NSS 3.118 release notes
Introduction
Network Security Services (NSS) 3.118 was released on 18 November 2025*.
Distribution Information
The HG tag is NSS_3_118_RTM. NSS 3.118 requires NSPR 4.37 or newer.
NSS 3.118 source distributions are available on ftp.mozilla.org for secure HTTPS download:
Other releases are available Release Notes.
Changes in NSS 3.118
Bug 1994866 - Remove four Commscope root certificates from NSS.
Bug 1996036 - fix try pushes with –nspr-patch to actually apply the patch.
Bug 1995512 - Support for NIST Curves compressed points.
Bug 1985058 - Destroy certificate on error paths.
Bug 1990242 - Move NSS DB password hash away from SHA-1.
Bug 1983313 - support secp384r1mlkem1024.
Bug 1991549 - vendor latest ML-KEM code from libcrux.
Bug 1991549 - add mlk-kem-1024 tests.
Bug 1996717 - use the correct directory for FStar_UInt_8_16_32_64.h in source consistency test.
Bug 1766767 - Move scripts to python3.
Bug 1983313 - add mlkem1024 support in freebl.
Bug 1983313 - support secp256r1mlkem768.
Bug 1983313 - Make mlkem768x25519 the default.
Bug 1983320 - ML-DSA SGN and VFY interfaces.
Bug 1988625 - Align FIPS interfaces count with array.
Bug 1989477 - Ensure CKK_ML_KEM has derive CK_FALSE.
Bug 1992128 - Add script for tagging an NSS release.
Bug 1992128 - Remove the globals from nss-release-helper.py.
Bug 1992128 - Add release helper command for generating the release index.
Bug 1992128 - Add release helper command for generating a release note.
Bug 1992128 - Add release helper command for freezing a branch.