Closed Bug 2092218 Opened 1 day ago Closed 1 day ago

Update NSS to new version e2a658b075e32fb0e19dc81f383aefa25cd1b346 from 2026-11-11 02:50:38 UTC

Categories

(Core :: Security: PSM, enhancement)

Product:
Core
Component:
Security: PSM
Type:
enhancement

Tracking

()

Status:
RESOLVED FIXED
Milestone:
162 Branch
Tracking Flags:
Tracking Status
firefox162 --- fixed

People

(Reporter: update-bot, Assigned: update-bot)

References

(Blocks 1 open bug)

Details

(Whiteboard: [3pl-filed][task_id: CVIEw35gQ12Dtl42KVqvWg])

Attachments

(1 external file)

This update covers 4 commits. Here are the overall diff statistics, and then the commit information.

security/nss/build.sh | 24 ++-
security/nss/coreconf/android.sh | 80 ++++++++++
security/nss/coreconf/ios.sh | 71 ++++++++
security/nss/coreconf/nspr.sh | 11 +-
security/nss/doc/src/try.md | 4 +
security/nss/gtests/certdb_gtest/name_constraints_unittest.cc | 14 +-
security/nss/gtests/freebl_gtest/mpi_unittest.cc | 12 +-
security/nss/gtests/ssl_gtest/ssl_keylog_unittest.cc | 8 +
security/nss/help.txt | 17 ++
security/nss/lib/freebl/mpi/mpi_amd64_common.S | 4 +-
security/nss/moz.yaml | 4 +-
security/nss/readme.md | 16 ++
security/nss/taskcluster/docker/android/Dockerfile | 31 +++
security/nss/taskcluster/kinds/build/android.yml | 29 +++
security/nss/taskcluster/kinds/build/ios.yml | 24 +++
security/nss/taskcluster/kinds/build/kind.yml | 2 +
security/nss/taskcluster/kinds/docker-image/kind.yml | 3 +
security/nss/taskcluster/kinds/test/kind.yml | 4 +
security/nss/taskcluster/nss_taskgraph/transforms/build.py | 36 ++++-
security/nss/taskcluster/nss_taskgraph/transforms/platforms.py | 4 +-
20 files changed, 375 insertions(+), 23 deletions(-)

e2a658b075e32fb0e19dc81f383aefa25cd1b346 by Stephen A Pohl <spohl@mozilla.com>

https://github.com/mozilla/nss/commit/e2a658b075e32fb0e19dc81f383aefa25cd1b346
Authored: 2026-11-11 02:50:38 +0000
Committed: 2026-11-11 02:50:38 +0000

Bug 2091600: Use byte alignment for x86_64 MPI assembly. r=nss-reviewers,jschanck

Differential Revision: https://phabricator.services.mozilla.com/D341654

Files Modified:

  • lib/freebl/mpi/mpi_amd64_common.S

d8bdecfe2fc1f36173b5b1298247756a1c528ed0 by John Schanck <jschanck@mozilla.com>

https://github.com/mozilla/nss/commit/d8bdecfe2fc1f36173b5b1298247756a1c528ed0
Authored: 2026-11-10 22:32:50 +0000
Committed: 2026-11-10 22:32:50 +0000

Bug 2081582 - clang-format. r=nss-reviewers,keeler

Differential Revision: https://phabricator.services.mozilla.com/D341607

Files Modified:

  • gtests/certdb_gtest/name_constraints_unittest.cc

f298f4da3ebb14444f53b7518f6292699d1811e0 by John Schanck <jschanck@mozilla.com>

https://github.com/mozilla/nss/commit/f298f4da3ebb14444f53b7518f6292699d1811e0
Authored: 2026-11-10 18:46:45 +0000
Committed: 2026-11-10 18:46:45 +0000

Bug 2083958 - add android and iOS builds to CI. r=nss-reviewers,djackson

Differential Revision: https://phabricator.services.mozilla.com/D335443

Files Added:

  • taskcluster/docker/android/Dockerfile
  • taskcluster/kinds/build/android.yml
  • taskcluster/kinds/build/ios.yml

Files Modified:

  • doc/src/try.md
  • taskcluster/kinds/build/kind.yml
  • taskcluster/kinds/docker-image/kind.yml
  • taskcluster/kinds/test/kind.yml
  • taskcluster/nss_taskgraph/transforms/build.py
  • taskcluster/nss_taskgraph/transforms/platforms.py

9c54836a1f0cde02cf043e3cc9546f2e7a297c2b by John Schanck <jschanck@mozilla.com>

https://github.com/mozilla/nss/commit/9c54836a1f0cde02cf043e3cc9546f2e7a297c2b
Authored: 2026-11-10 18:46:45 +0000
Committed: 2026-11-10 18:46:45 +0000

Bug 2083958 - support cross-compiling for android and iOS in build.sh. r=nss-reviewers,keeler

Differential Revision: https://phabricator.services.mozilla.com/D335442

Files Added:

  • coreconf/android.sh
  • coreconf/ios.sh

Files Modified:

  • build.sh
  • coreconf/nspr.sh
  • gtests/freebl_gtest/mpi_unittest.cc
  • gtests/ssl_gtest/ssl_keylog_unittest.cc
  • help.txt
  • readme.md

I've submitted a try run for this commit: https://treeherder.mozilla.org/jobs?repo=try&revision=de7349d09c395cb2ee7931887818fb02f049127e

Assignee: nobody → update-bot
Attachment #9682102 - Attachment description: Bug 2092218 - Update NSS to e2a658b075e32fb0e19dc81f383aefa25cd1b346 → Bug 2092218 - Update NSS to e2a658b075e32fb0e19dc81f383aefa25cd1b346. UPGRADE_NSS_RELEASE
Status: NEW → ASSIGNED
Pushed by jschanck@mozilla.com: https://github.com/mozilla-firefox/firefox/commit/d26993f018f9 https://hg.mozilla.org/integration/autoland/rev/e852c186eb18 Update NSS to e2a658b075e32fb0e19dc81f383aefa25cd1b346. UPGRADE_NSS_RELEASE r=jschanck

https://hg.mozilla.org/mozilla-central/rev/e852c186eb18

Status: ASSIGNED → RESOLVED
Closed: 1 day ago
status-firefox162: affected → fixed
Resolution: --- → FIXED
Target Milestone: --- → 162 Branch

The try push is done, we found jobs with unclassified failures.

Needs Close Investigation:

  • test-linux2404-64/opt-test-verify-path-1 - 4 of 4 failed on the same (retriggered) task (failed: XHXKgIQmTbGEQS9xcXLbsg, VZmovLBwR3KtxNVTBHPBkQ, Cn54dDk8Q4OIuz6mtdYKcw, QvY2dZ8tQq-5n2LBwg76XA)
  • test-linux2404-64/debug-test-verify-path-7 - 4 of 4 failed on the same (retriggered) task (failed: ZUhjs9yeQaO-80ZXXjWScA, LmkzUdE0Qp6OycOUJBYAnA, afPK9ihETe6nHVBnnHllYw, S-ME2g7uR2C4NSDkqGIR4w)
  • test-macosx1500-aarch64/debug-test-verify-path-7 - 4 of 4 failed on the same (retriggered) task (failed: Pv3cGY8gRcmVUFrdkwxg9A, SuN91PAuS62B1pmF0CGD3Q, LQAlLCwMS4-hpSmQGSYJhQ, QSBmLSkSRV-QD9cZT-3M_A)
  • test-windows11-64-25h2/opt-test-verify-path-1 - 4 of 4 failed on the same (retriggered) task (failed: XsLmfinpTpaAFI5Fg-iltw, W6kGXH7sT_2S0k9KoFjOPg, VMCAKVzsRdWze_YAsvb6DA, NCkD4m5kSJKGSl8QN_tSCA)
  • test-windows11-32-25h2/opt-test-verify-path-1 - 4 of 4 failed on the same (retriggered) task (failed: YlaLMZyFQnGNQrQj2UXhYg, Wxhzpjm2RHiYNj6Vue0djA, UlBqDaMNR7G1jG2wu4PRQg, UbGpN6bTTEacHhI9_kBMUQ)
  • test-macosx1500-aarch64/opt-test-verify-path-1 - 4 of 4 failed on the same (retriggered) task (failed: QHhgRWWsS2O0Q2QNELhjLg, KAfHUvt3TLCTm0HgSEuAyw, GUlnwIvDRIm7LZl5fA46RQ, RUqzcCJYT8q8C1Z6buk5lw)
  • test-macosx1500-aarch64/opt-test-verify-path-5 - 4 of 4 failed on the same (retriggered) task (failed: G8PYBRO-TOyTmQzKePI28Q, QK3QdewjSceF1w1h4aLxHg, ONGhp4hAQvis47Z5ffSDGA, GGyxhJhWRg6mjpAXaR0BxA)
  • test-macosx1500-aarch64/debug-test-verify-path-2 - 4 of 4 failed on the same (retriggered) task (failed: H0C5SymiQBO8qCQp5Du7mA, WVl4xmThRz-LEi-GlCYVNw, Lz-iTw5rRCyaTIIVtL09xw, FPyqHEssRGWImZ5DJcnlDA)
  • test-linux2404-64-tsan/opt-test-verify-path-7 - 4 of 4 failed on the same (retriggered) task (failed: RbqM1DO4S6-Gy-sSEcu0iw, TFnxeCfMRUOTjIxNw1C6PA, GaQRogHaTO-HOiBbW8DJ5g, YNxrxE0gT5W-OAUJaLAocw)
  • test-windows11-64-25h2/debug-test-verify-path-7 - 4 of 4 failed on the same (retriggered) task (failed: MhnWmXttRoy8z5rZ6gGmGg, LSd-0LPnQhuhnK0EwCs4tg, UuxMIex4SCOhKwdSTSZx3Q, dQMLnzRuSyekFkfmL2W2Mw)
  • test-windows11-32-25h2/debug-test-verify-path-7 - 4 of 4 failed on the same (retriggered) task (failed: WVNTwvypSOC7SKXmcDDU4A, XOmiUo_FTSKk-VgCZH94WA, Xh2UDqQHS5avnKE_r8MPfw, fc0KhijoRCKntNo97zvBJQ)

Known Issues:

  • test-windows11-64-25h2/debug-test-verify-path-5 - 1 of 4 failed on the same (retriggered) task (failed: CdJEKh8ISri4M_1fPDnmUw)

These failures could mean that the library update changed something and caused
tests to fail. You'll need to review them yourself and decide where to go from here.

In either event, I have done all I can and you will need to take it from here. If you
don't want to land my patch, you can replicate it locally for editing with
./mach vendor security/nss/moz.yaml --revision e2a658b075e32fb0e19dc81f383aefa25cd1b346

When reviewing, please note that this is external code, which needs a full and
careful inspection - not a rubberstamp.

You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: