Mozilla Announces NSS 3.131.1 With Important Security Updates
Vulnerability Disclosure · 3 sources · Updated 3d ago · First seen Oct 20, 2026
Mozilla announced Network Security Services (NSS) 3.131.1, flagging important security updates to the cryptographic library. Available release information does not specify affected vulnerabilities, exploitation status, or remediation details beyond the release itself. Organizations using NSS should review the full release advisory, identify affected applications and dependencies, and prioritize deployment according to the documented fixes and vendor guidance.
Separately, Mozilla’s earlier OneCRL announcement describes its approach to rapidly distributing certificate revocations in Firefox. Introduced for Firefox 37, OneCRL centrally distributes revocations of intermediate CA certificates through the browser’s blocklist infrastructure, without requiring a full browser update or restart. It reduces reliance on online OCSP checks, which can fail open or introduce latency when strictly enforced. This provides historical context for Mozilla’s certificate-security infrastructure; the available information does not establish that NSS 3.131.1 changes OneCRL or addresses a certificate-revocation incident.
