NSS 3.110 release

34 views
Skip to first unread message

John Schanck

unread,
Mar 28, 2025, 10:33:27 AMMar 28
to dev-tec...@mozilla.org
Network Security Services (NSS) 3.110 was released on 28 March 2025.

The HG tag is NSS_3_110_RTM. This version of NSS requires NSPR
4.35 or newer. The latest version of NSPR is 4.36.

NSS 3.110 source distributions are available on ftp.mozilla.org
for secure HTTPS download:
<https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_110_RTM/src/>

Changes:
- Bug 1930806 - FIPS changes need to be upstreamed: force ems policy.
- Bug 1954724 - Prevent excess allocations in sslBuffer_Grow.
- Bug 1953429 - Remove Crl templates from ASN1 fuzz target.
- Bug 1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target.
- Bug 1952855 - Fix memory leak in NSS_CMSMessage_IsSigned.
- Bug 1930807 - NSS policy updates.
- Bug 1951161 - Improve locking in nssPKIObject_GetInstances.
- Bug 1951394 - Fix race in sdb_GetMetaData.
- Bug 1951800 - Fix member access within null pointer.
- Bug 1950077 - Increase smime fuzzer memory limit.
- Bug 1949677 - Enable resumption when using custom extensions.
- Bug 1952568 - change CN of server12 test certificate.
- Bug 1949118 - Part 2: Add missing check in
NSS_CMSDigestContext_FinishSingle.
- Bug 1949118 - Part 1: Fix smime UBSan errors.
- Bug 1930806 - FIPS changes need to be upstreamed: updated key checks.
- Bug 1951491 - Don't build libpkix in static builds.
- Bug 1951395 - handle `-p all` in try syntax.
- Bug 1951346 - fix opt-make builds to actually be opt.
- Bug 1951346 - fix opt-static builds to actually be opt.
- Bug 1916439 - Remove extraneous assert.

NSS 3.110 shared libraries are backwards-compatible with all
older NSS 3.x shared libraries. A program linked with older NSS
3.x shared libraries will work with this new version of the
shared libraries without recompiling or relinking. Furthermore,
applications that restrict their use of NSS APIs to the
functions listed in NSS Public Functions will remain compatible
with future versions of the NSS shared libraries.

Bugs discovered should be reported by filing a bug report at
<https://bugzilla.mozilla.org/enter_bug.cgi?product=NSS>

Release notes are available at
<https://firefox-source-docs.mozilla.org/security/nss/releases/index.html>.
Reply all
Reply to author
Forward
0 new messages