Network Security Services (NSS) 3.131.1 was released on *20th October 2026*. This release contains important security updates (see below). Distribution Information <http://gecko-docs.mozilla.org-l1.s3-website.us-west-2.amazonaws.com/main/a693f1e0-c1bc-11f1-abbb-863ac22d0807/security/nss/releases/nss_3_131.html#distribution-information>
The HG tag is NSS_3_131_1RTM. NSS 3.131.1 requires NSPR 4.39 or newer. NSS 3.131.1 source distributions are available on ftp.mozilla.org for secure HTTPS download: - Source tarballs: https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_131_1_RTM/src/ Changes in NSS 3.131.1 This release removes trust in the following root certificates: - Bug 2083709 <https://bugzilla.mozilla.org/show_bug.cgi?id=2083709> - emSign Root CA - C1 - Bug 2083709 <https://bugzilla.mozilla.org/show_bug.cgi?id=2083709> - emSign ECC Root CA - C3 - Bug 2084101 <https://bugzilla.mozilla.org/show_bug.cgi?id=2084101> - emSign ECC Root CA - G3 The G3 root removal is in response to a recent security incident which impacted some intermediate certificates. Mozilla has already protected Firefox clients via an update to OneCRL <https://blog.mozilla.org/security/2015/03/03/revoking-intermediate-certificates-introducing-onecrl/> which was delivered on Saturday 19th. This release helps protect downstream users beyond Firefox who don’t receive revocation information or cannot block intermediate certificates. We recommend you update as soon as possible Best, Dennis -- You received this message because you are subscribed to the Google Groups "[email protected]" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/CAON8YFO61xjJz2K-sNZSLrL2yRZKWOR3PLVT-D7%3DGcfGq4-02g%40mail.gmail.com.
