Package: ca-certificates Version: 20250419 Severity: grave Tags: security X-Debbugs-Cc: [email protected]
The private keys of eight eMudhra intermediate CAs have been compromised. These were revoked for cACompromise on 18-19 Oct 2026. Six of them are TLS intermediates under "emSign Root TLS CA - G3", which chains to "emSign ECC Root CA - G3" in our bundle. Some also chain via Sectigo cross-signs to "AAA Certificate Services" (shipped as "Comodo AAA Services root"). Anyone holding these keys can issue certificates for arbitrary domains. Browsers block the intermediates via OneCRL/CRLSets, but OpenSSL, GnuTLS, rustls-native-certs and other users of /etc/ssl/certs do not check revocation. They rely only on this package, so they remain exposed. Mozilla removed emSign ECC Root CA - G3 from NSS on 20 Oct 2026 (NSS 3.131.1). Ubuntu, certifi, webpki-roots, Go and Homebrew have already shipped fixes. Requested: - Remove/blacklist "emSign ECC Root CA - G3"(SPKI SHA-256 8d417db2dd8bf5e3084d1e3f196d583849d81bdd4c00c70b9d39369e96b8c782)
in unstable, and in trixie and bookworm via the security archive. - Remove "Comodo AAA Services root" in trixie and bookworm (it was already removed in 20260223 in testing/unstable). References: https://emudhra.we-have-a-problem.com/ https://bugzilla.mozilla.org/show_bug.cgi?id=2083709 https://github.com/golang/go/issues/82345
OpenPGP_signature.asc
Description: OpenPGP digital signature
