зеркало из https://github.com/mozilla/gecko-dev.git
Bug 1821434 - land NSS NSS_3_90_RTM UPGRADE_NSS_RELEASE, r=beurdouche
Differential Revision: https://phabricator.services.mozilla.com/D179888
This commit is contained in:
Benjamin Beurdouche
Родитель
d7f572649a
Коммит
7c0f6b69bf
|
|
@ -1 +1 @@
|
|||
NSS_3_90_BETA1
|
||||
NSS_3_90_RTM
|
||||
|
|
@ -10,4 +10,3 @@
|
|||
*/
|
||||
|
||||
#error "Do not include this header file."
|
||||
|
||||
|
|
|
|||
|
|
@ -8,6 +8,7 @@ Releases
|
|||
:glob:
|
||||
:hidden:
|
||||
|
||||
nss_3_90_0.rst
|
||||
nss_3_89_1.rst
|
||||
nss_3_89.rst
|
||||
nss_3_88_1.rst
|
||||
|
|
@ -53,18 +54,42 @@ Releases
|
|||
|
||||
.. note::
|
||||
|
||||
**NSS 3.89.1** is the latest version of NSS.
|
||||
Complete release notes are available here: :ref:`mozilla_projects_nss_nss_3_89_1_release_notes`
|
||||
|
||||
**NSS 3.79.4** is the latest ESR version of NSS.
|
||||
Complete release notes are available here: :ref:`mozilla_projects_nss_nss_3_79_4_release_notes`
|
||||
**NSS 3.90.0 (ESR)** is the latest version of NSS.
|
||||
Complete release notes are available here: :ref:`mozilla_projects_nss_nss_3_90_0_release_notes`
|
||||
|
||||
|
||||
.. container::
|
||||
|
||||
Changes in 3.89.1 included in this release:
|
||||
|
||||
- Bug 1804505 - Update the technical constraints for KamuSM.
|
||||
- Bug 1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
|
||||
|
||||
Changes in 3.90.0 included in this release:
|
||||
|
||||
- Bug 1623338 - ride along: remove a duplicated doc page
|
||||
- Bug 1623338 - remove a reference to IRC
|
||||
- Bug 1831983 - clang-format lib/freebl/stubs.c
|
||||
- Bug 1831983 - Add a constant time select function
|
||||
- Bug 1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
|
||||
- Bug 1830973 - output early build errors by default
|
||||
- Bug 1804505 - Update the technical constraints for KamuSM
|
||||
- Bug 1822921 - Add BJCA Global Root CA1 and CA2 root certificates
|
||||
- Bug 1790763 - Enable default UBSan Checks
|
||||
- Bug 1786018 - Add explicit handling of zero length records
|
||||
- Bug 1829391 - Tidy up DTLS ACK Error Handling Path
|
||||
- Bug 1786018 - Refactor zero length record tests
|
||||
- Bug 1829112 - Fix compiler warning via correct assert
|
||||
- Bug 1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
|
||||
- Bug 1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
|
||||
- Bug 1784163 - Fix reading raw negative numbers
|
||||
- Bug 1748237 - Repairing unreachable code in clang built with gyp
|
||||
- Bug 1783647 - Integrate Vale Curve25519
|
||||
- Bug 1799468 - Removing unused flags for Hacl*
|
||||
- Bug 1748237 - Adding a better error message
|
||||
- Bug 1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
|
||||
- Bug 1782980 - Fall back to the softokn when writing certificate trust
|
||||
- Bug 1806010 - FIPS-104-3 requires we restart post programmatically
|
||||
- Bug 1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
|
||||
- Bug 1818766 - Update ACVP dockerfile for compatibility with debian package changes
|
||||
- Bug 1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
|
||||
- Bug 1819958 - Removed deprecated sprintf function and replaced with snprintf
|
||||
- Bug 1822076 - fix rst warnings in nss doc
|
||||
- Bug 1821997 - Fix incorrect pygment style
|
||||
- Bug 1821292 - Change GYP directive to apply across platforms
|
||||
- Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
|
||||
|
|
|
|||
|
|
@ -0,0 +1,89 @@
|
|||
.. _mozilla_projects_nss_nss_3_90_release_notes:
|
||||
|
||||
NSS 3.90 release notes
|
||||
======================
|
||||
|
||||
`Introduction <#introduction>`__
|
||||
--------------------------------
|
||||
|
||||
.. container::
|
||||
|
||||
Network Security Services (NSS) 3.90 was released on *4 June 2023**.
|
||||
|
||||
|
||||
.. _distribution_information:
|
||||
|
||||
`Distribution Information <#distribution_information>`__
|
||||
--------------------------------------------------------
|
||||
|
||||
.. container::
|
||||
|
||||
The HG tag is NSS_3_90_RTM. NSS 3.90 requires NSPR 4.35 or newer.
|
||||
|
||||
NSS 3.90 source distributions are available on ftp.mozilla.org for secure HTTPS download:
|
||||
|
||||
- Source tarballs:
|
||||
https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_90_RTM/src/
|
||||
|
||||
Other releases are available :ref:`mozilla_projects_nss_releases`.
|
||||
|
||||
.. _changes_in_nss_3.90:
|
||||
|
||||
`Changes in NSS 3.90 <#changes_in_nss_3.90>`__
|
||||
----------------------------------------------------
|
||||
|
||||
.. container::
|
||||
|
||||
|
||||
- Bug 1623338 - ride along: remove a duplicated doc page
|
||||
- Bug 1623338 - remove a reference to IRC
|
||||
- Bug 1831983 - clang-format lib/freebl/stubs.c
|
||||
- Bug 1831983 - Add a constant time select function
|
||||
- Bug 1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
|
||||
- Bug 1830973 - output early build errors by default
|
||||
- Bug 1804505 - Update the technical constraints for KamuSM
|
||||
- Bug 1822921 - Add BJCA Global Root CA1 and CA2 root certificates
|
||||
- Bug 1790763 - Enable default UBSan Checks
|
||||
- Bug 1786018 - Add explicit handling of zero length records
|
||||
- Bug 1829391 - Tidy up DTLS ACK Error Handling Path
|
||||
- Bug 1786018 - Refactor zero length record tests
|
||||
- Bug 1829112 - Fix compiler warning via correct assert
|
||||
- Bug 1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
|
||||
- Bug 1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
|
||||
- Bug 1784163 - Fix reading raw negative numbers
|
||||
- Bug 1748237 - Repairing unreachable code in clang built with gyp
|
||||
- Bug 1783647 - Integrate Vale Curve25519
|
||||
- Bug 1799468 - Removing unused flags for Hacl*
|
||||
- Bug 1748237 - Adding a better error message
|
||||
- Bug 1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
|
||||
- Bug 1782980 - Fall back to the softokn when writing certificate trust
|
||||
- Bug 1806010 - FIPS-104-3 requires we restart post programmatically
|
||||
- Bug 1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
|
||||
- Bug 1818766 - Update ACVP dockerfile for compatibility with debian package changes
|
||||
- Bug 1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
|
||||
- Bug 1819958 - Removed deprecated sprintf function and replaced with snprintf
|
||||
- Bug 1822076 - fix rst warnings in nss doc
|
||||
- Bug 1821997 - Fix incorrect pygment style
|
||||
- Bug 1821292 - Change GYP directive to apply across platforms
|
||||
- Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
|
||||
|
||||
|
||||
`Compatibility <#compatibility>`__
|
||||
----------------------------------
|
||||
|
||||
.. container::
|
||||
|
||||
NSS 3.90 shared libraries are backwards-compatible with all older NSS 3.x shared
|
||||
libraries. A program linked with older NSS 3.x shared libraries will work with
|
||||
this new version of the shared libraries without recompiling or
|
||||
relinking. Furthermore, applications that restrict their use of NSS APIs to the
|
||||
functions listed in NSS Public Functions will remain compatible with future
|
||||
versions of the NSS shared libraries.
|
||||
|
||||
`Feedback <#feedback>`__
|
||||
------------------------
|
||||
|
||||
.. container::
|
||||
|
||||
Bugs discovered should be reported by filing a bug report on
|
||||
`bugzilla.mozilla.org <https://bugzilla.mozilla.org/enter_bug.cgi?product=NSS>`__ (product NSS).
|
||||
|
|
@ -22,12 +22,12 @@
|
|||
* The format of the version string should be
|
||||
* "<major version>.<minor version>[.<patch level>[.<build number>]][ <ECC>][ <Beta>]"
|
||||
*/
|
||||
#define NSS_VERSION "3.90" _NSS_CUSTOMIZED " Beta"
|
||||
#define NSS_VERSION "3.90" _NSS_CUSTOMIZED
|
||||
#define NSS_VMAJOR 3
|
||||
#define NSS_VMINOR 90
|
||||
#define NSS_VPATCH 0
|
||||
#define NSS_VBUILD 0
|
||||
#define NSS_BETA PR_TRUE
|
||||
#define NSS_BETA PR_FALSE
|
||||
|
||||
#ifndef RC_INVOKED
|
||||
|
||||
|
|
|
|||
|
|
@ -17,11 +17,11 @@
|
|||
* The format of the version string should be
|
||||
* "<major version>.<minor version>[.<patch level>[.<build number>]][ <ECC>][ <Beta>]"
|
||||
*/
|
||||
#define SOFTOKEN_VERSION "3.90" SOFTOKEN_ECC_STRING " Beta"
|
||||
#define SOFTOKEN_VERSION "3.90" SOFTOKEN_ECC_STRING
|
||||
#define SOFTOKEN_VMAJOR 3
|
||||
#define SOFTOKEN_VMINOR 90
|
||||
#define SOFTOKEN_VPATCH 0
|
||||
#define SOFTOKEN_VBUILD 0
|
||||
#define SOFTOKEN_BETA PR_TRUE
|
||||
#define SOFTOKEN_BETA PR_FALSE
|
||||
|
||||
#endif /* _SOFTKVER_H_ */
|
||||
|
|
|
|||
|
|
@ -19,12 +19,12 @@
|
|||
* The format of the version string should be
|
||||
* "<major version>.<minor version>[.<patch level>[.<build number>]][ <Beta>]"
|
||||
*/
|
||||
#define NSSUTIL_VERSION "3.90 Beta"
|
||||
#define NSSUTIL_VERSION "3.90"
|
||||
#define NSSUTIL_VMAJOR 3
|
||||
#define NSSUTIL_VMINOR 90
|
||||
#define NSSUTIL_VPATCH 0
|
||||
#define NSSUTIL_VBUILD 0
|
||||
#define NSSUTIL_BETA PR_TRUE
|
||||
#define NSSUTIL_BETA PR_FALSE
|
||||
|
||||
SEC_BEGIN_PROTOS
|
||||
|
||||
|
|
|
|||
Загрузка…
Ссылка в новой задаче