Debian updates nss package to remove compromised eMudhra certificates
PATCHDebianredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
DSA-6599-1 updates the nss packages in Debian to remove the eMudhra emSign Root CA - G3, eMudhra emSign Root CA - C1 and emSign ECC Root CA - C3 certificates from the trusted store, following the discovery that several eMudhra intermediate CA certificates were compromised. No CVE identifiers or affected package versions are given in the article. Defenders running Debian should apply the updated nss packages and verify that these root certificates are no longer trusted.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Install the update through the product’s usual update setting.
General advice for this kind of story
Full story timeline · 1 update
Who reported · 1 outlet
Debian Security Advisories