NSS 3.101 Release

--0000000000008f8188061a888e68
Content-Type: text/plain; charset="UTF-8"

Dear all,

Network Security Services (NSS) 3.101 was tagged and released on
7th June 2024.

The HG tag is NSS_3_101_RTM. This version of NSS requires NSPR
4.35 or newer.

NSS 3.101 source distributions are available on ftp.mozilla.org
for secure HTTPS download:
<https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_101_RTM/src/>

Changes:
  - Bug 1900413 - add diagnostic assertions for SFTKObject refcount.
  - Bug 1899759 - freeing the slot in DeleteCertAndKey if authentication
failed
  - Bug 1899883 - fix formatting issues.
  - Bug 1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  - Bug 1899593 - remove invalid acvp fuzz test vectors.
  - Bug 1898830 - pad short P-384 and P-521 signatures gtests.
  - Bug 1898627 - remove unused FreeBL ECC code.
  - Bug 1898830 - pad short P-384 and P-521 signatures.
  - Bug 1898825 - be less strict about ECDSA private key length.
  - Bug 1854439 - Integrate HACL* P-521.
  - Bug 1854438 - Integrate HACL* P-384.
  - Bug 1898074 - memory leak in create_objects_from_handles.
  - Bug 1898858 - ensure all input is consumed in a few places in
mozilla::pkix
  - Bug 1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS
policy
  - Bug 1748105 - clean up escape handling
  - Bug 1896353 - Use lib::pkix as default validator instead of the old-one
  - Bug 1827444 - Need to add high level support for PQ signing.
  - Bug 1548723 - Certificate Compression: changing the allocation/freeing
of buffer + Improving the documentation
  - Bug 1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS
policy
  - Bug 1893404 - Allow for non-full length ecdsa signature when using
softoken
  - Bug 1830415 - Modification of .taskcluster.yml due to mozlint indent
defects
  - Bug 1793811 - Implement support for PBMAC1 in PKCS#12
  - Bug 1897487 - disable VLA warnings for fuzz builds.
  - Bug 1895032 - remove redundant AllocItem implementation.
  - Bug 1893334 - add PK11_ReadDistrustAfterAttribute.
  - Bug 215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  - Bug 1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  - Bug 1894572 - sftk_getParameters(): Fix fallback to default variable
after error with configfile.
  - Bug 1830415 - Switch to the mozillareleases/image_builder image

NSS 3.101 shared libraries are backwards-compatible with all
older NSS 3.x shared libraries. A program linked with older NSS
3.x shared libraries will work with this new version of the
shared libraries without recompiling or relinking. Furthermore,
applications that restrict their use of NSS APIs to the
functions listed in NSS Public Functions will remain compatible
with future versions of the NSS shared libraries.

Bugs discovered should be reported by filing a bug report at
<https://bugzilla.mozilla.org/enter_bug.cgi?product=NSS>

Release notes are available (after a short delay) at
<https://firefox-source-docs.mozilla.org/security/nss/releases/index.html>.

Best,
Anna

-- 
You received this message because you are subscribed to the Google Groups "[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/CAMeH0%2BooHgOdxjBy%3D%2B0RBPz2KtGHx8TJQV6YpKG8hc3KheATog%40mail.gmail.com.

--0000000000008f8188061a888e68
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Dear all,<br><br>Network Security Services (NSS) 3.10=
1 was tagged and released on<br>7th June 2024.<br><br>The HG tag is NSS_3_1=
01_RTM. This version of NSS requires NSPR<br>4.35 or newer.<br><br>NSS 3.10=
1 source distributions are available on <a href=3D"http://ftp.mozilla.org">=
ftp.mozilla.org</a><br>for secure HTTPS download:<br>&lt;<a href=3D"https:/=
/ftp.mozilla.org/pub/security/nss/releases/NSS_3_101_RTM/src/">https://ftp.=
mozilla.org/pub/security/nss/releases/NSS_3_101_RTM/src/</a>&gt;<br><br>Cha=
nges:<br>=C2=A0 - Bug 1900413 - add diagnostic assertions for SFTKObject re=
fcount. <br>=C2=A0 - Bug 1899759 - freeing the slot in DeleteCertAndKey if =
authentication failed<br>=C2=A0 - Bug 1899883 - fix formatting issues. <br>=
=C2=A0 - Bug 1889671 - Add Firmaprofesional CA Root-A Web to NSS.<br>=C2=A0=
 - Bug 1899593 - remove invalid acvp fuzz test vectors. <br>=C2=A0 - Bug 18=
98830 - pad short P-384 and P-521 signatures gtests.<br>=C2=A0 - Bug 189862=
7 - remove unused FreeBL ECC code. <br>=C2=A0 - Bug 1898830 - pad short P-3=
84 and P-521 signatures. <br>=C2=A0 - Bug 1898825 - be less strict about EC=
DSA private key length. <br>=C2=A0 - Bug 1854439 - Integrate HACL* P-521. <=
br>=C2=A0 - Bug 1854438 - Integrate HACL* P-384. <br>=C2=A0 - Bug 1898074 -=
 memory leak in create_objects_from_handles. <br>=C2=A0 - Bug 1898858 - ens=
ure all input is consumed in a few places in mozilla::pkix <br>=C2=A0 - Bug=
 1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy <=
br>=C2=A0 - Bug 1748105 - clean up escape handling <br>=C2=A0 - Bug 1896353=
 - Use lib::pkix as default validator instead of the old-one <br>=C2=A0 - B=
ug 1827444 - Need to add high level support for PQ signing.<br>=C2=A0 - Bug=
 1548723 - Certificate Compression: changing the allocation/freeing of buff=
er + Improving the documentation <br>=C2=A0 - Bug 1884444 - SMIME/CMS and P=
KCS #12 do not integrate with modern NSS policy<br>=C2=A0 - Bug 1893404 - A=
llow for non-full length ecdsa signature when using softoken<br>=C2=A0 - Bu=
g 1830415 - Modification of .taskcluster.yml due to mozlint indent defects<=
br>=C2=A0 - Bug 1793811 - Implement support for PBMAC1 in PKCS#12 <br>=C2=
=A0 - Bug 1897487 - disable VLA warnings for fuzz builds.<br>=C2=A0 - Bug 1=
895032 - remove redundant AllocItem implementation. <br>=C2=A0 - Bug 189333=
4 - add PK11_ReadDistrustAfterAttribute. <br>=C2=A0 - Bug 215997 =C2=A0- Cl=
ang-formatting of SEC_GetMgfTypeByOidTag update<br>=C2=A0 - Bug 1895012 - S=
et SEC_ERROR_LIBRARY_FAILURE on self-test failure<br>=C2=A0 - Bug 1894572 -=
 sftk_getParameters(): Fix fallback to default variable after error with co=
nfigfile. <br>=C2=A0 - Bug 1830415 - Switch to the mozillareleases/image_bu=
ilder image<br><br>NSS 3.101 shared libraries are backwards-compatible with=
 all<br>older NSS 3.x shared libraries. A program linked with older NSS<br>=
3.x shared libraries will work with this new version of the<br>shared libra=
ries without recompiling or relinking. Furthermore,<br>applications that re=
strict their use of NSS APIs to the<br>functions listed in NSS Public Funct=
ions will remain compatible<br>with future versions of the NSS shared libra=
ries.<br><br>Bugs discovered should be reported by filing a bug report at<b=
r>&lt;<a href=3D"https://bugzilla.mozilla.org/enter_bug.cgi?product=3DNSS">=
https://bugzilla.mozilla.org/enter_bug.cgi?product=3DNSS</a>&gt;<br><br>Rel=
ease notes are available (after a short delay) at<br>&lt;<a href=3D"https:/=
/firefox-source-docs.mozilla.org/security/nss/releases/index.html">https://=
firefox-source-docs.mozilla.org/security/nss/releases/index.html</a>&gt;.<b=
r><br>Best,<br></div>Anna<br></div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;[email protected]&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:[email protected]">dev-tech=
[email protected]</a>.<br />
To view this discussion on the web visit <a href=3D"https://groups.google.c=
om/a/mozilla.org/d/msgid/dev-tech-crypto/CAMeH0%2BooHgOdxjBy%3D%2B0RBPz2KtG=
Hx8TJQV6YpKG8hc3KheATog%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfo=
oter">https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/CAMeH=
0%2BooHgOdxjBy%3D%2B0RBPz2KtGHx8TJQV6YpKG8hc3KheATog%40mail.gmail.com</a>.<=
br />

--0000000000008f8188061a888e68--