firefox-main/security/nss/doc/src/releases/nss_3_118.md

Source code

Revision control

Copy as Markdown

Other Tools

(mozilla-projects-nss-nss-3-118-release-notes)=
# NSS 3.118 release notes
## [Introduction](#introduction)
:::{container}
Network Security Services (NSS) 3.118 was released on *18 November 2025\**.
:::
## [Distribution Information](#distribution_information)
:::{container}
The HG tag is NSS_3_118_RTM. NSS 3.118 requires NSPR 4.37 or newer.
NSS 3.118 source distributions are available on ftp.mozilla.org for secure HTTPS download:
- Source tarballs:
Other releases are available {ref}`mozilla_projects_nss_releases`.
:::
(changes-in-nss-3-118)=
## [Changes in NSS 3.118](#changes_in_nss_3.118)
:::{container}
- Bug 1994866 - Remove four Commscope root certificates from NSS.
- Bug 1996036 - fix try pushes with --nspr-patch to actually apply the patch.
- Bug 1995512 - Support for NIST Curves compressed points.
- Bug 1985058 - Destroy certificate on error paths.
- Bug 1990242 - Move NSS DB password hash away from SHA-1.
- Bug 1983313 - support secp384r1mlkem1024.
- Bug 1991549 - vendor latest ML-KEM code from libcrux.
- Bug 1991549 - add mlk-kem-1024 tests.
- Bug 1996717 - use the correct directory for FStar_UInt_8_16_32_64.h in source consistency test.
- Bug 1766767 - Move scripts to python3.
- Bug 1983313 - add mlkem1024 support in freebl.
- Bug 1983313 - support secp256r1mlkem768.
- Bug 1983313 - Make mlkem768x25519 the default.
- Bug 1983320 - ML-DSA SGN and VFY interfaces.
- Bug 1988625 - Align FIPS interfaces count with array.
- Bug 1989477 - Ensure CKK_ML_KEM has derive CK_FALSE.
- Bug 1992128 - Add script for tagging an NSS release.
- Bug 1992128 - Remove the globals from nss-release-helper.py.
- Bug 1992128 - Add release helper command for generating the release index.
- Bug 1992128 - Add release helper command for generating a release note.
- Bug 1992128 - Add release helper command for freezing a branch.
:::