#1151413 eMudhra Intermediate CA key compromise

Package:
src:ca-certificates
Source:
src:ca-certificates
Submitter:
Stephan Verbücheln
Date:
2026-10-20 19:39:03 UTC
Severity:
normal
Tags:
#1151413#5
Date:
2026-10-20 13:46:01 UTC
From:
To:
Various private keys from eMudhra CA intermediate certificates have
been compromised.

Mozilla report:
https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJ?pli=1

Mozilla has updated OneCRL in Firefox and NSS. Please update ca-
certificates in Debian accordingly.

Quick fix for critical systems:
Run
# dpkg-reconfigure ca-certicicates
and unselect all emCert certificates.

Regards
#1151413#10
Date:
2026-10-20 14:12:09 UTC
From:
To:
Sorry, the affected certificates are:
[*] mozilla/emSign_ECC_Root_CA_-_C3.crt
[*] mozilla/emSign_ECC_Root_CA_-_G3.crt
[*] mozilla/emSign_Root_CA_-_C1.crt
[*] mozilla/emSign_Root_CA_-_G1.crt

Regards
#1151413#15
Date:
2026-10-20 14:27:09 UTC
From:
To:
Hi,

https://emudhra.we-have-a-problem.com/ contains some more information
on it as well.

Regards,
Salvatore
#1151413#24
Date:
2026-10-20 14:52:39 UTC
From:
To:
Here is a "bigger hammer" blacklisting "emSign Root TLS CA - G3" (and
"AAA Certificate Services"), although the later would not be strictly
needed for the packaging.

The same could be done for a trixie-security update.

Regards,
Salvatore
#1151413#29
Date:
2026-10-20 15:02:09 UTC
From:
To:
Hi,

And here the same for trixie-security.

Salvatore
#1151413#34
Date:
2026-10-20 16:31:03 UTC
From:
To:
With proper versioning now.

Salvatore
#1151413#39
Date:
2026-10-20 17:42:45 UTC
From:
To:
Hi,

I wanted to clear up some confusion that caused me some panic.

In this bug Stephan Verbücheln mentions four certs as affected, but I
think that is too broad.

According to report, the ones affected are:

emSign_ECC_Root_CA_-_G3.crt  aka "CN=emSign ECC Root CA - G3"
Comodo_AAA_Services_root.crt aka "CN=AAA Certificate Services"

These other ones are not affected at this time:

emSign_ECC_Root_CA_-_C3.crt aka "CN=emSign ECC Root CA - C3"
emSign_Root_CA_-_C1.crt     aka "CN=emSign Root CA - C1"
emSign_Root_CA_-_G1.crt     aka "CN=emSign Root CA - G1"


The patches that Salvatore mentions are correct and only include the two
affected ones and the others will not be removed at this time.

Thanks,
#1151413#46
Date:
2026-10-20 18:48:19 UTC
From:
To:
It is correct that the currently affected certs are the intermediates
and not the roots.

However, the whole CA will probably be dropped by the CAB Forum soon
because all eight affected private keys are two-(hex-)digit integers.
This CA cannot be trusted any more.

This researcher recovered and published all eight:
https://github.com/Fluepke/emudrahahahahaha

Regards
#1151413#53
Date:
2026-10-20 19:36:30 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
ca-certificates, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1151413@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Salvatore Bonaccorso <carnil@debian.org> (supplier of updated ca-certificates package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 20 Oct 2026 16:40:44 +0200
Source: ca-certificates
Architecture: source
Version: 20260816+nmu1
Distribution: unstable
Urgency: medium
Maintainer: Julien Cristau <jcristau@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1151413
Changes:
 ca-certificates (20260816+nmu1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Blacklist "emSign ECC Root CA - G3" and "Comodo AAA Services root"
     (Closes: #1151413)
Checksums-Sha1:
 6ff206fb6c157e00d7c7ea64b177f7307a402240 1912 ca-certificates_20260816+nmu1.dsc
 25ee36c4aacb7ddd6d3b26193687c88db763f02c 271776 ca-certificates_20260816+nmu1.tar.xz
 1817662849d0fc879b801e8cdc68d92b0c96488e 5306 ca-certificates_20260816+nmu1_source.buildinfo
Checksums-Sha256:
 78e252455467cf37bb96ead84c053a86cc7d8000b9ecf290d89ace7b41adfc95 1912 ca-certificates_20260816+nmu1.dsc
 914416a1e44a25733aff51092fe4e27fdec1c9f6e8d1db0b8364922486153134 271776 ca-certificates_20260816+nmu1.tar.xz
 ca283563faaafacba5344a019c3e0e410f6127697625e1b998435aba2f9d3c57 5306 ca-certificates_20260816+nmu1_source.buildinfo
Files:
 f541a4fcd8238245dc7ebf98fb790f02 1912 misc optional ca-certificates_20260816+nmu1.dsc
 2584834e1555a1f195a4466abee498fe 271776 misc optional ca-certificates_20260816+nmu1.tar.xz
 8daae55638f5d72742fe86bd191ff1c4 5306 misc optional ca-certificates_20260816+nmu1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=iZxc
-----END PGP SIGNATURE-----