsock.c | 23 +-
security/nss/lib/util/nssutil.h | 6 +-
security/nss/lib/zlib/README.nss | 2 +-
security/nss/moz.yaml | 4 +-
security/nss/nss.gyp | 2 -
security/nss/pkg/linux/Makefile | 2 +-
security/nss/pkg/solaris/SUNWtlsd/prototype | 3 -
security/nss/pkg/solaris/SUNWtlsu/prototype_com | 1 -
security/nss/pkg/solaris/SUNWtlsu/prototype_i386 | 1 -
security/nss/pkg/solaris/SUNWtlsu/prototype_sparc | 1 -
security/nss/taskcluster/docker/builds/Dockerfile | 14 +-
security/nss/taskcluster/docker/builds/apt.llvm.org.asc | 52 +
security/nss/taskcluster/docker/builds/llvm.sources | 9 +
security/nss/taskcluster/kinds/build/windows.yml | 11 +
security/nss/taskcluster/nss_taskgraph/transforms/build.py | 5 +-
security/nss/tests/common/certsetup.sh | 10 +
security/nss/tests/ssl_gtests/ssl_gtest_db.sh | 2 +
security/nss/tests/tools/sign.html | 8 -
security/nss/tests/tools/signjs.html | 11 -
security/nss/tests/tools/tools.sh | 65 -
123 files changed, 891 insertions(+), 21218 deletions(-)

62c8047d74ac50a27ff7c456c48d6d25893ea3a2 by John Schanck <jschanck@mozilla.com>

https://github.com/mozilla/nss/commit/62c8047d74ac50a27ff7c456c48d6d25893ea3a2
Authored: 2026-11-06 01:11:10 +0000
Committed: 2026-11-06 01:11:10 +0000

Bug 2089738 - Remove libjar. r=nss-reviewers,rrelyea

Remove lib/jar along with its only consumers: the signtool command and
modutil's -jar (PKCS #11 JAR installation) command, including the
-installdir and -tempdir options. Drop the signtool tests, man pages and
packaging entries.

Differential Revision: https://phabricator.services.mozilla.com/D340083

Files Deleted:

  • cmd/modutil/install-ds.c
  • cmd/modutil/install-ds.h
  • cmd/modutil/install.c
  • cmd/modutil/install.h
  • cmd/modutil/installparse.c
  • cmd/modutil/installparse.h
  • cmd/modutil/installparse.l
  • cmd/modutil/installparse.y
  • cmd/modutil/instsec.c
  • cmd/modutil/lex.Pk11Install_yy.c
  • cmd/modutil/pk11jar.html
  • cmd/modutil/rules.mk
  • cmd/signtool/Makefile
  • cmd/signtool/README
  • cmd/signtool/certgen.c
  • cmd/signtool/javascript.c
  • cmd/signtool/list.c
  • cmd/signtool/manifest.mn
  • cmd/signtool/sign.c
  • cmd/signtool/signtool.c
  • cmd/signtool/signtool.gyp
  • cmd/signtool/signtool.h
  • cmd/signtool/util.c
  • cmd/signtool/verify.c
  • cmd/signtool/zip.c
  • cmd/signtool/zip.h
  • doc/html/signtool.html
  • doc/nroff/signtool.1
  • doc/signtool.xml
  • lib/jar/Makefile
  • lib/jar/exports.gyp
  • lib/jar/jar-ds.c
  • lib/jar/jar-ds.h
  • lib/jar/jar.c
  • lib/jar/jar.gyp
  • lib/jar/jar.h
  • lib/jar/jarfile.c
  • lib/jar/jarfile.h
  • lib/jar/jarint.c
  • lib/jar/jarint.h
  • lib/jar/jarnav.c
  • lib/jar/jarsign.c
  • lib/jar/jarver.c
  • lib/jar/jzconf.h
  • lib/jar/jzlib.h
  • lib/jar/manifest.mn
  • tests/tools/sign.html
  • tests/tools/signjs.html

Files Modified:

  • cmd/manifest.mn
  • cmd/modutil/Makefile
  • cmd/modutil/README
  • cmd/modutil/manifest.mn
  • cmd/modutil/modutil.c
  • cmd/modutil/modutil.gyp
  • cmd/modutil/specification.html
  • cmd/platlibs.mk
  • doc/Makefile
  • doc/html/modutil.html
  • doc/html/signver.html
  • doc/modutil.xml
  • doc/nroff/modutil.1
  • doc/nroff/signver.1
  • doc/signver.xml
  • doc/src/build.md
  • exports.gyp
  • lib/Makefile
  • lib/zlib/README.nss
  • nss.gyp
  • pkg/linux/Makefile
  • pkg/solaris/SUNWtlsd/prototype
  • pkg/solaris/SUNWtlsu/prototype_com
  • pkg/solaris/SUNWtlsu/prototype_i386
  • pkg/solaris/SUNWtlsu/prototype_sparc
  • tests/tools/tools.sh

9b875d27a26cd8a992459e3e5ba7d40459f1675b by John Schanck <jschanck@mozilla.com>

https://github.com/mozilla/nss/commit/9b875d27a26cd8a992459e3e5ba7d40459f1675b
Authored: 2026-11-06 01:10:45 +0000
Committed: 2026-11-06 01:10:45 +0000

Bug 2081503 - add Windows ASAN CI jobs. r=nss-reviewers,keeler

Differential Revision: https://phabricator.services.mozilla.com/D333439

Files Modified:

  • build.sh
  • coreconf/config.gypi
  • coreconf/nspr.sh
  • coreconf/sanitizers.sh
  • gtests/pk11_gtest/pk11_module_unittest.cc
  • taskcluster/kinds/build/windows.yml
  • taskcluster/nss_taskgraph/transforms/build.py

4796202384654f80048a826041d25884595e21e6 by Exploding-Joysticks <ExplodingJoysticks@proton.me>

https://github.com/mozilla/nss/commit/4796202384654f80048a826041d25884595e21e6
Authored: 2026-11-05 23:05:56 +0000
Committed: 2026-11-05 23:05:56 +0000

Bug 2089822 - mozilla::pkix: give Constructed an underlying type to avoid enum warnings r=nss-reviewers,keeler

Differential Revision: https://phabricator.services.mozilla.com/D340188

Files Modified:

  • lib/mozpkix/include/pkix/pkixder.h

260c7a691d4a11836a06f40d4698fb808f67c2d3 by John Schanck <jschanck@mozilla.com>

https://github.com/mozilla/nss/commit/260c7a691d4a11836a06f40d4698fb808f67c2d3
Authored: 2026-11-05 18:52:30 +0000
Committed: 2026-11-05 18:52:30 +0000

Bug 2082077 - test that MAC mechanisms reject use of RSA keys. r=nss-reviewers,keeler

Differential Revision: https://phabricator.services.mozilla.com/D333906

Files Modified:

  • gtests/pk11_gtest/pk11_hmac_unittest.cc

d0abbaabc7773ba7b9549ab0b74558332c4ed2cc by Anna <anna.weine@mozilla.com>

https://github.com/mozilla/nss/commit/d0abbaabc7773ba7b9549ab0b74558332c4ed2cc
Authored: 2026-11-05 18:36:19 +0000
Committed: 2026-11-05 18:36:19 +0000

Bug 2085902 - Set nssckbi version to 2.94. r=jschanck

Differential Revision: https://phabricator.services.mozilla.com/D339079

Files Modified:

  • lib/ckfw/builtins/nssckbi.h

30e59d44dcc34c25d38581ee010e874b66c2e1ca by John Schanck <jschanck@mozilla.com>

https://github.com/mozilla/nss/commit/30e59d44dcc34c25d38581ee010e874b66c2e1ca
Authored: 2026-11-05 18:36:18 +0000
Committed: 2026-11-05 18:36:18 +0000

Bug 2089115 - remove email trust and set TLS distrustAfter for emSign Root CA - G1. r=bwilson

Differential Revision: https://phabricator.services.mozilla.com/D339715

Files Modified:

  • lib/ckfw/builtins/certdata.txt

4b6c2d4bf82d3c70c6c03cb0579aa5905d9f0afe by Anna <anna.weine@mozilla.com>

https://github.com/mozilla/nss/commit/4b6c2d4bf82d3c70c6c03cb0579aa5905d9f0afe
Authored: 2026-11-05 18:36:18 +0000
Committed: 2026-11-05 18:36:18 +0000

Bug 2088279 - Remove Email Trust Bit from IdenTrust Commercial Root CA 1. r=bwilson

Differential Revision: https://phabricator.services.mozilla.com/D339078

Files Modified:

  • lib/ckfw/builtins/certdata.txt

293358b625f080dc19fb41c544c0cead04f33efe by Anna <anna.weine@mozilla.com>

https://github.com/mozilla/nss/commit/293358b625f080dc19fb41c544c0cead04f33efe
Authored: 2026-11-05 18:36:18 +0000
Committed: 2026-11-05 18:36:18 +0000

Bug 2088275 - Remove Email Trust Bit from UCA Global G2 Root. r=bwilson

Differential Revision: https://phabricator.services.mozilla.com/D339077

Files Modified:

  • lib/ckfw/builtins/certdata.txt

99c6ac3f7cc04c9f916bb5f126829021d24c080a by Anna <anna.weine@mozilla.com>

https://github.com/mozilla/nss/commit/99c6ac3f7cc04c9f916bb5f126829021d24c080a
Authored: 2026-11-05 18:36:18 +0000
Committed: 2026-11-05 18:36:18 +0000

Bug 2088266 - Change Trust Bits for DigiCert Global Root G2, G3, G4 and QuoVadis Root CA 1 G3, 3 G3. r=bwilson

Differential Revision: https://phabricator.services.mozilla.com/D339076

Files Modified:

  • lib/ckfw/builtins/certdata.txt

ca6b9b0021b984d9fe9d1d11c46463831bf67987 by Anna <anna.weine@mozilla.com>

https://github.com/mozilla/nss/commit/ca6b9b0021b984d9fe9d1d11c46463831bf67987
Authored: 2026-11-05 18:36:18 +0000
Committed: 2026-11-05 18:36:18 +0000

Bug 2085928 - Remove Websites Trust Bit from Certigna Root CA. r=bwilson

Differential Revision: https://phabricator.services.mozilla.com/D339075

Files Modified:

  • lib/ckfw/builtins/certdata.txt

0bc5fc37c208ad01f7d690bf4433d457df1dff01 by Anna <anna.weine@mozilla.com>

https://github.com/mozilla/nss/commit/0bc5fc37c208ad01f7d690bf4433d457df1dff01
Authored: 2026-11-05 18:36:17 +0000
Committed: 2026-11-05 18:36:17 +0000

Bug 2085917 - Remove Buypass Class 2 Root CA and Buypass Class 3 Root CA from NSS. r=bwilson

Differential Revision: https://phabricator.services.mozilla.com/D339074

Files Modified:

  • lib/ckfw/builtins/certdata.txt

e5cb445f1fbdff56e584047e912aef6368e432fe by Anna <anna.weine@mozilla.com>

https://github.com/mozilla/nss/commit/e5cb445f1fbdff56e584047e912aef6368e432fe
Authored: 2026-11-05 18:36:17 +0000
Committed: 2026-11-05 18:36:17 +0000

Bug 2085912 - Set CKA_NSS_SERVER_DISTRUST_AFTER for Firmaprofesional root r=bwilson

Differential Revision: https://phabricator.services.mozilla.com/D338662

Files Modified:

  • lib/ckfw/builtins/certdata.txt

8d3310e2b6b494babef54611ce9f3818b6e05873 by Anna <anna.weine@mozilla.com>

https://github.com/mozilla/nss/commit/8d3310e2b6b494babef54611ce9f3818b6e05873
Authored: 2026-11-05 17:48:38 +0000
Committed: 2026-11-05 17:48:38 +0000

Bug 2088883 - Report plaintext resumption in SSLResumptionTokenInfo. r=jschanck

Differential Revision: https://phabricator.services.mozilla.com/D339499

Files Modified:

  • gtests/ssl_gtest/ssl_resumption_unittest.cc
  • lib/ssl/sslexp.h
  • lib/ssl/sslsock.c

0936c7423e6618e51539494d45c792f36c3b8ddc by John Schanck <jschanck@mozilla.com>

https://github.com/mozilla/nss/commit/0936c7423e6618e51539494d45c792f36c3b8ddc
Authored: 2026-11-05 17:48:38 +0000
Committed: 2026-11-05 17:48:38 +0000

Bug 1892872 - add SSLExp_GetResumptionTokenInfoWithFlags. r=nss-reviewers,aweine

Differential Revision: https://phabricator.services.mozilla.com/D337758

Files Modified:

  • gtests/ssl_gtest/ssl_resumption_unittest.cc
  • lib/ssl/sslexp.h
  • lib/ssl/sslimpl.h
  • lib/ssl/sslsock.c

be9529d5ccd395a6dbc41b50f7ea6d9f152af347 by Anna Weine <anna.weine@mozilla.com>

https://github.com/mozilla/nss/commit/be9529d5ccd395a6dbc41b50f7ea6d9f152af347
Authored: 2026-11-05 10:54:58 +0000
Committed: 2026-11-05 10:54:58 +0000

Bug 2088397 - Add clang-23 to CI r=nss-reviewers,jschanck

Differential Revision: https://phabricator.services.mozilla.com/D339066

Files Added:

  • taskcluster/docker/builds/apt.llvm.org.asc
  • taskcluster/docker/builds/llvm.sources

Files Modified:

  • taskcluster/docker/builds/Dockerfile
  • taskcluster/nss_taskgraph/transforms/build.py

a51dafa783e59656d1729e2b4dacc08b7a8a52b2 by Goutam Tamvada <gtamvada@mozilla.com>

https://github.com/mozilla/nss/commit/a51dafa783e59656d1729e2b4dacc08b7a8a52b2
Authored: 2026-11-04 21:55:27 +0000
Committed: 2026-11-04 21:55:27 +0000

Bug 2083934 - Use mozpkix to extract the peer certificate's subjectPublicKeyInfo in libssl. r=jschanck,nss-reviewers

Differential Revision: https://phabricator.services.mozilla.com/D336284

--HG--
rename : lib/ssl/Makefile => lib/mozpkix/Makefile
rename : lib/ssl/Makefile => lib/mozpkix/lib/Makefile

Files Added:

  • gtests/ssl_gtest/ssl_peer_cert_unittest.cc
  • lib/mozpkix/Makefile
  • lib/mozpkix/lib/Makefile
  • lib/mozpkix/lib/manifest.mn
  • lib/mozpkix/manifest.mn
  • lib/mozpkix/mozpkix_cxx.gypi
  • lib/mozpkix/mozpkix_cxx.mk
  • lib/ssl/mozpkixwrappers.cpp

Files Modified:

  • cmd/platlibs.mk
  • gtests/mozpkix_gtest/mozpkix_gtest.gyp
  • gtests/ssl_gtest/manifest.mn
  • gtests/ssl_gtest/ssl_gtest.gyp
  • gtests/ssl_gtest/tls_agent.cc
  • gtests/ssl_gtest/tls_agent.h
  • lib/Makefile
  • lib/mozpkix/mozpkix.gyp
  • lib/ssl/Makefile
  • lib/ssl/config.mk
  • lib/ssl/manifest.mn
  • lib/ssl/ssl.gyp
  • lib/ssl/sslcert.c
  • lib/ssl/sslimpl.h
  • tests/common/certsetup.sh
  • tests/ssl_gtests/ssl_gtest_db.sh

6073fd8a0a0b55f95337f7d18a5323f1966ae199 by Goutam Tamvada <gtamvada@mozilla.com>

https://github.com/mozilla/nss/commit/6073fd8a0a0b55f95337f7d18a5323f1966ae199
Authored: 2026-11-04 21:55:27 +0000
Committed: 2026-11-04 21:55:27 +0000

Bug 2083934 - Add helper to mozpkix to extract subjectPublicKeyInfo. r=jschanck,nss-reviewers

Differential Revision: https://phabricator.services.mozilla.com/D336283

Files Modified:

  • gtests/mozpkix_gtest/pkixcert_extension_tests.cpp
  • lib/mozpkix/include/pkix/pkixutil.h
  • lib/mozpkix/lib/pkixcert.cpp

2e636d07afa25f58502523caab0e2b0e9bd4e06c by John Schanck <jschanck@mozilla.com>

https://github.com/mozilla/nss/commit/2e636d07afa25f58502523caab0e2b0e9bd4e06c
Authored: 2026-11-04 16:54:38 +0000
Committed: 2026-11-04 16:54:38 +0000

Bug 1989541 - Don't disable CK_PKCS5_PBKD2_PARAMS support in fuzzing builds. r=nss-reviewers,aweine

Differential Revision: https://phabricator.services.mozilla.com/D339258

Files Modified:

  • coreconf/fuzz.sh

33880ee5ee4bb6a481af885b63bbdd16e18f4576 by Anna Weine <anna.weine@mozilla.com>

https://github.com/mozilla/nss/commit/33880ee5ee4bb6a481af885b63bbdd16e18f4576
Authored: 2026-11-04 17:03:09 +0100
Committed: 2026-11-04 17:03:09 +0100

Backed out changeset a0d3c7158f02 (Bug 2088965) for landing without review.

Files Modified:

  • gtests/pk11_gtest/pk11_prf_unittest.cc

d085603d568ceeab350fda6174254a52284a24d9 by Anna Weine <anna.weine@mozilla.com>

https://github.com/mozilla/nss/commit/d085603d568ceeab350fda6174254a52284a24d9
Authored: 2026-11-04 16:58:00 +0100
Committed: 2026-11-04 16:58:00 +0100

Set version numbers to 3.134 Beta

Files Modified:

  • automation/abi-check/previous-nss-release
  • lib/nss/nss.h
  • lib/softoken/softkver.h
  • lib/util/nssutil.h

05d82a865783f2747c9b23f6fc4b4601e73dfcef by Anna Weine <anna.weine@mozilla.com>

https://github.com/mozilla/nss/commit/05d82a865783f2747c9b23f6fc4b4601e73dfcef
Authored: 2026-11-04 16:57:58 +0100
Committed: 2026-11-04 16:57:58 +0100

Release notes for NSS 3.133

--HG--
extra : source : 96d446dc5bd8b606c0f14ce6490ee403d37cdb2f

Files Added:

  • doc/src/releases/nss_3_133.md

Files Modified:

  • doc/src/releases/index.md

6a13e63a81655f44473eb35e8a4c7f27d024cb9f by Anna Weine <anna.weine@mozilla.com>

https://github.com/mozilla/nss/commit/6a13e63a81655f44473eb35e8a4c7f27d024cb9f
Authored: 2026-11-04 16:39:13 +0100
Committed: 2026-11-04 16:39:13 +0100

Bug 2088965 - [Coverity 1704719] Reset freed keys in TlsPrfTest::ClearTempVars

Differential Revision: https://phabricator.services.mozilla.com/D339540

--HG--
extra : amend_source : e4bf90c54bced7c9d19139cee74b7d5595c0021d

Files Modified:

  • gtests/pk11_gtest/pk11_prf_unittest.cc
Duplicate of this bug: 2089407

I've submitted a try run for this commit: https://treeherder.mozilla.org/jobs?repo=try&revision=61cd474e2a8cf5c0f1f3cc6158079fab7c62d7c3

Attachment #9675616 - Attachment description: Bug 2090046 - Update NSS to 62c8047d74ac50a27ff7c456c48d6d25893ea3a2 → Bug 2090046 - Update NSS to 62c8047d74ac50a27ff7c456c48d6d25893ea3a2. UPGRADE_NSS_RELEASE
Assignee: nobody → update-bot
Status: NEW → ASSIGNED
Pushed by jschanck@mozilla.com: https://github.com/mozilla-firefox/firefox/commit/35d4163c41ce https://hg.mozilla.org/integration/autoland/rev/d628feb8b2bc Update NSS to 62c8047d74ac50a27ff7c456c48d6d25893ea3a2. UPGRADE_NSS_RELEASE r=jschanck

The try push is done, we found jobs with unclassified failures.

Needs Close Investigation:

  • did not see DOMWINDOW log strings. this occurs if the DOMWINDOW logging gets disabled by something23 created seen 0 destroyed seen

    • 8 of 8 failed on different tasks
      - test-linux2404-64/debug-mochitest-browser-chrome-swr (Z5eHT-wMRMGzA6B3aj5lqQ)
      - test-linux2404-64/debug-mochitest-browser-chrome-swr (Bx9m1zrgTyih9BBJ0BK0MA)
      - test-linux2404-64/debug-mochitest-browser-chrome-swr (UD-Uw__PRHu0KxsRHP_1_w)
      - test-linux2404-64/debug-mochitest-browser-chrome-swr (NA5AcsSmSR-EyE8l15FWdg)
      - test-linux2404-64/debug-mochitest-browser-chrome-standalone (Llt03HeLR8egi_9GQ146Zg)
      - test-linux2404-64/debug-mochitest-browser-chrome-standalone (OQOmFATjS1unUilpULhtZg)
      - test-linux2404-64/debug-mochitest-browser-chrome-standalone (FQWWmpfnTSyUDuENeX7YFQ)
      - test-linux2404-64/debug-mochitest-browser-chrome-standalone (WvWN_CGhRB-yYMjQ4s3Ynw)

  • did not see DOMWINDOW log strings. this occurs if the DOMWINDOW logging gets disabled by something32 created seen 0 destroyed seen

    • 4 of 4 failed on the same (retriggered) task
      - test-windows11-32-25h2/debug-mochitest-browser-chrome (TCWM4BtTTyOntZegzjjrLg)
      - test-windows11-32-25h2/debug-mochitest-browser-chrome (V_glKl9dQEeR6pqAbepxBg)
      - test-windows11-32-25h2/debug-mochitest-browser-chrome (cmIfc7jmR3uU8ul7K1Hp1w)
      - test-windows11-32-25h2/debug-mochitest-browser-chrome (WTSVoTfpS3uhUpHg_EwpNQ)

  • security/manager/ssl/tests/unit/test_add_preexisting_cert.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_baseline_requirements_subject_common_name.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_certDB_export_pkcs12.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_certDB_export_pkcs12_with_primary_password.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_certDB_import.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_certDB_import_pkcs12.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_certDB_import_with_primary_password.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_cert_dbKey.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_cert_eku.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_cert_embedded_null.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_cert_expiration_canary.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_cert_keyUsage.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_cert_override_read.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_cert_overrides.js

    • 15 of 15 failed on different tasks
      - test-windows10-64-2009-qr/opt-xpcshell (OM0pt6elStCQx1xh3jdr7g)
      - test-macosx1015-64-qr/opt-xpcshell (Y0j6KTnJSWi23gPASji3XA)
      - test-linux2404-64-tsan/opt-xpcshell-nofis (ADIqq7sQTEWZS9di_5PFGg)
      - test-android-em-14-x86_64/opt-geckoview-xpcshell (cSiNham7TM6PjdWQ3zlTwg)
      - test-macosx1500-aarch64-vms/opt-xpcshell (Bc8jIo-rR82XUdFrApaLJg)
      - test-android-em-14-x86_64-lite/opt-geckoview-xpcshell (cFM-Iqi0SrObZJ-21mbgqg)
      - test-linux2404-64-asan/opt-xpcshell-nofis (cawhu5BWRSCVMaTCNXV-tA)
      - test-windows11-32-25h2/opt-xpcshell (fy8YSzgpQPuxCOQ2Q06FkQ)
      - test-linux2404-64-tsan/opt-xpcshell (GTSdl-TJS2SPVYTUc6WF8A)
      - test-windows11-64-25h2/opt-xpcshell (Yc8fyFdOR469VGdzGBWYHg)
      - test-android-em-14-x86_64-lite/opt-geckoview-xpcshell-nofis (RjA-GkLXS2-iXCn1mNaqTw)
      - test-linux2404-64/opt-xpcshell (CX4OvLUxREeVtQ2I9ESjMw)
      - test-linux2404-64-asan/opt-xpcshell (HU1UKnK9QWC6l03-TmLe3Q)
      - test-macosx1500-aarch64/opt-xpcshell (Pta1sbqkSLq_xHn86tp-Tw)
      - test-android-em-14-x86_64/opt-geckoview-xpcshell-nofis (D9WAX4YgTMWe6U1Jo8hxAg)

  • security/manager/ssl/tests/unit/test_cert_sha1.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_cert_signatures.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_cert_storage.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_cert_trust.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_cert_utf8.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_cert_version.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_constructX509FromBase64.js

    • 4 of 4 failed on the same (retriggered) task
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (Xtok-UH4QIGuuRGL0EmwXA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (EZMfx6u8SoqHmGsdXrgYqw)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (f8SVQKj_T6--zFQcMtEyVA)
      - test-android-em-14-x86_64/debug-geckoview-xpcshell-nofis (M4PKcwAoRk2uClFdAvxvDQ)

  • security/manager/ssl/tests/unit/test_osclientcerts_module.js

    • 4 of 4 failed on the same (retriggered) task
      - test-windows11-64-25h2/debug-xpcshell-msix (SMR_y7BNQpyHnqhADK4njQ)
      - test-windows11-64-25h2/debug-xpcshell-msix (R7RvWB2rS0uq3pYjZN8YvA)
      - test-windows11-64-25h2/debug-xpcshell-msix (C61xFYuJTteGZVjqktgs-Q)
      - test-windows11-64-25h2/debug-xpcshell-msix (YfxRLReiQn2Vs5HAvUSTPQ)

  • security/manager/ssl/tests/unit/test_pkcs11_module.js

    • 4 of 4 failed on the same (retriggered) task
      - test-windows11-64-25h2/debug-xpcshell-msix (SMR_y7BNQpyHnqhADK4njQ)
      - test-windows11-64-25h2/debug-xpcshell-msix (R7RvWB2rS0uq3pYjZN8YvA)
      - test-windows11-64-25h2/debug-xpcshell-msix (C61xFYuJTteGZVjqktgs-Q)
      - test-windows11-64-25h2/debug-xpcshell-msix (YfxRLReiQn2Vs5HAvUSTPQ)

  • security/manager/ssl/tests/unit/test_pkcs11_moduleDB.js

    • 4 of 4 failed on the same (retriggered) task
      - test-windows11-64-25h2/debug-xpcshell-msix (SMR_y7BNQpyHnqhADK4njQ)
      - test-windows11-64-25h2/debug-xpcshell-msix (R7RvWB2rS0uq3pYjZN8YvA)
      - test-windows11-64-25h2/debug-xpcshell-msix (C61xFYuJTteGZVjqktgs-Q)
      - test-windows11-64-25h2/debug-xpcshell-msix (YfxRLReiQn2Vs5HAvUSTPQ)

  • security/manager/ssl/tests/unit/test_pkcs11_safe_mode.js

    • 4 of 4 failed on the same (retriggered) task
      - test-windows11-64-25h2/debug-xpcshell-msix (SMR_y7BNQpyHnqhADK4njQ)
      - test-windows11-64-25h2/debug-xpcshell-msix (R7RvWB2rS0uq3pYjZN8YvA)
      - test-windows11-64-25h2/debug-xpcshell-msix (C61xFYuJTteGZVjqktgs-Q)
      - test-windows11-64-25h2/debug-xpcshell-msix (YfxRLReiQn2Vs5HAvUSTPQ)

  • security/manager/ssl/tests/unit/test_pkcs11_slot.js

    • 4 of 4 failed on the same (retriggered) task
      - test-windows11-64-25h2/debug-xpcshell-msix (SMR_y7BNQpyHnqhADK4njQ)
      - test-windows11-64-25h2/debug-xpcshell-msix (R7RvWB2rS0uq3pYjZN8YvA)
      - test-windows11-64-25h2/debug-xpcshell-msix (C61xFYuJTteGZVjqktgs-Q)
      - test-windows11-64-25h2/debug-xpcshell-msix (YfxRLReiQn2Vs5HAvUSTPQ)

  • security/manager/ssl/tests/unit/test_pkcs11_token.js

    • 4 of 4 failed on the same (retriggered) task
      - test-windows11-64-25h2/debug-xpcshell-msix (SMR_y7BNQpyHnqhADK4njQ)
      - test-windows11-64-25h2/debug-xpcshell-msix (R7RvWB2rS0uq3pYjZN8YvA)
      - test-windows11-64-25h2/debug-xpcshell-msix (C61xFYuJTteGZVjqktgs-Q)
      - test-windows11-64-25h2/debug-xpcshell-msix (YfxRLReiQn2Vs5HAvUSTPQ)

  • xpcshell-smartcards-remote.toml:security/manager/ssl/tests/unit/test_osclientcerts_module.js

    • 4 of 4 failed on the same (retriggered) task
      - test-windows11-64-25h2/debug-xpcshell-msix (SMR_y7BNQpyHnqhADK4njQ)
      - test-windows11-64-25h2/debug-xpcshell-msix (R7RvWB2rS0uq3pYjZN8YvA)
      - test-windows11-64-25h2/debug-xpcshell-msix (C61xFYuJTteGZVjqktgs-Q)
      - test-windows11-64-25h2/debug-xpcshell-msix (YfxRLReiQn2Vs5HAvUSTPQ)

  • xpcshell-smartcards-remote.toml:security/manager/ssl/tests/unit/test_pkcs11_module.js

    • 4 of 4 failed on the same (retriggered) task
      - test-windows11-64-25h2/debug-xpcshell-msix (SMR_y7BNQpyHnqhADK4njQ)
      - test-windows11-64-25h2/debug-xpcshell-msix (R7RvWB2rS0uq3pYjZN8YvA)
      - test-windows11-64-25h2/debug-xpcshell-msix (C61xFYuJTteGZVjqktgs-Q)
      - test-windows11-64-25h2/debug-xpcshell-msix (YfxRLReiQn2Vs5HAvUSTPQ)

  • xpcshell-smartcards-remote.toml:security/manager/ssl/tests/unit/test_pkcs11_moduleDB.js

    • 4 of 4 failed on the same (retriggered) task
      - test-windows11-64-25h2/debug-xpcshell-msix (SMR_y7BNQpyHnqhADK4njQ)
      - test-windows11-64-25h2/debug-xpcshell-msix (R7RvWB2rS0uq3pYjZN8YvA)
      - test-windows11-64-25h2/debug-xpcshell-msix (C61xFYuJTteGZVjqktgs-Q)
      - test-windows11-64-25h2/debug-xpcshell-msix (YfxRLReiQn2Vs5HAvUSTPQ)

  • xpcshell-smartcards-remote.toml:security/manager/ssl/tests/unit/test_pkcs11_remote_process.js

    • 4 of 4 failed on the same (retriggered) task
      - test-windows11-64-25h2/debug-xpcshell-msix (SMR_y7BNQpyHnqhADK4njQ)
      - test-windows11-64-25h2/debug-xpcshell-msix (R7RvWB2rS0uq3pYjZN8YvA)
      - test-windows11-64-25h2/debug-xpcshell-msix (C61xFYuJTteGZVjqktgs-Q)
      - test-windows11-64-25h2/debug-xpcshell-msix (YfxRLReiQn2Vs5HAvUSTPQ)

  • xpcshell-smartcards-remote.toml:security/manager/ssl/tests/unit/test_pkcs11_slot.js

    • 4 of 4 failed on the same (retriggered) task
      - test-windows11-64-25h2/debug-xpcshell-msix (SMR_y7BNQpyHnqhADK4njQ)
      - test-windows11-64-25h2/debug-xpcshell-msix (R7RvWB2rS0uq3pYjZN8YvA)
      - test-windows11-64-25h2/debug-xpcshell-msix (C61xFYuJTteGZVjqktgs-Q)
      - test-windows11-64-25h2/debug-xpcshell-msix (YfxRLReiQn2Vs5HAvUSTPQ)

  • xpcshell-smartcards-remote.toml:security/manager/ssl/tests/unit/test_pkcs11_token.js

    • 4 of 4 failed on the same (retriggered) task
      - test-windows11-64-25h2/debug-xpcshell-msix (SMR_y7BNQpyHnqhADK4njQ)
      - test-windows11-64-25h2/debug-xpcshell-msix (R7RvWB2rS0uq3pYjZN8YvA)
      - test-windows11-64-25h2/debug-xpcshell-msix (C61xFYuJTteGZVjqktgs-Q)
      - test-windows11-64-25h2/debug-xpcshell-msix (YfxRLReiQn2Vs5HAvUSTPQ)

  • test-linux2204-64-wayland/debug-mochitest-plain - 4 of 4 failed on the same (retriggered) task (failed: CkJ-NMh7SsSwYnz0TcPdWg, SXPqk5EeT4KmdWM5u4rIyQ, Ewiv9Y4PSLqp223pl0ML_g, adtvypESQuuITHR4iCmIPg)

  • test-windows11-64-25h2/debug-mochitest-browser-chrome - 4 of 4 failed on the same (retriggered) task (failed: Lb2USNliTIyCmL2PPE4ALQ, XwVgPosNTUKSEcaG65QrlA, P8I1-PlKQHqJBgrC1QAPdw, fzeXcz1VQryLT8EvbGrAEA)

  • test-macosx1015-64-qr/debug-crashtest-swr - 4 of 4 failed on the same (retriggered) task (failed: dcV6HRwSRBWlavZZ1RFgmw, HYHeem5-RlGPjcP26fr69A, Bi8XRr2CS1arDvwN6DaVmw, e-OqvahSQ7WfzBgoC18_Fw)

  • test-macosx1015-64-qr/debug-crashtest - 4 of 4 failed on the same (retriggered) task (failed: KgYZD7Z9R6mLt2yr4I6IiA, VZz9GGaVQU6g-sEu1Fh7Hg, dciRMJV5QZKeWrK573-v0A, YRN5pDp0QoiXA0sdJWWFpw)

  • test-linux2404-64/debug-mochitest-plain-xorig - 4 of 4 failed on the same (retriggered) task (failed: NuAR2fK3QViTJSw6spuiYg, Pgh_gBgPTzSGNhCzEStPMA, fYTcx4r3STywToZ1CjhSRw, DvaYPGcFSAaFEP9CB_sbzw)

  • test-linux2404-64/debug-mochitest-plain-nofis - 4 of 4 failed on the same (retriggered) task (failed: YLtyRpIQQNmVdCGTXT2pjA, XRDiIXodSv2qeONqOzVvFw, CnSJ1FB0RsOy1z_hQtkGjg, I4m78_F0Rf66GkH2aK9l5A)

  • test-android-em-14-x86_64/debug-geckoview-mochitest-plain - 4 of 4 failed on the same (retriggered) task (failed: PG5UyTlRRbm-BREfIzFCfw, T8OfNFLITmG7Hj9mG_erwg, by_qKtMVSNygmLUdK29dGw, PZwkjKrBT1yiNTgrzuinAA)

  • test-android-em-14-x86_64/debug-geckoview-mochitest-plain-nofis - 4 of 4 failed on the same (retriggered) task (failed: YcYl0BpcTLiU9E0UqhvooQ, AMYjcghgRK-5JWr6iCdKlQ, Cy8VB1R_TDGB3t5uI5YwrQ, JCgmq_gIRzy4yGF31Lj_pQ)

  • test-windows11-64-24h2/debug-crashtest-swr - 4 of 4 failed on the same (retriggered) task (failed: cJ1Sq_xXS7uBZxE8IF1J-w, CtQ52mTKTUyPv-n9jnKPnw, XzJBbnf_SEmE9Dir4hLfDg, OIJUtRL8TOqgM-Gfb2k-_A)

  • test-macosx1500-aarch64/debug-mochitest-browser-chrome - 4 of 4 failed on the same (retriggered) task (failed: YxemnrMTS5mVHa_tAf53ww, UmsJWL2AQ7CLg52DD2JUCw, DYyif_XjSFWd3WGTqTw-dA, eiVI7Yr5SjKJOO48cvyLxA)

  • test-android-em-14-x86_64/debug-geckoview-mochitest-plain-aab-nofis - 4 of 4 failed on the same (retriggered) task (failed: SR8OJo6KSsiyif5E8UhwgQ, bGXHpHpBTcilZO7oThtf9Q, TjgKvhJpR-Omfw9YQ0vj1Q, JyoSzT0yS52lVF6-MXJlAA)

  • test-android-em-14-x86_64/debug-geckoview-mochitest-plain-isolated - 4 of 4 failed on the same (retriggered) task (failed: QVnDqGSJT8-APxj7JRaioA, UN_1mHR8TpmjEix6CluZ1w, LxaibGhhSIqh0AiBEynrmQ, IJLIcvfRQISCkJLDT2U89A)

  • test-macosx1500-aarch64/debug-mochitest-plain-xorig - 4 of 4 failed on the same (retriggered) task (failed: H9b9cYbUSAGZDyrevtGetA, cslQ5k3jSuCVe2OoMJ086w, Eod-pqs-TZWPtFbqXk9jrg, ST4RnniXTHOb0CDReITdJw)

  • test-linux2404-64/debug-crashtest-swr - 4 of 4 failed on the same (retriggered) task (failed: CKCWXwz8Tv-RiKXoIvrIdA, SJs3ZcikRUqSVWck9zFJJg, avW88kfMRGmXfsIULQq1zw, A6wO65B1RxWTtuM6b4FAYQ)

  • test-linux2404-64/debug-crashtest - 4 of 4 failed on the same (retriggered) task (failed: QxzQxLBCTjCSVtThCxvVnQ, fM47pgQaQj-rphBOYKQGNg, HGMd1JVSTyiGJB5IlMTv-Q, BawAP_FVR0SgH2p4SIJpjA)

  • test-windows11-32-25h2/debug-crashtest - 4 of 4 failed on the same (retriggered) task (failed: ENTKNHRkROCzFOxCc2gDew, VlNb0LYjRnuml2kGAWZ1Ug, SWDcVhXETFycZzTmCFukVg, Pat5Ud66RYq1HmZugJbPgQ)

  • test-linux2404-64/debug-mochitest-plain - 4 of 4 failed on the same (retriggered) task (failed: Ivm8Z0_QQYeDV5VwXu8q1A, U0QD1kpWQC6vh9gvLWP2_A, cScH2aMaSwKOpQxLv2u3rQ, SAGp6zYGTjOElYZbk5NBgA)

  • test-linux2404-64/debug-crashtest-swr-nofis - 4 of 4 failed on the same (retriggered) task (failed: KvYoptDcSWSPH7maZdtkug, XuWRacn7Td2zpzXdLyPjoA, JPIwWgmaS0OX3qf7UG0MJA, M9IxdSDmQ1-SNdg1k2WKtw)

  • test-macosx1500-aarch64/debug-mochitest-plain - 4 of 4 failed on the same (retriggered) task (failed: YG26CzbZSFSLlgiD9ed0rQ, Qjfvvm6ISPmarn3zyp83lA, c-5WYD16Rd6-Q0rt6hgtFQ, A-w9ZPiIQla7qXpnv6pU8g)

  • test-linux2404-64/debug-mochitest-plain-headless - 4 of 4 failed on the same (retriggered) task (failed: ZbECpNBdSLWiijoJVBgfbw, a2Mikd0sRQupesJMuhesuw, Go4me39uRQuksWmWHiwqqA, RPCK3Z2qQYmIWLbBDHj-Ig)

  • test-android-em-14-x86_64/debug-geckoview-crashtest-swr-nofis - 4 of 4 failed on the same (retriggered) task (failed: I49jDTrDTy6lUPfFej0g8g, IL98MYuyTC26g_3dJHzKvA, EhPzVZNmTjGs4Hn7beOWQQ, Hc7SeNjXTGiFx_QADWToxA)

  • test-windows11-64-25h2/debug-mochitest-plain-standalone - 4 of 4 failed on the same (retriggered) task (failed: RHyMiutHSeeByqmz8UjVFg, ClqA_RSpQ3aBwl-6j7VzLg, MRKQe9WXRSqjYJlEOgMkJg, QJXEPc6HSi6EWl1XKG2EwQ)

  • test-android-em-14-x86_64/debug-geckoview-mochitest-plain-fis-hv - 4 of 4 failed on the same (retriggered) task (failed: LDfnuWrES_-hh_a37eQwUg, XVjcieihRTai9nWpdTdliA, GCOqDy4fQp2n33GwwOERrg, fA450ZwzR2OH0_J07OQKkA)

  • test-android-em-14-x86_64/debug-geckoview-mochitest-plain-xorig - 4 of 4 failed on the same (retriggered) task (failed: bj3iVd8jQaeRf45T9ZuyUA, AXwJg6IoTFKsVh8z47s8eg, MK5On-4TQGCOOdl8sAMJgg, XiPYi4wYTemq3qmjZ8sMcg)

  • test-windows11-64-25h2/debug-mochitest-plain - 4 of 4 failed on the same (retriggered) task (failed: KgSnMfL9TEi3l1F6LHB2EA, Zulpu2L3R1q1isOSAKuW7A, S0YjcfIURgqCBukK5SSsjA, abSNCQibRyWGsjx7Q5BxSg)

  • test-windows10-64-2009-qr/debug-mochitest-plain - 4 of 4 failed on the same (retriggered) task (failed: dcaD53z3R2mOOr18Nmnk1g, ducEUWHRQWml42d1rW4XQw, TvarLMKOTHGLNGPAbAv85w, eLU8UQr3RD2F33qv4ujpSw)

  • test-linux2404-64/debug-crashtest-nofis - 4 of 4 failed on the same (retriggered) task (failed: Lfq8wF6zSeO0m9tOiXNyyQ, JRtE7pl-RC6ejQYUS9YIzg, X4nA0E02RN-AYSIxUgPWlw, Km15Gqk0T4WQn7itlku1Xw)

  • test-windows11-64-24h2/debug-crashtest - 4 of 4 failed on the same (retriggered) task (failed: fbuS2NC-QlKgRyAR-t2Irg, H5SW24j3Swe9qlLvFKNI2A, OH8Ygb9-S_6cdl20JnF5qA, cn4eR3a4QFqMQeI5-dQc2A)

  • test-android-em-14-x86_64/debug-geckoview-crashtest-nofis - 4 of 4 failed on the same (retriggered) task (failed: ebq-8AR_S7WwDLQ7dIgTCA, AMQC0n9UQyejHoOhLvYFMw, Ixl4r1Y8TImItqk_VxHpEg, KzuTeP5HSRGakkcodl_tZg)

  • test-macosx1500-aarch64-vms/debug-crashtest - 4 of 4 failed on the same (retriggered) task (failed: beIJD1ZcS86J1LLJiXzwPg, VouUc5jpThGM9kU7Tlvv3A, HQt3kxKySLG_26ENtfQhDw, SCvyTrr-Q8K4zThWFjw3Ng)

  • test-windows11-64-25h2/debug-mochitest-browser-chrome-standalone - 4 of 4 failed on the same (retriggered) task (failed: eale2ZSITjWcGB7LtajRGg, Muwc7JdnTEadvkQk7AXcbA, elOc5gKLQDCLiNlcqUIsRg, OFA9r9viQUKXKxTMua8JRg)

  • test-linux2404-64/debug-mochitest-plain-standalone - 4 of 4 failed on the same (retriggered) task (failed: HV6a_b1lQAOTei5_ju1LIQ, cx_GA3A6RhmG0kqlC72WAA, BpIlD4dUTJq9a06UrwEb4w, HcFAm81XTkib-31IFjEFFQ)

  • test-android-em-14-x86_64/debug-geckoview-crashtest - 4 of 4 failed on the same (retriggered) task (failed: J6VV5PnJSbaCSK9qATldXw, foxprNA7Rn-WCcuNXRhZ4w, NX68fXcUSvS8j_Ph3XkTjw, HX45qydkQsyRWivgD1hjrg)

  • test-windows11-32-25h2/debug-xpcshell - 4 of 4 failed on the same (retriggered) task (failed: KpuFFxEgQ32CQigaBFM7Eg, JMS9_nA3QKyIvy47zO3-Ag, A6V_2DhzSEiKHuOU86Gnwg, DWN2Lma3TvqSdKnFsJ_DSQ)

  • test-windows11-64-25h2/debug-mochitest-browser-chrome-msix - 4 of 4 failed on the same (retriggered) task (failed: KeHOi7_xQKGHC9ZqiVannA, GgdksNAtSSKf3VdvczR_dg, Map6qcPqQW-OiXS-tVwHAg, I93WA7kHSqKTIDMi5dYEaA)

Needs Investigation (Possible Intermittents):

  • test-macosx1015-64-qr/debug-xpcshell - 4 of 4 failed on the same (retriggered) task (failed: Pie6mp_WTZycN4wEmyh7vg, NmV6QppVQAy7AWc3rlqDpQ, aAJH-ocgQian1NzLAJpI3Q, UNNHZ7EGQZGBEJnsre8eng)
  • test-android-em-14-x86_64/debug-geckoview-xpcshell - 4 of 4 failed on the same (retriggered) task (failed: Q8wReTuASV6iKz1AySGxZQ, fFI3GX4bT0mV7bLnV4_Gqw, bUFteNi-QNq604CS2RFBWw, bS1ebA7OTOmeCriX2UtNCg)
  • test-android-em-14-x86_64/debug-geckoview-xpcshell-isolated - 4 of 4 failed on the same (retriggered) task (failed: ScYMxRfuR-K0SzyG_vDWhA, NsCaJhWESweOTqhbHV2vvQ, PyPmKSNGTrGRUR27vQSggA, JsF132UcQ0qIB14aYd9y9g)
  • test-windows10-64-2009-qr/debug-xpcshell - 4 of 4 failed on the same (retriggered) task (failed: HOzCWgXMTIC62dyExzO7QA, cbw4BtGWSJOK6vMoAOchnQ, UWVrUoAvSiyGS82-4zeafA, EbV6NJrDRSuNEWXcUmyoLw)
  • test-macosx1500-aarch64/debug-xpcshell - 4 of 4 failed on the same (retriggered) task (failed: QxVzutzsRdilzU0bcKA_Wg, NarmDyIWS9W9oM816LXSSw, CmXl91imTMyv761IoQCUWQ, DJ25AjFNRMy85i_ZdoZ6Qw)
  • test-macosx1500-aarch64-vms/debug-xpcshell - 4 of 4 failed on the same (retriggered) task (failed: XHP_MuUaSAeYhyKvvJaPnw, Kf6gU8f2TMujpo1aPDHgvA, FdNoRtXKSPuAYbY58C5BcA, IZasr7ySTHuZ8MfHqUGb1Q)
  • test-windows11-64-25h2/debug-xpcshell - 4 of 4 failed on the same (retriggered) task (failed: b_wRoou5TPOXN469TU1F1g, cH34kUEFSGGotXK9w0c-3g, bdVPdf3KQb6oU7CrA_ShIg, OpnnBvBCR9qrBxYBcpXLgQ)
  • test-linux2404-64/debug-xpcshell - 4 of 4 failed on the same (retriggered) task (failed: QKsfycCzQtqqa_0rmm9Xfg, eWhiWp5KTxSnGzLJJmYKKQ, Pe5O2b16SLWlgMGKSz5y3w, Xckqs-JASQOo6mAz8scFGQ)
  • test-linux2404-64/debug-xpcshell-nofis - 4 of 4 failed on the same (retriggered) task (failed: bAdAobagThGNUzfUCRkiKA, JL_kj6h9RHy-xq3iMV_YQg, Nzg4RTinT12FxxAhjQMpVQ, T_hjr1i5QvGrg1ajwdqoLQ)

These failures could mean that the library update changed something and caused
tests to fail. You'll need to review them yourself and decide where to go from here.

In either event, I have done all I can and you will need to take it from here. If you
don't want to land my patch, you can replicate it locally for editing with
./mach vendor security/nss/moz.yaml

When reviewing, please note that this is external code, which needs a full and
careful inspection - not a rubberstamp.

Assignee: update-bot → jschanck
Flags: needinfo?(jschanck)

https://hg.mozilla.org/mozilla-central/rev/d628feb8b2bc

Status: ASSIGNED → RESOLVED
Closed: 7 days ago
status-firefox162: affected → fixed
Resolution: --- → FIXED
Target Milestone: --- → 162 Branch
Flags: needinfo?(jschanck)
No longer regressions: 2092346
See Also: → 2092346
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: