Your message dated Tue, 20 Oct 2026 19:36:30 +0000
with message-id <[email protected]>
and subject line Bug#1151413: fixed in ca-certificates 20260816+nmu1
has caused the Debian Bug report #1151413,
regarding eMudhra Intermediate CA key compromise
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1151413: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1151413
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: src:ca-certificates
Version: 20250419
Various private keys from eMudhra CA intermediate certificates have
been compromised.
Mozilla report:
https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJ?pli=1
Mozilla has updated OneCRL in Firefox and NSS. Please update ca-
certificates in Debian accordingly.
Quick fix for critical systems:
Run
# dpkg-reconfigure ca-certicicates
and unselect all emCert certificates.
Regards
signature.asc
Description: This is a digitally signed message part
--- End Message ---
--- Begin Message ---
Source: ca-certificates
Source-Version: 20260816+nmu1
Done: Salvatore Bonaccorso <[email protected]>
We believe that the bug you reported is fixed in the latest version of
ca-certificates, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Salvatore Bonaccorso <[email protected]> (supplier of updated ca-certificates
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 20 Oct 2026 16:40:44 +0200
Source: ca-certificates
Architecture: source
Version: 20260816+nmu1
Distribution: unstable
Urgency: medium
Maintainer: Julien Cristau <[email protected]>
Changed-By: Salvatore Bonaccorso <[email protected]>
Closes: 1151413
Changes:
ca-certificates (20260816+nmu1) unstable; urgency=medium
.
* Non-maintainer upload.
* Blacklist "emSign ECC Root CA - G3" and "Comodo AAA Services root"
(Closes: #1151413)
Checksums-Sha1:
6ff206fb6c157e00d7c7ea64b177f7307a402240 1912 ca-certificates_20260816+nmu1.dsc
25ee36c4aacb7ddd6d3b26193687c88db763f02c 271776
ca-certificates_20260816+nmu1.tar.xz
1817662849d0fc879b801e8cdc68d92b0c96488e 5306
ca-certificates_20260816+nmu1_source.buildinfo
Checksums-Sha256:
78e252455467cf37bb96ead84c053a86cc7d8000b9ecf290d89ace7b41adfc95 1912
ca-certificates_20260816+nmu1.dsc
914416a1e44a25733aff51092fe4e27fdec1c9f6e8d1db0b8364922486153134 271776
ca-certificates_20260816+nmu1.tar.xz
ca283563faaafacba5344a019c3e0e410f6127697625e1b998435aba2f9d3c57 5306
ca-certificates_20260816+nmu1_source.buildinfo
Files:
f541a4fcd8238245dc7ebf98fb790f02 1912 misc optional
ca-certificates_20260816+nmu1.dsc
2584834e1555a1f195a4466abee498fe 271776 misc optional
ca-certificates_20260816+nmu1.tar.xz
8daae55638f5d72742fe86bd191ff1c4 5306 misc optional
ca-certificates_20260816+nmu1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=iZxc
-----END PGP SIGNATURE-----
pgpiz7rxdrdlR.pgp
Description: PGP signature
--- End Message ---
