NSS 3.69.1 Release

11 views
Skip to first unread message

Benjamin Beurdouche

unread,
Aug 31, 2021, 6:54:51 AMAug 31
to dev-tec...@mozilla.org
Dear all,


Network Security Services (NSS) 3.69.1 was released on 26 August 2021.

The HG tag is NSS_3_69_1_RTM. NSS 3.69.1 requires NSPR 4.32 or newer.

NSS 3.69.1 source distributions are available on ftp.mozilla.org for secure HTTPS download: <https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_69_1_RTM/src/>

Bugs fixed:
   - Bug 1722613 (Backout) - Disable DTLS 1.0 and 1.1 by default
   - Bug 1720226 (Backout) - integrity checks in key4.db not happening on private components with AES_CBC

NSS 3.69.1 shared libraries are backwards-compatible with all older NSS 3.x shared libraries. A program linked with older NSS 3.x shared libraries will work with NSS 3.69.1 shared libraries without recompiling or relinking. Furthermore, applications that restrict their use of NSS APIs to the functions listed in NSS Public Functions will remain compatible with future versions of the NSS shared libraries.

Bugs discovered should be reported by filing a bug report at <https://bugzilla.mozilla.org/enter_bug.cgi?product=NSS>

Release notes will be available at <https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_69_1.html> though you should expect some delay.


- - Additional information: - -

NSS 3.69.1 is a dot release based on the content of Firefox 92. Due to some issues with
the process for bringing NSS releases to Firefox, commits for 1722613 and 1720226 were absent
from the Firefox 92 branch which was associated to NSS 3.69. Due to time constraints a decision
was made to align the content of 3.69.1 with the Fx92 branch by backing out these changes instead
of restoring these commits.

Note that Bug 1720226 was also known to introduce a performance regression that has been fixed
in the main/default branch of NSS (Bug 1726022). Since the change has been backed out in this
release, 3.69.1 does not suffer from that performance regression.

The fix is however not in 3.69 (which is affected) but will be in the 3.70 branch, which benefits from
both the change and the fix for the regression.

The NSS 3.70 release is on schedule and will happen on September 2nd.

Reply all
Reply to author
Forward
0 new messages