master
Bug 2029434 - Reject overflowing quantities in nss_ZNEWARRAY and nss_ZREALLOCARRAY. r=nss-reviewers,jschanck
Bug 2056846 - Remove unused policy string callback to fix -Wunused-but-set-global r=nss-reviewers,keeler
Bug 2015247 - Fix leak in CERT_EnableOCSPDefaultResponder. r=nss-reviewers,keeler
Bug 2047783 - Set nssckbi version to 2.90. r=bwilson
Bug 1975973 - fix memory leaks in crmf tests. r=nss-reviewers,djackson
Bug 2029321 - validate params length before len-2 subtraction in SECKEY_GetECCOid. r=nss-reviewers,rrelyea
Bug 1908763 - Remove unused assignment to pageno. r=nss-reviewers,bbeurdouche
Bug 2029791 - Reserve NUL terminator for CKA_NSS_URL in nssCKObject_GetAttributes. r=nss-reviewers,rrelyea
Bug 2060118 - remove DH_GenParam support. r=nss-reviewers,jschanck
Bug 2029757 - NUL-terminate within filename field in jar_listtar to bound the filename scan. r=rrelyea,nss-reviewers
Bug 2050034 - reject long OCSP responses in libpkix http client. r=nss-reviewers,nkulatova
Bug 2035579 - Backed out changeset 0dfcc7dad33f.
Set version numbers to 3.127 beta
Bug 2053831 - Adjust PK11_Derive and TLS 1.3 derivation templates for CKM_HKDF_DATA and CKO_DATA compliance. r=rrelyea
Bug 2061107 - restore pkcs12.h for source compatibility. r=nss-reviewers,keeler
Bug 2029807 - Guard padding read against empty output in SEC_PKCS7DecryptContents. r=nss-reviewers,rrelyea
Bug 2029794 - handle NSSCertificate identity changing in __CERT_AddTempCertToPerm r=jschanck
Bug 2054719 - fix content type tag for CMS AuthEnvelopedData plaintext. r=kaie
Bug 1869493 - Heap-buffer overflow in AES Keywrap r=nss-reviewers,rrelyea
Bug 2035348 - build sqlite3 shell for Windows CI runners. r=nss-reviewers,djackson
Bug 2054609 - remove cipher suite order exception from bug 946147. r=djackson
Bug 2031756 - Backed out changeset 83110dba958b
Bug 2056291 - remove support for pre-v1.0 PKCS#12. r=nss-reviewers,keeler
Bug 2017366 - update vendored zlib to v1.3.2. r=nss-reviewers,nkulatova
Bug 2030985 - Remove CRMF from testing and manifests r=keeler