Opened 18 months ago
Closed 18 months ago
#17181 closed enhancement (fixed)
nss-3.84
| Reported by: | Bruce Dubbs | Owned by: | Bruce Dubbs |
|---|---|---|---|
| Priority: | normal | Milestone: | 11.3 |
| Component: | BOOK | Version: | git |
| Severity: | normal | Keywords: | |
| Cc: |
Description
New minor version.
Change History (3)
comment:1 by , 18 months ago
comment:2 by , 18 months ago
| Owner: | changed from to |
|---|---|
| Status: | new → assigned |
comment:3 by , 18 months ago
| Resolution: | → fixed |
|---|---|
| Status: | assigned → closed |
Fixed at commits
754f0d7616 Update to libsoup-2.74.3. 70069a9dd3 Update to gnupg-2.3.8. 36380812f6 Update to nss-3.84. 0c5a3ec710 Update to unbound-1.17.0.
Note:
See TracTickets
for help on using tickets.
Release notes are at https://firefox-source-docs.mozilla.org/security/nss/nss_3_84.html#mozilla-projects-nss-nss-3-84-release-notes
Changes in NSS 3.84¶
Compatibility¶
NSS 3.84 shared libraries are backwards-compatible with all older NSS 3.x shared libraries. A program linked with older NSS 3.x shared libraries will work with this new version of the shared libraries without recompiling or relinking. Furthermore, applications that restrict their use of NSS APIs to the functions listed in NSS Public Functions will remain compatible with future versions of the NSS shared libraries.
That bug to disable libnssckbi is an offshot of https://bugzilla.mozilla.org/show_bug.cgi?id=1789520 which was raised because "The PKCS#11 module that stores builtin roots (libnssckbi) suffers from some performance, stability, and maintainability issues. It would be easy to re-write it in rust, especially given our experience with ipcclientcerts." : This implies that disabling is a preliminary enabler for the rust rewrite, and that in the medium term we will wish to continue building it.