Re: NSS 3.95 Release

Benjamin Beurdouche <[email protected]> Mon, 27 Nov 2023 11:08:43 +0100
Newsgroups gmane.comp.mozilla.crypto
Message-ID <[email protected]>
--Apple-Mail=_CD5963C8-2C90-44A1-80F0-5B63FF6D0846
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="UTF-8"

Thanks Anna for uploading the archive and sending out the email !
Thanks Dennis for handling that release !

B.

> On 27 Nov 2023, at 11:06, Anna Weine <[email protected]> wrote:
>=20
> Dear all,
>=20
> Network Security Services (NSS) 3.95 was released on 27 November 2023.
>=20
> The HG tag is NSS_3_95_RTM. This version of NSS requires NSPR 4.35 or new=
er.
>=20
> NSS 3.95 source distributions are available on ftp.mozilla.org <http://ft=
p.mozilla.org/> for
> secure HTTPS download:
> <https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_95_RTM/src/>
>=20
> Changes:
>=20
>  - Bug 1842932 - Bump builtins version number.
>  - Bug 1851044: Remove Email trust bit from Autoridad de Certificacion Fi=
rmaprofesional CIF A62634068 root cert.
>  - Bug 1855318: Remove 4 DigiCert (Symantec/Verisign) Root Certificates f=
rom NSS.
>  - Bug 1851049: Remove 3 TrustCor Root Certificates from NSS.
>  - Bug 1850982 - Remove Camerfirma root certificates from NSS.
>  - Bug 1842935 - Remove old Autoridad de Certificacion Firmaprofesional C=
ertificate.
>  - Bug 1860670 - Add four Commscope root certificates to NSS.
>  - Bug 1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates=
.
>  - Bug 1863605 - Include P-384 and P-521 Scalar Validation from HACL*
>  - Bug 1861728 - Include P-256 Scalar Validation from HACL*.
>  - Bug 1861265 After the HACL 256 ECC patch, NSS incorrectly encodes 256 =
ECC without DER wrapping at the softoken level
>  - Bug 1837987:Add means to provide library parameters to C_Initialize
>  - Bug 1573097 - clang format
>  - Bug 1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
>  - Bug 1858241 - Typo in ssl3_AppendHandshakeNumber
>  - Bug 1858241 - Introducing input check of ssl3_AppendHandshakeNumber
>  - Bug 1573097 - Fix Invalid casts in instance.c
>=20
>=20
> NSS 3.95 shared libraries are backwards-compatible with all older NSS
> 3.x shared libraries. A program linked with older NSS 3.x shared
> libraries will work with this new version of the shared libraries
> without recompiling or relinking. Furthermore, applications that
> restrict their use of NSS APIs to the functions listed in NSS Public
> Functions will remain compatible with future versions of the NSS
> shared libraries.
>=20
> Bugs discovered should be reported by filing a bug report at
> <https://bugzilla.mozilla.org/enter_bug.cgi?product=3DNSS>
>=20
> Release notes are available at
> <https://firefox-source-docs.mozilla.org/security/nss/releases/index.html=
>.
>=20
> Best,
> Anna
>=20
> --=20
> You received this message because you are subscribed to the Google Groups=
 "[email protected]" group.
> To unsubscribe from this group and stop receiving emails from it, send an=
 email to [email protected] <mailto:dev-tech-crypto+u=
[email protected]>.
> To view this discussion on the web visit https://groups.google.com/a/mozi=
lla.org/d/msgid/dev-tech-crypto/CAMeH0%2BpqdXTwL6DLqMAfu92RdmchUa7JUJVamaW_=
ktoM8YdvCg%40mail.gmail.com <https://groups.google.com/a/mozilla.org/d/msgi=
d/dev-tech-crypto/CAMeH0%2BpqdXTwL6DLqMAfu92RdmchUa7JUJVamaW_ktoM8YdvCg%40m=
ail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter>.

--=20
You received this message because you are subscribed to the Google Groups "=
[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to [email protected].
To view this discussion on the web visit https://groups.google.com/a/mozill=
a.org/d/msgid/dev-tech-crypto/3A82439B-94FD-4751-B39A-DBD0BCC28932%40mozill=
a.com.

--Apple-Mail=_CD5963C8-2C90-44A1-80F0-5B63FF6D0846
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="UTF-8"

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=
=3Dus-ascii"></head><body style=3D"overflow-wrap: break-word; -webkit-nbsp-=
mode: space; line-break: after-white-space;">Thanks Anna for uploading the =
archive and sending out the email !<div>Thanks Dennis for handling that rel=
ease !</div><div><br></div><div>B.<br id=3D"lineBreakAtBeginningOfMessage">=
<div><br><blockquote type=3D"cite"><div>On 27 Nov 2023, at 11:06, Anna Wein=
e &lt;[email protected]&gt; wrote:</div><br class=3D"Apple-interchange=
-newline"><div><div dir=3D"ltr">Dear all,<br><br>Network Security Services =
(NSS) 3.95 was released on 27 November 2023.<br><br>The HG tag is NSS_3_95_=
RTM. This version of NSS requires NSPR 4.35 or newer.<br><br>NSS 3.95 sourc=
e distributions are available on <a href=3D"http://ftp.mozilla.org/">ftp.mo=
zilla.org</a> for<br>secure HTTPS download:<br>&lt;<a href=3D"https://ftp.m=
ozilla.org/pub/security/nss/releases/NSS_3_95_RTM/src/">https://ftp.mozilla=
.org/pub/security/nss/releases/NSS_3_95_RTM/src/</a>&gt;<br><br>Changes:<br=
><br>&nbsp;- Bug 1842932 - Bump builtins version number.<br>&nbsp;- Bug 185=
1044: Remove Email trust bit from Autoridad de Certificacion Firmaprofesion=
al CIF A62634068 root cert.<br>&nbsp;- Bug 1855318: Remove 4 DigiCert (Syma=
ntec/Verisign) Root Certificates from NSS.<br>&nbsp;- Bug 1851049: Remove 3=
 TrustCor Root Certificates from NSS.<br>&nbsp;- Bug 1850982 - Remove Camer=
firma root certificates from NSS.<br>&nbsp;- Bug 1842935 - Remove old Autor=
idad de Certificacion Firmaprofesional Certificate.<br>&nbsp;- Bug 1860670 =
- Add four Commscope root certificates to NSS.<br>&nbsp;- Bug 1850598 - Add=
 TrustAsia Global Root CA G3 and G4 root certificates.<br>&nbsp;- Bug 18636=
05 - Include P-384 and P-521 Scalar Validation from HACL*<br>&nbsp;- Bug 18=
61728 - Include P-256 Scalar Validation from HACL*.<br>&nbsp;- Bug 1861265 =
After the HACL 256 ECC patch, NSS incorrectly encodes 256 ECC without DER w=
rapping at the softoken level<br>&nbsp;- Bug 1837987:Add means to provide l=
ibrary parameters to C_Initialize<br>&nbsp;- Bug 1573097 - clang format<br>=
&nbsp;- Bug 1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.<br>&nbs=
p;- Bug 1858241 - Typo in ssl3_AppendHandshakeNumber<br>&nbsp;- Bug 1858241=
 - Introducing input check of ssl3_AppendHandshakeNumber<br>&nbsp;- Bug 157=
3097 - Fix Invalid casts in instance.c<br><br><br>NSS 3.95 shared libraries=
 are backwards-compatible with all older NSS<br>3.x shared libraries. A pro=
gram linked with older NSS 3.x shared<br>libraries will work with this new =
version of the shared libraries<br>without recompiling or relinking. Furthe=
rmore, applications that<br>restrict their use of NSS APIs to the functions=
 listed in NSS Public<br>Functions will remain compatible with future versi=
ons of the NSS<br>shared libraries.<br><br>Bugs discovered should be report=
ed by filing a bug report at<br>&lt;<a href=3D"https://bugzilla.mozilla.org=
/enter_bug.cgi?product=3DNSS">https://bugzilla.mozilla.org/enter_bug.cgi?pr=
oduct=3DNSS</a>&gt;<br><br>Release notes are available at<br>&lt;<a href=3D=
"https://firefox-source-docs.mozilla.org/security/nss/releases/index.html">=
https://firefox-source-docs.mozilla.org/security/nss/releases/index.html</a=
>&gt;.<br><br>Best,<br>Anna</div><div><br class=3D"webkit-block-placeholder=
"></div>

-- <br>
You received this message because you are subscribed to the Google Groups "=
[email protected]" group.<br>
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:[email protected]">dev-tech=
[email protected]</a>.<br>
To view this discussion on the web visit <a href=3D"https://groups.google.c=
om/a/mozilla.org/d/msgid/dev-tech-crypto/CAMeH0%2BpqdXTwL6DLqMAfu92RdmchUa7=
JUJVamaW_ktoM8YdvCg%40mail.gmail.com?utm_medium=3Demail&amp;utm_source=3Dfo=
oter">https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/CAMeH=
0%2BpqdXTwL6DLqMAfu92RdmchUa7JUJVamaW_ktoM8YdvCg%40mail.gmail.com</a>.<br>
</div></blockquote></div><br></div></body></html>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;[email protected]&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:[email protected]">dev-tech=
[email protected]</a>.<br />
To view this discussion on the web visit <a href=3D"https://groups.google.c=
om/a/mozilla.org/d/msgid/dev-tech-crypto/3A82439B-94FD-4751-B39A-DBD0BCC289=
32%40mozilla.com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.goo=
gle.com/a/mozilla.org/d/msgid/dev-tech-crypto/3A82439B-94FD-4751-B39A-DBD0B=
CC28932%40mozilla.com</a>.<br />

--Apple-Mail=_CD5963C8-2C90-44A1-80F0-5B63FF6D0846--