tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

nss_3_116.rst (2299B)


      1 .. _mozilla_projects_nss_nss_3_116_release_notes:
      2 
      3 NSS 3.116 release notes
      4 ========================
      5 
      6 `Introduction <#introduction>`__
      7 --------------------------------
      8 
      9 .. container::
     10 
     11   Network Security Services (NSS) 3.116 was released on *11 September 2025**.
     12 
     13 `Distribution Information <#distribution_information>`__
     14 --------------------------------------------------------
     15 
     16 .. container::
     17 
     18   The HG tag is NSS_3_116_RTM. NSS 3.116 requires NSPR 4.36 or newer. The latest version of NSPR is 4.37.
     19 
     20   NSS 3.116 source distributions are available on ftp.mozilla.org for secure HTTPS download:
     21 
     22   -  Source tarballs:
     23      https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_116_RTM/src/
     24 
     25   Other releases are available :ref:`mozilla_projects_nss_releases`.
     26 
     27 .. _changes_in_nss_3.116:
     28 
     29 `Changes in NSS 3.116 <#changes_in_nss_3.116>`__
     30 ------------------------------------------------------------------
     31 
     32 .. container::
     33 
     34   - Bug 1983308 - disable DSA in NSS script tests.
     35   - Bug 1983308 - Disabling of some algorithms: generic cert.sh.
     36   - Bug 1981046 - Need to update to new mechanisms.
     37   - Bug 1983320 - Add ML-DSA public key printing support in NSS command-line utilities.
     38   - Bug 1986802 - note embedded scts before revocation checks are performed.
     39   - Bug 1983320 - Add support for ML-DSA keys and mechanisms in PKCS#11 interface.
     40   - Bug 1983320 - Add support for ML-DSA key type and public key structure.
     41   - Bug 1983320 - Enable ML-DSA integration via OIDs support and SECMOD flag.
     42   - Bug 1983308 - disable kyber.
     43   - Bug 1965329 - Implement PKCS #11 v3.2 PQ functions (use verify signature).
     44   - Bug 1983308 - Disable dsa - gtests.
     45   - Bug 1983313 - make group and scheme support in test tools generic.
     46   - Bug 1983770 - Create GH workflow to automatically close PRs.
     47   - Bug 1983308 - Disable dsa - base code.
     48   - Bug 1983308 - Disabling of some algorithms: remove dsa from pk11_mode.
     49   - Bug 1983308 - Disable seed and RC2 bug fixes.
     50   - Bug 1982742 - restore support for finding certificates by decoded serial number.
     51   - Bug 1984165 - avoid CKR_BUFFER_TO_SMALL error in trust lookups.
     52   - Bug 1983399 - lib/softtoken/{sdb.c,sftkdbti.h}: Align sftkdb_known_attributes_size type.
     53   - Bug 1965329 - Use PKCS #11 v3.2 KEM mechanisms and functions.