The private keys of eight eMudhra intermediate CAs have been
compromised. These were revoked for cACompromise on 18-19 Oct 2026.
Six of them are TLS intermediates under "emSign Root TLS CA - G3",
which chains to "emSign ECC Root CA - G3" in our bundle. Some also
chain via Sectigo cross-signs to "AAA Certificate Services" (shipped
as "Comodo AAA Services root").

Anyone holding these keys can issue certificates for arbitrary
domains. Browsers block the intermediates via OneCRL/CRLSets, but
OpenSSL, GnuTLS, rustls-native-certs and other users of
/etc/ssl/certs do not check revocation. They rely only on this
package, so they remain exposed.

Mozilla removed emSign ECC Root CA - G3 from NSS on 20 Oct 2026
(NSS 3.131.1). Ubuntu, certifi, webpki-roots, Go and Homebrew have
already shipped fixes.

Requested:
- Remove/blacklist "emSign ECC Root CA - G3"
   (SPKI SHA-256
8d417db2dd8bf5e3084d1e3f196d583849d81bdd4c00c70b9d39369e96b8c782)
   in unstable, and in trixie and bookworm via the security archive.
- Remove "Comodo AAA Services root" in trixie and bookworm (it was
   already removed in 20260223 in testing/unstable).

References:
https://emudhra.we-have-a-problem.com/
https://bugzilla.mozilla.org/show_bug.cgi?id=2083709
https://github.com/golang/go/issues/82345

Hi,

This was already filled in #1151413, merging both reports.

Regards,
Salvatore

We believe that the bug you reported is fixed in the latest version of
ca-certificates, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1151413@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Salvatore Bonaccorso <carnil@debian.org> (supplier of updated ca-certificates package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 20 Oct 2026 16:40:44 +0200
Source: ca-certificates
Architecture: source
Version: 20260816+nmu1
Distribution: unstable
Urgency: medium
Maintainer: Julien Cristau <jcristau@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1151413
Changes:
 ca-certificates (20260816+nmu1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Blacklist "emSign ECC Root CA - G3" and "Comodo AAA Services root"
     (Closes: #1151413)
Checksums-Sha1:
 6ff206fb6c157e00d7c7ea64b177f7307a402240 1912 ca-certificates_20260816+nmu1.dsc
 25ee36c4aacb7ddd6d3b26193687c88db763f02c 271776 ca-certificates_20260816+nmu1.tar.xz
 1817662849d0fc879b801e8cdc68d92b0c96488e 5306 ca-certificates_20260816+nmu1_source.buildinfo
Checksums-Sha256:
 78e252455467cf37bb96ead84c053a86cc7d8000b9ecf290d89ace7b41adfc95 1912 ca-certificates_20260816+nmu1.dsc
 914416a1e44a25733aff51092fe4e27fdec1c9f6e8d1db0b8364922486153134 271776 ca-certificates_20260816+nmu1.tar.xz
 ca283563faaafacba5344a019c3e0e410f6127697625e1b998435aba2f9d3c57 5306 ca-certificates_20260816+nmu1_source.buildinfo
Files:
 f541a4fcd8238245dc7ebf98fb790f02 1912 misc optional ca-certificates_20260816+nmu1.dsc
 2584834e1555a1f195a4466abee498fe 271776 misc optional ca-certificates_20260816+nmu1.tar.xz
 8daae55638f5d72742fe86bd191ff1c4 5306 misc optional ca-certificates_20260816+nmu1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=iZxc
-----END PGP SIGNATURE-----