NSS 3.116 Release

--000000000000c0116c063e8dd702
Content-Type: text/plain; charset="UTF-8"

Network Security Services (NSS) 3.116 was released on 11 September 2025.

The HG tag is NSS_3_116_RTM. This version of NSS requires NSPR
4.35 or newer. The latest version of NSPR is 4.37.

NSS 3.116 source distributions are available on ftp.mozilla.org
for secure HTTPS download:
<https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_116_RTM/src/>

Changes:

   - Bug 1983308 - disable DSA in NSS script tests.
   - Bug 1983308 - Disabling of some algorithms: generic cert.sh.
   - Bug 1981046 - Need to update to new mechanisms.
   - Bug 1983320 - Add ML-DSA public key printing support in NSS
command-line utilities.
   - Bug 1986802 - note embedded scts before revocation checks are
performed.
   - Bug 1983320 - Add support for ML-DSA keys and mechanisms in PKCS#11
interface.
   - Bug 1983320 - Add support for ML-DSA key type and public key structure.
   - Bug 1983320 - Enable ML-DSA integration via OIDs support and SECMOD
flag.
   - Bug 1983308 - disable kyber.
   - Bug 1965329 - Implement PKCS #11 v3.2 PQ functions (use verify
signature).
   - Bug 1983308 - Disable dsa - gtests.
   - Bug 1983313 - make group and scheme support in test tools generic.
   - Bug 1983770 - Create GH workflow to automatically close PRs.
   - Bug 1983308 - Disable dsa - base code.
   - Bug 1983308 - Disabling of some algorithms: remove dsa from pk11_mode.
   - Bug 1983308 - Disable seed and RC2 bug fixes.
   - Bug 1982742 - restore support for finding certificates by decoded
serial number.
   - Bug 1984165 - avoid CKR_BUFFER_TO_SMALL error in trust lookups.
   - Bug 1983399 - lib/softtoken/{sdb.c,sftkdbti.h}: Align
sftkdb_known_attributes_size type.
   - Bug 1965329 - Use PKCS #11 v3.2 KEM mechanisms and functions.

NSS 3.116 shared libraries are backwards-compatible with all
older NSS 3.x shared libraries. A program linked with older NSS
3.x shared libraries will work with this new version of the
shared libraries without recompiling or relinking. Furthermore,
applications that restrict their use of NSS APIs to the
functions listed in NSS Public Functions will remain compatible
with future versions of the NSS shared libraries.

Bugs discovered should be reported by filing a bug report at
<https://bugzilla.mozilla.org/enter_bug.cgi?product=NSS>

Release notes are available at
<https://firefox-source-docs.mozilla.org/security/nss/releases/index.html>.

-- 
You received this message because you are subscribed to the Google Groups "[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/CAFgAd7H5%3DwX9cd4PhtzWJgmgSGEZp1vOGaMb%2By6fL4fL6nTgoQ%40mail.gmail.com.

--000000000000c0116c063e8dd702
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Network Security Services (NSS) 3.116 was released on 11 S=
eptember 2025.<br><br>The HG tag is NSS_3_116_RTM. This version of NSS requ=
ires NSPR<br>4.35 or newer. The latest version of NSPR is 4.37.<br><br>NSS =
3.116 source distributions are available on <a href=3D"http://ftp.mozilla.o=
rg">ftp.mozilla.org</a><br>for secure HTTPS download:<br>&lt;<a href=3D"htt=
ps://ftp.mozilla.org/pub/security/nss/releases/NSS_3_116_RTM/src/">https://=
ftp.mozilla.org/pub/security/nss/releases/NSS_3_116_RTM/src/</a>&gt;<br><br=
>Changes:<br><br>=C2=A0 =C2=A0- Bug 1983308 - disable DSA in NSS script tes=
ts.<br>=C2=A0 =C2=A0- Bug 1983308 - Disabling of some algorithms: generic c=
ert.sh.<br>=C2=A0 =C2=A0- Bug 1981046 - Need to update to new mechanisms.<b=
r>=C2=A0 =C2=A0- Bug 1983320 - Add ML-DSA public key printing support in NS=
S command-line utilities.<br>=C2=A0 =C2=A0- Bug 1986802 - note embedded sct=
s before revocation checks are performed.<br>=C2=A0 =C2=A0- Bug 1983320 - A=
dd support for ML-DSA keys and mechanisms in PKCS#11 interface.<br>=C2=A0 =
=C2=A0- Bug 1983320 - Add support for ML-DSA key type and public key struct=
ure.<br>=C2=A0 =C2=A0- Bug 1983320 - Enable ML-DSA integration via OIDs sup=
port and SECMOD flag.<br>=C2=A0 =C2=A0- Bug 1983308 - disable kyber.<br>=C2=
=A0 =C2=A0- Bug 1965329 - Implement PKCS #11 v3.2 PQ functions (use verify =
signature).<br>=C2=A0 =C2=A0- Bug 1983308 - Disable dsa - gtests.<br>=C2=A0=
 =C2=A0- Bug 1983313 - make group and scheme support in test tools generic.=
<br>=C2=A0 =C2=A0- Bug 1983770 - Create GH workflow to automatically close =
PRs.<br>=C2=A0 =C2=A0- Bug 1983308 - Disable dsa - base code.<br>=C2=A0 =C2=
=A0- Bug 1983308 - Disabling of some algorithms: remove dsa from pk11_mode.=
<br>=C2=A0 =C2=A0- Bug 1983308 - Disable seed and RC2 bug fixes.<br>=C2=A0 =
=C2=A0- Bug 1982742 - restore support for finding certificates by decoded s=
erial number.<br>=C2=A0 =C2=A0- Bug 1984165 - avoid CKR_BUFFER_TO_SMALL err=
or in trust lookups.<br>=C2=A0 =C2=A0- Bug 1983399 - lib/softtoken/{sdb.c,s=
ftkdbti.h}: Align sftkdb_known_attributes_size type.<br>=C2=A0 =C2=A0- Bug =
1965329 - Use PKCS #11 v3.2 KEM mechanisms and functions.<br><br>NSS 3.116 =
shared libraries are backwards-compatible with all<br>older NSS 3.x shared =
libraries. A program linked with older NSS<br>3.x shared libraries will wor=
k with this new version of the<br>shared libraries without recompiling or r=
elinking. Furthermore,<br>applications that restrict their use of NSS APIs =
to the<br>functions listed in NSS Public Functions will remain compatible<b=
r>with future versions of the NSS shared libraries.<br><br>Bugs discovered =
should be reported by filing a bug report at<br>&lt;<a href=3D"https://bugz=
illa.mozilla.org/enter_bug.cgi?product=3DNSS">https://bugzilla.mozilla.org/=
enter_bug.cgi?product=3DNSS</a>&gt;<br><br>Release notes are available at<b=
r>&lt;<a href=3D"https://firefox-source-docs.mozilla.org/security/nss/relea=
ses/index.html">https://firefox-source-docs.mozilla.org/security/nss/releas=
es/index.html</a>&gt;.<br><br></div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;[email protected]&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:[email protected]">dev-tech=
[email protected]</a>.<br />
To view this discussion visit <a href=3D"https://groups.google.com/a/mozill=
a.org/d/msgid/dev-tech-crypto/CAFgAd7H5%3DwX9cd4PhtzWJgmgSGEZp1vOGaMb%2By6f=
L4fL6nTgoQ%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https:/=
/groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/CAFgAd7H5%3DwX9cd4=
PhtzWJgmgSGEZp1vOGaMb%2By6fL4fL6nTgoQ%40mail.gmail.com</a>.<br />

--000000000000c0116c063e8dd702--