-
Tue Sep 01 2026 Kevin Lyons <kevin.x.lyons@oracle.com> - 3.124.0-5.el9_8_fips
- Add FIPS package change: add fips suffix to Release and
set Epoch to 10 [Orabug: 35862190]
- Update FIPS module name for Oracle Linux [Orabug: 35862190]
-
Mon Jun 22 2026 Bob Relyea <rrelyea@redhat.com> - 3.124.0-5
- fix pss issues (again)
-
Tue Jun 16 2026 Bob Relyea <rrelyea@redhat.com> - 3.124.0-4
- fix pkcs12 defaults
- fix pss issues
-
Tue Jun 09 2026 Bob Relyea <rrelyea@redhat.com> - 3.124.0-3
- drop crmf
-
Tue Jun 09 2026 Bob Relyea <rrelyea@redhat.com> - 3.124.0-2
- rebase fixes
- restore rhel-9 dropping of pkcs12 and smime policy
- restore mlkem aliases
- add mlkem key lengths to the mechanism info
- fix crash if you try to encapsulate with an unimported
public key
- restore distrusted certs to certdata.txt even though we
never reference them to make tests happy.
-
Tue Jun 02 2026 Bob Relyea <rrelyea@redhat.com> - 3.124.0-1
- rebase to upstream NSS 3.124
- backport ml-dsa support that is not upstream yet.
- pick up in process patches upstream including eddsa
-
Fri Jan 23 2026 Bob Relyea <rrelyea@redhat.com> - 3.112.0-8
- fix incomplete ml-kem pct patch.
-
Fri Jan 16 2026 Bob Relyea <rrelyea@redhat.com> - 3.112.0-7
- fix regression in -5 bug fix
-
Fri Jan 09 2026 Bob Relyea <rrelyea@redhat.com> - 3.112.0-6
- fix a null in ml-dsa pkcs12 decode
- fix return code in ml-kem pct
-
Tue Nov 11 2025 Bob Relyea <rrelyea@redhat.com> - 3.112.0-5
- fips update
- Fix indicators for the new post-quantum algorithms
- Fix the ML-KEM Self-tests
- Fix the ML-KEM zeroizaiton
- Add partial public validation before OAEP
- bug fixes
- add CKA_SEED to private attributes so they are updated on password change.
- mark CKA_PARAMETER_SET as CK_ULONG when storing into the database
- fix unrefrence read in leancrypto.