Ce mail provient de l'extérieur, restons vigilants

=====================================================================


                            CERT-Renater

                Note d'Information No. 2026/VULN1058
_____________________________________________________________________

DATE                : 21/10/2026

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running NSS versions prior to 3.131.1.

====================================================================
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/vSxZxnOMMvs
_____________________________________________________________________

NSS 3.131.1 Release - Important Security Updates

Dennis Jackson

20 oct. 2026, 14:54:55 


Network Security Services (NSS) 3.131.1 was released on 20th October
2026. This release contains important security updates (see below).


Distribution Information

The HG tag is NSS_3_131_1RTM. NSS 3.131.1 requires NSPR 4.39 or newer.

NSS 3.131.1 source distributions are available on ftp.mozilla.org for
secure HTTPS download:

    Source tarballs: https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_131_1_RTM/src/

Changes in NSS 3.131.1

This release removes trust in the following root certificates: 

    Bug 2083709 - emSign Root CA - C1

    Bug 2083709 - emSign ECC Root CA - C3

    Bug 2084101 - emSign ECC Root CA - G3

The G3 root removal is in response to a recent security incident which
impacted some intermediate certificates. Mozilla has already protected
Firefox clients via an update to OneCRL which was delivered on Saturday
19th. This release helps protect downstream users beyond Firefox who
don’t receive revocation information or cannot block intermediate
certificates. 

We recommend you update as soon as possible


Best,
Dennis


=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================