NSS 3.91 release notes¶
Network Security Services (NSS) 3.91 was released on 9 March 2023*.
The HG tag is NSS_3_91_RTM. NSS 3.91 requires NSPR 4.35 or newer.
NSS 3.91 source distributions are available on ftp.mozilla.org for secure HTTPS download:
Other releases are available Releases.
Bug 1837431 - Implementation of the HW support check for ADX instruction
Bug 1836925 - Removing the support of Curve25519
Bug 1839795 - Fix comment about the addition of ticketSupportsEarlyData.
Bug 1839327 - Adding args to enable-legacy-db build
Bug 1835357 dbtests.sh failure in “certutil dump keys with explicit default trust flags”
Bug 1837617: Initialize flags in slot structures
Bug 1835425: Improve the length check of RSA input to avoid heap overflow
Bug 1829112 - Followup Fixes
Bug 1784253: avoid processing unexpected inputs by checking for m_exptmod base sign
Bug 1826652: add a limit check on order_k to avoid infinite loop
Bug 1834851 - Update HACL* to commit 5f6051d2.
Bug 1753026 - add SHA3 to cryptohi and softoken.
Bug 1753026: HACL SHA3
Bug 1836781 - Disabling ASM C25519 for A but X86_64
NSS 3.91 shared libraries are backwards-compatible with all older NSS 3.x shared libraries. A program linked with older NSS 3.x shared libraries will work with this new version of the shared libraries without recompiling or relinking. Furthermore, applications that restrict their use of NSS APIs to the functions listed in NSS Public Functions will remain compatible with future versions of the NSS shared libraries.
Bugs discovered should be reported by filing a bug report on bugzilla.mozilla.org (product NSS).