.. _mozilla_projects_nss_nss_3_105_release_notes:

NSS 3.105 release notes
========================

`Introduction <#introduction>`__
--------------------------------

.. container::

   Network Security Services (NSS) 3.105 was released on *26 September 2024**.

`Distribution Information <#distribution_information>`__
--------------------------------------------------------

.. container::

   The HG tag is NSS_3_105_RTM. NSS 3.105 requires NSPR 4.35 or newer.

   NSS 3.105 source distributions are available on ftp.mozilla.org for secure HTTPS download:

   -  Source tarballs:
      https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_105_RTM/src/

   Other releases are available :ref:`mozilla_projects_nss_releases`.

.. _changes_in_nss_3.105:

`Changes in NSS 3.105 <#changes_in_nss_3.105>`__
------------------------------------------------------------------

.. container::

   - Bug 1915792 - Allow importing PKCS#8 private EC keys missing public key
   - Bug 1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
   - Bug 1919577 - set KRML_MUSTINLINE=inline in makefile builds
   - Bug 1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
   - Bug 1918767 - override default definition of KRML_MUSTINLINE
   - Bug 1916525 - libssl support for mlkem768x25519
   - Bug 1916524 - support for ML-KEM-768 in softoken and pk11wrap
   - Bug 1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
   - Bug 1911912 - Avoid misuse of ctype(3) functions
   - Bug 1917311 - part 2: run clang-format
   - Bug 1917311 - part 1: upgrade to clang-format 13
   - Bug 1916953 - clang-format fuzz
   - Bug 1910370 - DTLS client message buffer may not empty be on retransmit
   - Bug 1916413 - Optionally print config for TLS client and server fuzz target
   - Bug 1916059 - Fix some simple documentation issues in NSS.
   - Bug 1915439 - improve performance of NSC_FindObjectsInit when template has CKA_TOKEN attr
   - Bug 1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN

`Compatibility <#compatibility>`__
----------------------------------

.. container::

   NSS 3.105 shared libraries are backwards-compatible with all older NSS 3.x shared
   libraries. A program linked with older NSS 3.x shared libraries will work with
   this new version of the shared libraries without recompiling or
   relinking. Furthermore, applications that restrict their use of NSS APIs to the
   functions listed in NSS Public Functions will remain compatible with future
   versions of the NSS shared libraries.

`Feedback <#feedback>`__
------------------------

.. container::

   Bugs discovered should be reported by filing a bug report on
   `bugzilla.mozilla.org <https://bugzilla.mozilla.org/enter_bug.cgi?product=NSS>`__ (product NSS).
