Description of problem: Firefox 107.0 requires NSS 3.84 according to https://src.fedoraproject.org/rpms/firefox/c/34d53c32b50b3416c822e231c6ec6ec4e6369f7c?branch=rawhide In the upstream Firefox 107.0 from https://www.mozilla.org/en-US/firefox/all/#product-desktop-release Help > More Troubleshooting Information > Library versions > Expected minimum version shows NSS 3.84. The firefox-107.0-1 builds failed in koji https://koji.fedoraproject.org/koji/packageinfo?packageID=37 NSS 3.83 is the latest version built in koji https://koji.fedoraproject.org/koji/packageinfo?packageID=248 NSS 3.85 was released upstream according to https://firefox-source-docs.mozilla.org/security/nss/releases/index.html Version-Release number of selected component (if applicable): nss-3.83.0-1.fc38 firefox-107.0-1.fc38 Actual results: Firefox 107.0 requires NSS 3.84, but NSS 3.83 is the latest version built Expected results: NSS 3.84 or higher would be built allowing Firefox 107.0 to be built sucessfully
koji rawhide builds started: https://koji.fedoraproject.org/koji/taskinfo?taskID=94280000 f37, f36, and f35 will follow soon.
FEDORA-2022-0187d93584 has been submitted as an update to Fedora 35. https://bodhi.fedoraproject.org/updates/FEDORA-2022-0187d93584
All builds are complete. Updates for f37, f36, and f35 have been submitted. When f35 goes stable, this bug will automatically close.
(In reply to Bob Relyea from comment #3) > All builds are complete. > Updates for f37, f36, and f35 have been submitted. > When f35 goes stable, this bug will automatically close. Thanks. When the Firefox 107.0 builds are done again, they might need to be added to the nss-3.85.0-1 bodhi updates (or vice versa) so that they go stable at the same time.
Is there a simple way that the necessary nss updates can be built ready for when the regular firefox version increments drop? I'm not sure how the nss github code is connected to firefox within Mozilla but it does seem impossible for Fedora firefox updates to appear without the latest nss. I presume that the 2 are tied together inside Mozilla.
FEDORA-2022-0187d93584 has been pushed to the Fedora 35 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2022-0187d93584` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-0187d93584 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Just for fun, I did some scratch builds of FF 107.0 with the new nss: https://koji.fedoraproject.org/koji/taskinfo?taskID=94367463 https://koji.fedoraproject.org/koji/taskinfo?taskID=94367626 https://koji.fedoraproject.org/koji/taskinfo?taskID=94367632 https://koji.fedoraproject.org/koji/taskinfo?taskID=94367638 Everything except F38 built fine.
Thank you, I am running the F37 version now, seems to work so far.
(In reply to Brian Morrison from comment #5) > Is there a simple way that the necessary nss updates can be built ready for > when the regular firefox version increments drop? > > I'm not sure how the nss github code is connected to firefox within Mozilla > but it does seem impossible for Fedora firefox updates to appear without the > latest nss. > > I presume that the 2 are tied together inside Mozilla. The main NSS repository is at https://hg.mozilla.org/projects/nss as far as I can tell, and https://github.com/nss-dev/nss is a read-only mirror of that from its description. Firefox 107.0 required NSS 3.84 released on October 13, not the latest NSS 3.85 released on November 10.
OK, I didn't know about the precise nss version needed for firefox, but I can see that bodhi and koji appear not to have nss-3.84 for Fedora 37 or indeed any other distro version. I am simply wondering how to get a Fedora firefox rpm available in a timely fashion as Mozilla seems determined to stick to their aggressive release cadence. It seems that nss is almost more of a pacing package than firefox itself.
(In reply to Brian Morrison from comment #10) > OK, I didn't know about the precise nss version needed for firefox, but I > can see that bodhi and koji appear not to have nss-3.84 for Fedora 37 or > indeed any other distro version. > > I am simply wondering how to get a Fedora firefox rpm available in a timely > fashion as Mozilla seems determined to stick to their aggressive release > cadence. > > It seems that nss is almost more of a pacing package than firefox itself. If each nss version were packaged for Fedora rather than every second one, then this problem might be avoided. That would clearly be up to the nss maintainers. There have been many other reasons for Firefox not to build including gcc-specific problems as it's built with clang upstream. The firefox-107.0-1 rebuilds today failed on ppc64 and s390x apparently due to a crash reporter-related problem, but the x86_64 builds are available and running normally for me. https://koji.fedoraproject.org/koji/taskinfo?taskID=94388864
FEDORA-2022-0187d93584 has been pushed to the Fedora 35 stable repository. If problem still persists, please make note of it in this bug report.