Source code

Revision control

Copy as Markdown

Other Tools

(mozilla-projects-nss-nss-3-111-release-notes)=
# NSS 3.111 release notes
## [Introduction](#introduction)
:::{container}
Network Security Services (NSS) 3.111 was released on *28 April 2025\**.
:::
## [Distribution Information](#distribution_information)
:::{container}
The HG tag is NSS_3_111_RTM. NSS 3.111 requires NSPR 4.36 or newer. The latest version of NSPR is 4.36.
NSS 3.111 source distributions are available on ftp.mozilla.org for secure HTTPS download:
- Source tarballs:
Other releases are available {ref}`mozilla_projects_nss_releases`.
:::
(changes-in-nss-3-111)=
## [Changes in NSS 3.111](#changes_in_nss_3.111)
:::{container}
- Bug 1930806 - FIPS changes need to be upstreamed: force ems policy.
- Bug 1957685 - Turn off Websites Trust Bit from CAs.
- Bug 1937338 - Update nssckbi version following April 2025 Batch of Changes.
- Bug 1943135 - Disable SMIME 'trust bit' for GoDaddy CAs.
- Bug 1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c.
- Bug 1954612 - Need up update NSS for PKCS 3.1.
- Bug 1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID.
- Bug 1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI.
- Bug 1943962 - selfserv: Add support for zlib certificate compression.
:::