| Newsgroups |
gmane.comp.mozilla.crypto |
| Message-ID |
<CAFgAd7Gw8CdDXuvFnYLBfcKPLzGWdkrrGJhmkREtr0x90FpSyg@mail.gmail.com> |
--000000000000c1c6c6064f9a3f82
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Network Security Services (NSS) 3.123 was released on 16 April 2026.
The HG tag is NSS_3_123_RTM. This version of NSS requires NSPR 4.38.2 or
newer. The latest version of NSPR is 4.38.2.
NSS 3.123 source distributions are available on ftp.mozilla.org for secure
HTTPS download:
<https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_123_RTM/src/>
Changes:
- Bug 2023202 - Add gtests for SSL_ReconfigFD covering certs, ALPN, PSK,
and double-reconfig.
- Bug 2022410 - handle client cert callback completion prior to server
Finished.
- Bug 2023202 - Extract ssl_CopySocketConfig() to remove duplicate logic
in SSL_ReconfigFD.
- Bug 2030135 - improve error handling in
PK11_ImportPrivateKeyInfoAndReturnKey (NSS 3.90.5).
- Bug 2029462 - store email on subject cache_entry in NSS trust domain.
- Bug 2029425 - Heap use-after-free in cert_VerifyCertChainOld via
dangling certsList[] entry on NameConstraints violation.
- Bug 2029323 - Improve size calculations in CMS content buffering.
- Bug 2028001 - avoid integer overflow while escaping RFC822 Names.
- Bug 2027378 - Reject excessively large ASN.1 SEQUENCE OF in quickder.
- Bug 2027365 - Deep copy profile data in CERT_FindSMimeProfile.
- Bug 2027345 - Improve input validation in DSAU signature decoding.
- Bug 2026089 - Clarify extension negotiation mechanism for TLS
Handshakes (NSS 3.90.5).
- Bug 2023209 - ensure permittedSubtrees don't match wildcards that
could be outside the permitted tree r?jschanck.
- Bug 2009552 - avoid integer overflow in platform-independent ghash.
- Bug 1935995 - make ss->ssl3.hs.cookie an owned-copy of the cookie.
- Bug 2030135 - improve error handling in
PK11_ImportPrivateKeyInfoAndReturnKey.
- Bug 2029752 - Improving the allocation of S/MIME DecryptSymKey.
- Bug 2026311 - avoid integer overflow in RSA_EMSAEncodePSS.
- Bug 2019357 - RSA_EMSAEncodePSS should validate the length of mHash
r?nkulatova.
- Bug 2026156 - Add a maximum cert uncompressed len and tests.
- Bug 2026089 - Clarify extension negotiation mechanism for TLS
Handshakes.
- Bug 2023207 - Fix integer underflow in tls13_AEAD when ciphertext is
shorter than tag.
- Bug 2019224 - Remove invalid PORT_Free(), r?#nss-reviewers,djackson.
- Bug 1964722 - free digest objects in SEC_PKCS7DecoderFinish if they
haven't already been freed r?#nss-reviewers.
- Bug 2027382 - Reject oversized inputs in UTF-8 conversion functions.
- Bug 1998526 - Align PKCS7 digest array with digestAlgorithms.
- Bug 2030729 - remove SEC_ASN1_CHOICE entries from PQ private key
templates.
- Bug 2029782 - fix 8-byte over-read of AES-192 key buffer in x86 builds
without USE_HW_AES.
- Bug 2031163 - set PK11_ChangePW error after PK11_InitToken.
- Bug 2026025 - Extend ./mach tests & all.sh to pretty print their
output.
- Bug 2029720 - avoid integer overflow when converting AVA value to hex
string.
- Bug 2030979 - handle SEC_ASN1_NULL in sec_asn1e_contents_length.
- Bug 2027329 - PK11SDR_Decrypt: allowlist supported encryption
algorithms.
- Bug 2029783 - fix use of PORT_ArenaGrow when decoding multi-chunk
PKCS#7 EncryptedData with no content callback.
- Bug 2029818 - avoid refcount over-release in CERT_CertChainFromCert
error path.
- Bug 2030794 - avoid memory leak in SECITEM_FreeArray.
- Bug 2027847 - Set nssckbi version to 2.86.
- Bug 2027847 - Remove FIRMAPROFESIONAL CA ROOT-A WEB from NSS.
- Bug 2020164 - Remove GLOBALTRUST 2020 from NSS.
- Bug 2020151 - Remove TeliaSonera Root CA v1 from NSS.
- Bug 2020144 - Remove Six Viking Cloud Root CAs from NSS.
- Bug 2020137 - Turn off certain Trust Bits in NSS for Five GTS CAs.
- Bug 2017471 - Remove Websites Trust Bit from SwissSign Gold CA - G2.
- Bug 2017468 - Remove OU=3DcertSIGN ROOT CA from NSS.
- Bug 2017464 - Remove Websites Trust Bit from Root CN=3DCertigna.
- Bug 2017460 - Remove AffirmTrust Roots from NSS.
- Bug 2017453 - Remove Websites Trust Bit from DigiCert 2006 Roots.
- Bug 2017348 - Remove Websites Trust Bit from Entrust Root
Certification Authority =E2=80=93 G2 & EC1.
- Bug 2017345 - Remove Websites Trust Bit from COMODO Certification
Authority.
- Bug 2017322 - Set CKA_NSS_SERVER_DISTRUST_AFTER for CN=3DIzenpe.com.
- Bug 2016750 - Remove Email Trust Bit from Four Amazon Root CAs.
- Bug 2029431 - avoid signed int overflow in CTS_EncryptUpdate.
- Bug 2030100 - VerifyCodeSigningCertificateChain: require at least one
certificate.
- Bug 2029721 - fix use of uninitialised length after failed
PK11_SignWithMechanism.
- Bug 2029731 - modify linked-list only on success in
CERT_AddExtensionByOID.
- Bug 2029746 - reject oversized DSA subPrime values.
- Bug 2029740 - check object handle types in NSC_EncapsulateKey and
NSC_DecapsulateKey.
- Bug 2029448 - enforce minimum buffer length in sftk_CheckCBCPadding.
- Bug 2029432 - validate parameter length in
sftk_ChaCha20_Poly1305_Message_Encrypt.
- Bug 2029771 - Heap use-after-free in [@ token_destructor] reading
tok->pk11slot after nssToken_Destroy frees the token arena.
- Bug 2029774 - Invalid free of arena-interior pointer in [@
DSA_NewRandom] due to inverted arena guard.
- Bug 2029885 - avoid leaving dangling pointer in
tls_DestroySignOrVerifyContext.
- Bug 2022059 - NSS can't import, store, or export mlk-kem keys.
- Bug 2029439 - fix instances of softoken attributes freed after owning
object.
- Bug 2027381 - improve error handling in SECITEM_DupArray with non-null
arena.
- Bug 2027324 - NSS_CMSContentInfo_SetContent: only modify cinfo if
everything succeeds.
- Bug 2027363 - initialize src in SEC_PKCS5GetIV.
- Bug 2029046 - clang format.
- Bug 2029046 - changes to allow building gtests from mozilla-central.
- Bug 2029182 - split database creation scripts out of ssl_gtests.sh and
gtests.sh.
- Bug 2017948 - handleObjects in Softoken needs cleanup.
- Bug 2027383 - fix maxSize calculation in
NSSUTIL_AddNSSFlagToModuleSpec.
- Bug 2029023 - add missing breaks in CheckECDHShareReuse test helper.
- Bug 2027434 - avoid integer underflow in sec_CreateRSAPSSParameters.
- Bug 2007224 - mlDsaPubTemplate is missing a CKA_ENCAPSULATE entry.
- Bug 2024530 - Add clang-tidy CI job with security-focused checks.
- Bug 1834672 - Adjust PBE iteration limit.
- Bug 2025100 - Update Botan version for cryptofuzz.
- Bug 2017788 - FIPS indicators need to take into account target keys.
- Bug 1965329 - add failure checks to pk11_mergeTrust() .
- Bug 2024785 - consistently protect
SFTKSlot.{isLoggedIn,ssoLoggedIn,needLogin} with slotLock.
- Bug 2025098 - Part 2: Always return unique nickname for PKCS12 fuzzer.
- Bug 2025098 - Part 1: Simplify fuzzer MAC verification to always pass.
- Bug 1834672 - Limit PBE iteration count.
- Bug 2025801 - TLS interoperability tests - fix gnutls flakiness and
extend to all platforms.
- Bug 2012680 - improve DER_GetInteger error handling.
- Bug 2017987 - Fix missing zero-init in generate_blinding_params.
- Bug 2017987 - Need "partial public key validation" for RSA OAEP in
FIPS mode.
NSS 3.123 shared libraries are backwards-compatible with all older NSS 3.x
shared libraries. A program linked with older NSS 3.x shared libraries will
work with this new version of the shared libraries without recompiling or
relinking. Furthermore, applications that restrict their use of NSS APIs to
the functions listed in NSS Public Functions will remain compatible with
future versions of the NSS shared libraries.
Bugs discovered should be reported by filing a bug report at <
https://bugzilla.mozilla.org/enter_bug.cgi?product=3DNSS>
Release notes are available at <
https://firefox-source-docs.mozilla.org/security/nss/releases/index.html>.
--=20
You received this message because you are subscribed to the Google Groups "=
[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to [email protected].
To view this discussion visit https://groups.google.com/a/mozilla.org/d/msg=
id/dev-tech-crypto/CAFgAd7Gw8CdDXuvFnYLBfcKPLzGWdkrrGJhmkREtr0x90FpSyg%40ma=
il.gmail.com.
--000000000000c1c6c6064f9a3f82
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">Network Security Services (NSS) 3.123 was released on 16 A=
pril 2026.<br><br>The HG tag is NSS_3_123_RTM. This version of NSS requires=
NSPR 4.38.2 or newer. The latest version of NSPR is 4.38.2.<br><br>NSS 3.1=
23 source distributions are available on <a href=3D"http://ftp.mozilla.org"=
>ftp.mozilla.org</a> for secure HTTPS download:<br><br><<a href=3D"https=
://ftp.mozilla.org/pub/security/nss/releases/NSS_3_123_RTM/src/">https://ft=
p.mozilla.org/pub/security/nss/releases/NSS_3_123_RTM/src/</a>><br><br>C=
hanges:<br><br>=C2=A0 =C2=A0- Bug 2023202 - Add gtests for SSL_ReconfigFD c=
overing certs, ALPN, PSK, and double-reconfig.<br>=C2=A0 =C2=A0- Bug 202241=
0 - handle client cert callback completion prior to server Finished.<br>=C2=
=A0 =C2=A0- Bug 2023202 - Extract ssl_CopySocketConfig() to remove duplicat=
e logic in SSL_ReconfigFD.<br>=C2=A0 =C2=A0- Bug 2030135 - improve error ha=
ndling in PK11_ImportPrivateKeyInfoAndReturnKey (NSS 3.90.5).<br>=C2=A0 =C2=
=A0- Bug 2029462 - store email on subject cache_entry in NSS trust domain.<=
br>=C2=A0 =C2=A0- Bug 2029425 - Heap use-after-free in cert_VerifyCertChain=
Old via dangling certsList[] entry on NameConstraints violation.<br>=C2=A0 =
=C2=A0- Bug 2029323 - Improve size calculations in CMS content buffering.<b=
r>=C2=A0 =C2=A0- Bug 2028001 - avoid integer overflow while escaping RFC822=
Names.<br>=C2=A0 =C2=A0- Bug 2027378 - Reject excessively large ASN.1 SEQU=
ENCE OF in quickder.<br>=C2=A0 =C2=A0- Bug 2027365 - Deep copy profile data=
in CERT_FindSMimeProfile.<br>=C2=A0 =C2=A0- Bug 2027345 - Improve input va=
lidation in DSAU signature decoding.<br>=C2=A0 =C2=A0- Bug 2026089 - Clarif=
y extension negotiation mechanism for TLS Handshakes (NSS 3.90.5).<br>=C2=
=A0 =C2=A0- Bug 2023209 - ensure permittedSubtrees don't match wildcard=
s that could be outside the permitted tree r?jschanck.<br>=C2=A0 =C2=A0- Bu=
g 2009552 - avoid integer overflow in platform-independent ghash.<br>=C2=A0=
=C2=A0- Bug 1935995 - make ss->ssl3.hs.cookie an owned-copy of the cook=
ie.<br>=C2=A0 =C2=A0- Bug 2030135 - improve error handling in PK11_ImportPr=
ivateKeyInfoAndReturnKey.<br>=C2=A0 =C2=A0- Bug 2029752 - Improving the all=
ocation of S/MIME DecryptSymKey.<br>=C2=A0 =C2=A0- Bug 2026311 - avoid inte=
ger overflow in RSA_EMSAEncodePSS.<br>=C2=A0 =C2=A0- Bug 2019357 - RSA_EMSA=
EncodePSS should validate the length of mHash r?nkulatova.<br>=C2=A0 =C2=A0=
- Bug 2026156 - Add a maximum cert uncompressed len and tests.<br>=C2=A0 =
=C2=A0- Bug 2026089 - Clarify extension negotiation mechanism for TLS Hands=
hakes.<br>=C2=A0 =C2=A0- Bug 2023207 - Fix integer underflow in tls13_AEAD =
when ciphertext is shorter than tag.<br>=C2=A0 =C2=A0- Bug 2019224 - Remove=
invalid PORT_Free(), r?#nss-reviewers,djackson.<br>=C2=A0 =C2=A0- Bug 1964=
722 - free digest objects in SEC_PKCS7DecoderFinish if they haven't alr=
eady been freed r?#nss-reviewers.<br>=C2=A0 =C2=A0- Bug 2027382 - Reject ov=
ersized inputs in UTF-8 conversion functions.<br>=C2=A0 =C2=A0- Bug 1998526=
- Align PKCS7 digest array with digestAlgorithms.<br>=C2=A0 =C2=A0- Bug 20=
30729 - remove SEC_ASN1_CHOICE entries from PQ private key templates.<br>=
=C2=A0 =C2=A0- Bug 2029782 - fix 8-byte over-read of AES-192 key buffer in =
x86 builds without USE_HW_AES.<br>=C2=A0 =C2=A0- Bug 2031163 - set PK11_Cha=
ngePW error after PK11_InitToken.<br>=C2=A0 =C2=A0- Bug 2026025 - Extend ./=
mach tests & all.sh to pretty print their output.<br>=C2=A0 =C2=A0- Bug=
2029720 - avoid integer overflow when converting AVA value to hex string.<=
br>=C2=A0 =C2=A0- Bug 2030979 - handle SEC_ASN1_NULL in sec_asn1e_contents_=
length.<br>=C2=A0 =C2=A0- Bug 2027329 - PK11SDR_Decrypt: allowlist supporte=
d encryption algorithms.<br>=C2=A0 =C2=A0- Bug 2029783 - fix use of PORT_Ar=
enaGrow when decoding multi-chunk PKCS#7 EncryptedData with no content call=
back.<br>=C2=A0 =C2=A0- Bug 2029818 - avoid refcount over-release in CERT_C=
ertChainFromCert error path.<br>=C2=A0 =C2=A0- Bug 2030794 - avoid memory l=
eak in SECITEM_FreeArray.<br>=C2=A0 =C2=A0- Bug 2027847 - Set nssckbi versi=
on to 2.86.<br>=C2=A0 =C2=A0- Bug 2027847 - Remove FIRMAPROFESIONAL CA ROOT=
-A WEB from NSS.<br>=C2=A0 =C2=A0- Bug 2020164 - Remove GLOBALTRUST 2020 fr=
om NSS.<br>=C2=A0 =C2=A0- Bug 2020151 - Remove TeliaSonera Root CA v1 from =
NSS.<br>=C2=A0 =C2=A0- Bug 2020144 - Remove Six Viking Cloud Root CAs from =
NSS.<br>=C2=A0 =C2=A0- Bug 2020137 - Turn off certain Trust Bits in NSS for=
Five GTS CAs.<br>=C2=A0 =C2=A0- Bug 2017471 - Remove Websites Trust Bit fr=
om SwissSign Gold CA - G2.<br>=C2=A0 =C2=A0- Bug 2017468 - Remove OU=3Dcert=
SIGN ROOT CA from NSS.<br>=C2=A0 =C2=A0- Bug 2017464 - Remove Websites Trus=
t Bit from Root CN=3DCertigna.<br>=C2=A0 =C2=A0- Bug 2017460 - Remove Affir=
mTrust Roots from NSS.<br>=C2=A0 =C2=A0- Bug 2017453 - Remove Websites Trus=
t Bit from DigiCert 2006 Roots.<br>=C2=A0 =C2=A0- Bug 2017348 - Remove Webs=
ites Trust Bit from Entrust Root Certification Authority =E2=80=93 G2 &=
EC1.<br>=C2=A0 =C2=A0- Bug 2017345 - Remove Websites Trust Bit from COMODO=
Certification Authority.<br>=C2=A0 =C2=A0- Bug 2017322 - Set CKA_NSS_SERVE=
R_DISTRUST_AFTER for CN=3DIzenpe.com.<br>=C2=A0 =C2=A0- Bug 2016750 - Remov=
e Email Trust Bit from Four Amazon Root CAs.<br>=C2=A0 =C2=A0- Bug 2029431 =
- avoid signed int overflow in CTS_EncryptUpdate.<br>=C2=A0 =C2=A0- Bug 203=
0100 - VerifyCodeSigningCertificateChain: require at least one certificate.=
<br>=C2=A0 =C2=A0- Bug 2029721 - fix use of uninitialised length after fail=
ed PK11_SignWithMechanism.<br>=C2=A0 =C2=A0- Bug 2029731 - modify linked-li=
st only on success in CERT_AddExtensionByOID.<br>=C2=A0 =C2=A0- Bug 2029746=
- reject oversized DSA subPrime values.<br>=C2=A0 =C2=A0- Bug 2029740 - ch=
eck object handle types in NSC_EncapsulateKey and NSC_DecapsulateKey.<br>=
=C2=A0 =C2=A0- Bug 2029448 - enforce minimum buffer length in sftk_CheckCBC=
Padding.<br>=C2=A0 =C2=A0- Bug 2029432 - validate parameter length in sftk_=
ChaCha20_Poly1305_Message_Encrypt.<br>=C2=A0 =C2=A0- Bug 2029771 - Heap use=
-after-free in [@ token_destructor] reading tok->pk11slot after nssToken=
_Destroy frees the token arena.<br>=C2=A0 =C2=A0- Bug 2029774 - Invalid fre=
e of arena-interior pointer in [@ DSA_NewRandom] due to inverted arena guar=
d.<br>=C2=A0 =C2=A0- Bug 2029885 - avoid leaving dangling pointer in tls_De=
stroySignOrVerifyContext.<br>=C2=A0 =C2=A0- Bug 2022059 - NSS can't imp=
ort, store, or export mlk-kem keys.<br>=C2=A0 =C2=A0- Bug 2029439 - fix ins=
tances of softoken attributes freed after owning object.<br>=C2=A0 =C2=A0- =
Bug 2027381 - improve error handling in SECITEM_DupArray with non-null aren=
a.<br>=C2=A0 =C2=A0- Bug 2027324 - NSS_CMSContentInfo_SetContent: only modi=
fy cinfo if everything succeeds.<br>=C2=A0 =C2=A0- Bug 2027363 - initialize=
src in SEC_PKCS5GetIV.<br>=C2=A0 =C2=A0- Bug 2029046 - clang format.<br>=
=C2=A0 =C2=A0- Bug 2029046 - changes to allow building gtests from mozilla-=
central.<br>=C2=A0 =C2=A0- Bug 2029182 - split database creation scripts ou=
t of ssl_gtests.sh and gtests.sh.<br>=C2=A0 =C2=A0- Bug 2017948 - handleObj=
ects in Softoken needs cleanup.<br>=C2=A0 =C2=A0- Bug 2027383 - fix maxSize=
calculation in NSSUTIL_AddNSSFlagToModuleSpec.<br>=C2=A0 =C2=A0- Bug 20290=
23 - add missing breaks in CheckECDHShareReuse test helper.<br>=C2=A0 =C2=
=A0- Bug 2027434 - avoid integer underflow in sec_CreateRSAPSSParameters.<b=
r>=C2=A0 =C2=A0- Bug 2007224 - mlDsaPubTemplate is missing a CKA_ENCAPSULAT=
E entry.<br>=C2=A0 =C2=A0- Bug 2024530 - Add clang-tidy CI job with securit=
y-focused checks.<br>=C2=A0 =C2=A0- Bug 1834672 - Adjust PBE iteration limi=
t.<br>=C2=A0 =C2=A0- Bug 2025100 - Update Botan version for cryptofuzz.<br>=
=C2=A0 =C2=A0- Bug 2017788 - FIPS indicators need to take into account targ=
et keys.<br>=C2=A0 =C2=A0- Bug 1965329 - add failure checks to pk11_mergeTr=
ust() .<br>=C2=A0 =C2=A0- Bug 2024785 - consistently protect SFTKSlot.{isLo=
ggedIn,ssoLoggedIn,needLogin} with slotLock.<br>=C2=A0 =C2=A0- Bug 2025098 =
- Part 2: Always return unique nickname for PKCS12 fuzzer.<br>=C2=A0 =C2=A0=
- Bug 2025098 - Part 1: Simplify fuzzer MAC verification to always pass.<br=
>=C2=A0 =C2=A0- Bug 1834672 - Limit PBE iteration count.<br>=C2=A0 =C2=A0- =
Bug 2025801 - TLS interoperability tests - fix gnutls flakiness and extend =
to all platforms.<br>=C2=A0 =C2=A0- Bug 2012680 - improve DER_GetInteger er=
ror handling.<br>=C2=A0 =C2=A0- Bug 2017987 - Fix missing zero-init in gene=
rate_blinding_params.<br>=C2=A0 =C2=A0- Bug 2017987 - Need "partial pu=
blic key validation" for RSA OAEP in FIPS mode.<br><br>NSS 3.123 share=
d libraries are backwards-compatible with all older NSS 3.x shared librarie=
s. A program linked with older NSS 3.x shared libraries will work with this=
new version of the shared libraries without recompiling or relinking. Furt=
hermore, applications that restrict their use of NSS APIs to the functions =
listed in NSS Public Functions will remain compatible with future versions =
of the NSS shared libraries.<br><br>Bugs discovered should be reported by f=
iling a bug report at <<a href=3D"https://bugzilla.mozilla.org/enter_bug=
.cgi?product=3DNSS">https://bugzilla.mozilla.org/enter_bug.cgi?product=3DNS=
S</a>><br><br>Release notes are available at <<a href=3D"https://fire=
fox-source-docs.mozilla.org/security/nss/releases/index.html">https://firef=
ox-source-docs.mozilla.org/security/nss/releases/index.html</a>>.</div>
<p></p>
-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;[email protected]" group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:[email protected]">dev-tech=
[email protected]</a>.<br />
To view this discussion visit <a href=3D"https://groups.google.com/a/mozill=
a.org/d/msgid/dev-tech-crypto/CAFgAd7Gw8CdDXuvFnYLBfcKPLzGWdkrrGJhmkREtr0x9=
0FpSyg%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://gro=
ups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/CAFgAd7Gw8CdDXuvFnYLBf=
cKPLzGWdkrrGJhmkREtr0x90FpSyg%40mail.gmail.com</a>.<br />
--000000000000c1c6c6064f9a3f82--