NSS
A network security services library maintained by Mozilla that provides cross-platform cryptography and certificate trust functions and is depended on by Firefox, curl, Python and others.
Timeline (last 90 days)
After learning of the vulnerability, Mozilla took three days to update its certificate trust list (NSS), and this list is relied upon by a large number of open-source projects such as curl and Python.
NSS is the Network Security Services library maintained by Mozilla, which contains the root certificate trust list shared by the browser and many open-source software programs, and tools such as curl and Python directly rely on NSS's trust store.
SSLKEYLOGFILE is an environment variable first introduced by NSS and later widely supported by mainstream TLS implementations; when a client program detects this variable, it writes session keys to a file in NSS Key Log format after the TLS handshake.
glibc's DNS resolution is implemented through the NSS (Name Service Switch) framework, which supports configuring multiple name resolution backends via /etc/nsswitch.conf.
All Facts (4)
NSS is the Network Security Services library maintained by Mozilla, which contains the root certificate trust list shared by the browser and many open-source software programs, and tools such as curl and Python directly rely on NSS's trust store.
50%UnverifiedSSLKEYLOGFILE is an environment variable first introduced by NSS and later widely supported by mainstream TLS implementations; when a client program detects this variable, it writes session keys to a file in NSS Key Log format after the TLS handshake.
50%Unverifiedglibc's DNS resolution is implemented through the NSS (Name Service Switch) framework, which supports configuring multiple name resolution backends via /etc/nsswitch.conf.
50%UnverifiedAfter learning of the vulnerability, Mozilla took three days to update its certificate trust list (NSS), and this list is relied upon by a large number of open-source projects such as curl and Python.
50%