Control: forcemerge 1151413 1151446 Hi,
On Tue, Oct 20, 2026 at 08:05:30PM +0200, Elias Rohrer wrote: > Package: ca-certificates > Version: 20250419 > Severity: grave > Tags: security > X-Debbugs-Cc: [email protected] > > The private keys of eight eMudhra intermediate CAs have been > compromised. These were revoked for cACompromise on 18-19 Oct 2026. > Six of them are TLS intermediates under "emSign Root TLS CA - G3", > which chains to "emSign ECC Root CA - G3" in our bundle. Some also > chain via Sectigo cross-signs to "AAA Certificate Services" (shipped > as "Comodo AAA Services root"). > > Anyone holding these keys can issue certificates for arbitrary > domains. Browsers block the intermediates via OneCRL/CRLSets, but > OpenSSL, GnuTLS, rustls-native-certs and other users of > /etc/ssl/certs do not check revocation. They rely only on this > package, so they remain exposed. > > Mozilla removed emSign ECC Root CA - G3 from NSS on 20 Oct 2026 > (NSS 3.131.1). Ubuntu, certifi, webpki-roots, Go and Homebrew have > already shipped fixes. > > Requested: > - Remove/blacklist "emSign ECC Root CA - G3" > (SPKI SHA-256 > 8d417db2dd8bf5e3084d1e3f196d583849d81bdd4c00c70b9d39369e96b8c782) > in unstable, and in trixie and bookworm via the security archive. > - Remove "Comodo AAA Services root" in trixie and bookworm (it was > already removed in 20260223 in testing/unstable). This was already filled in #1151413, merging both reports. Regards, Salvatore
