340724 - Upgrade NSS on Mozilla 1.8 branch for 1.8.1 final

Status: RESOLVED FIXED

(Core :: Security: PSM, defect, P1)

Description

[Kai Engert (:KaiE:)]

Prior to the release of FF/TB 2, we'll need to update the NSS version on the 1.8 branch to pick up some fixes.

This bug tracks the required NSS bugs.

Comment 1

[Kai Engert (:KaiE:)]

Attachment: patch v1 [checked in]

Comment 2

[Kai Engert (:KaiE:)]

fixed on trunk

Comment 3

[Kai Engert (:KaiE:)]

We'll have to do this again to pick up more fixes.

Comment 4

[Kai Engert (:KaiE:)]

Attachment: Additional Patch v2 [checked in]

Update NSS to snapshot NSS_3_11_20060731_TAG

Comment 5

[Kai Engert (:KaiE:)]

patch checked in to trunk

Comment 6

[Kai Engert (:KaiE:)]

Attachment: Patch v2 - for MOZILLA_1_8_BRANCH [checked in]

Comment 7

[Kai Engert (:KaiE:)]

Comment on attachment 231775 [details] [diff] [review]
Patch v2 - for MOZILLA_1_8_BRANCH [checked in]

This patch is equivalent to the one for the trunk, reviewed by Wan-Teh. It was created using a "cvs rdiff" between snapshots.

Requesting approval to land on 1.8 branch for Firefox 2.

This bug contains bugfixes from the NSS 3.11.2 and 3.11.3 patch releases.

It contains many fixes to issues found by Coverity and for FIPS 140-2 validation.

Comment 8

[Kai Engert (:KaiE:)]

fixed on trunk and branch

Comment 9

[Kai Engert (:KaiE:)]

It's time to do it again, reopening.

Comment 10

[Kai Engert (:KaiE:)]

Attachment: Addtl. Patch v3

Update Mozilla to use NSS_3_11_20060831_TAG

Comment 11

[Kai Engert (:KaiE:)]

Attachment: equiv. Patch v3 for MOZILLA_1_8_BRANCH

Comment 12

[Daniel Veditz [:dveditz]]

In case it helps the 1.8.1 triage team the equivalent bonsai period is (thanks kaie):
http://bonsai.mozilla.org/cvsquery.cgi?treeid=default&module=all&branch=NSS_3_11_BRANCH&branchtype=match&dir=mozilla%2Fsecurity%2Fnss%2Flib&file=&filetype=match&who=&whotype=match&sortby=Date&hours=2&date=explicit&mindate=2006-07-31&maxdate=2006-08-31&cvsroot=%2Fcvsroot

Which based on checkin comments appears to equate to the following buglist:
https://bugzilla.mozilla.org/buglist.cgi?bugidtype=include&order=bugs.bug_id&bug_id=,350640,337013,349965,348359,349632,11,336813,10,11,330056,304361,349966,347409,11,349920,349632,225525,341323,342476,342476,53427,53427,336813,341708,347024,336509,336509

Comment 13

[Kai Engert (:KaiE:)]

Comment on attachment 236253 [details] [diff] [review]
Addtl. Patch v3

This patch checked in to trunk.

Comment 14

[Mike Schroepfer]

Comment on attachment 236254 [details] [diff] [review]
equiv. Patch v3 for MOZILLA_1_8_BRANCH

a=schrep for 1.8 drivers.  Thanks for putting together a low-risk patch for the critical issues.

Comment 15

[Kai Engert (:KaiE:)]

Thanks for approving.
Checked in to 1.8 branch for target 1.8.1.