NSS 3.118 release notes

Introduction

Network Security Services (NSS) 3.118 was released on 18 November 2025*.

Distribution Information

The HG tag is NSS_3_118_RTM. NSS 3.118 requires NSPR 4.37 or newer.

NSS 3.118 source distributions are available on ftp.mozilla.org for secure HTTPS download:

Other releases are available Release Notes.

Changes in NSS 3.118

  • Bug 1994866 - Remove four Commscope root certificates from NSS.

  • Bug 1996036 - fix try pushes with –nspr-patch to actually apply the patch.

  • Bug 1995512 - Support for NIST Curves compressed points.

  • Bug 1985058 - Destroy certificate on error paths.

  • Bug 1990242 - Move NSS DB password hash away from SHA-1.

  • Bug 1983313 - support secp384r1mlkem1024.

  • Bug 1991549 - vendor latest ML-KEM code from libcrux.

  • Bug 1991549 - add mlk-kem-1024 tests.

  • Bug 1996717 - use the correct directory for FStar_UInt_8_16_32_64.h in source consistency test.

  • Bug 1766767 - Move scripts to python3.

  • Bug 1983313 - add mlkem1024 support in freebl.

  • Bug 1983313 - support secp256r1mlkem768.

  • Bug 1983313 - Make mlkem768x25519 the default.

  • Bug 1983320 - ML-DSA SGN and VFY interfaces.

  • Bug 1988625 - Align FIPS interfaces count with array.

  • Bug 1989477 - Ensure CKK_ML_KEM has derive CK_FALSE.

  • Bug 1992128 - Add script for tagging an NSS release.

  • Bug 1992128 - Remove the globals from nss-release-helper.py.

  • Bug 1992128 - Add release helper command for generating the release index.

  • Bug 1992128 - Add release helper command for generating a release note.

  • Bug 1992128 - Add release helper command for freezing a branch.