tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

nss_3_117.rst (2134B)


      1 .. _mozilla_projects_nss_nss_3_117_release_notes:
      2 
      3 NSS 3.117 release notes
      4 ========================
      5 
      6 `Introduction <#introduction>`__
      7 --------------------------------
      8 
      9 .. container::
     10 
     11   Network Security Services (NSS) 3.117 was released on *3 October 2025**.
     12 
     13 `Distribution Information <#distribution_information>`__
     14 --------------------------------------------------------
     15 
     16 .. container::
     17 
     18   The HG tag is NSS_3_117_RTM. NSS 3.117 requires NSPR 4.37 or newer.
     19 
     20   NSS 3.117 source distributions are available on ftp.mozilla.org for secure HTTPS download:
     21 
     22   -  Source tarballs:
     23      https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_117_RTM/src/
     24 
     25   Other releases are available :ref:`mozilla_projects_nss_releases`.
     26 
     27 .. _changes_in_nss_3.117:
     28 
     29 `Changes in NSS 3.117 <#changes_in_nss_3.117>`__
     30 ------------------------------------------------------------------
     31 
     32 .. container::
     33 
     34   - Bug 1992218 - fix memory leak in secasn1decode_unittest.cc.
     35   - Bug 1988913 - Add OISTE roots.
     36   - Bug 1976051 - Add runbook for certdata.txt changes.
     37   - Bug 1991666 - dbtool: close databases before shutdown.
     38   - Bug 1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates.
     39   - Bug 1956754 - don't flush base64 when buffer is null.
     40   - Bug 1989541 - Set `use_pkcs5_pbkd2_params2_only=1` for fuzzing builds.
     41   - Bug 1989480 - mozilla::pkix: recognize the qcStatements extension for QWACs.
     42   - Bug 1980465 - Fix a big-endian-problematic cast in zlib calls.
     43   - Bug 1962321 - Revert removing out/ directory after ossfuzz build.
     44   - Bug 1988524 - Add Cryptofuzz to OSS-Fuzz build.
     45   - Bug 1984704 - Add PKCS#11 trust tests.
     46   - Bug 1983308 - final disable dsa patch cert.sh.
     47   - Bug 1983320 - ml-dsa: move tls 1.3 to use streaming signatures.
     48   - Bug 1983320 - ml-dsa: Prep Create a FindOidTagByString function.
     49   - Bug 1983320 - ml-dsa: softoken changes.
     50   - Bug 1983320 - ml-dsa: der key decode.
     51   - Bug 1983320 - ml-dsa: Prep colapse the overuse of keyType outside of pk11wrap and cryptohi.
     52   - Bug 1983320 - ml-dsa: Prep Create a CreateSignatureAlgorithmID function.