It is correct that the currently affected certs are the intermediates and not the roots.
However, the whole CA will probably be dropped by the CAB Forum soon because all eight affected private keys are two-(hex-)digit integers. This CA cannot be trusted any more. This researcher recovered and published all eight: https://github.com/Fluepke/emudrahahahahaha Regards
