[ANNOUNCE] NSS 3.36.5 Release

The NSS team has released Network Security Services (NSS) 3.36.5, which is a patch release for NSS 3.36. It fixes the following bug: * Bug 1483128 - NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random (CVE-2018-12384) The full release notes are

[ANNOUNCE] NSS 3.39 Release

The NSS team has released Network Security Services (NSS) 3.39, which is a minor release. Notable bug fixes: * Bug 1483128 - NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random (CVE-2018-12384) New functionality: * The tstclnt and selfserv utilities