NSS 3.66 Release

[Benjamin Beurdouche]

Dear all,

Network Security Services (NSS) 3.66 was released on May 27th, 2021.

The HG tag is NSS_3_66_RTM. NSS 3.66 requires NSPR 4.30 or newer.

NSS 3.66 source distributions are available on ftp.mozilla.org for secure HTTPS download: https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_66_RTM/src/

Bugs fixed:

* Bug 1710716 - Remove Expired Sonera Class2 CA from NSS.

* Bug 1710716 - Remove Expired Root Certificates from NSS - QuoVadis Root Certification Authority.

* Bug 1708307 - Remove Trustis FPS Root CA from NSS.

* Bug 1707097 - Add Certum Trusted Root CA to NSS.

* Bug 1707097 - Add Certum EC-384 CA to NSS.

* Bug 1703942 - Add ANF Secure Server Root CA to NSS.

* Bug 1697071 - Add GLOBALTRUST 2020 root cert to NSS.

* Bug 1712184 - NSS tools manpages need to be updated to reflect that sqlite is the default database.

* Bug 1712230 - Don't build ppc-gcm.s with clang integrated assembler.

* Bug 1712211 - Strict prototype error when trying to compile nss code that includes blapi.h.

* Bug 1710773 - NSS needs FIPS 180-3 FIPS indicators.

* Bug 1709291 - Add VerifyCodeSigningCertificateChain.

* Use GNU tar for the release helper script.

NSS 3.66 shared libraries are backward compatible with all older NSS 3.x shared libraries.

A program linked with older NSS 3.x shared libraries will work with this shared libraries

without recompiling or relinking. Furthermore, applications that restrict their use of NSS APIs

to the functions listed in NSS Public Functions will remain compatible with future versions

of the NSS shared libraries.

Bugs discovered should be reported by filing a bug report with bugzilla.mozilla.org (product NSS).

The release notes will be available at:
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.66_release_notes


-- Notes: —-

To realign the NSS and Firefox release schedules, the next cycle for 

NSS 3.67 will be very short and the release happen on June 10th.

https://wiki.mozilla.org/NSS:Release_Versions

Bug 1712230 introduced a correctness issue for GCM on ppcle64, the fix will

be part of NSS 3.67.

Best,

Benjamin