[SECURITY] [DSA 6572-1] ca-certificates security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6572-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 20, 2026 https://www.debian.org/security/faq -...

emudhra-poc

eMudhra CA Key Compromise Proof-of-Concept In October 2026, e...

Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software

The private keys of eight eMudhra intermediate certificate authority CA certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate for...

DEBIAN-CVE-2026-113470

Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is...

CVE-2026-113470

Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is...

EUVD-2026-104991

Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is...

CVE-2026-113470

Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is...

Security Vulnerabilities fixed in Firefox 158.0.1 — Mozilla

Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is...

Security Vulnerabilities fixed in Firefox ESR 153.5.1 — Mozilla

Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is...

Security Vulnerabilities fixed in Firefox ESR 115.43.1 — Mozilla

Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is...

PT-2026-118247

Name of the Vulnerable Software and Affected Versions Go versions prior to 1.27.3 Go versions prior to 1.26.10 Description Security concerns were identified regarding a specific certificate authority, leading to the distrust of eight intermediate CA keys. The crypto/x509 package now filters and...

CVE-2023-43900: Authorization Bypass Through User-Controlled Key

Insecure Direct Object References IDOR in eMudhra emSigner v2.8.7 allow authenticated attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters...

CVE-2023-43901: Incorrect Authorization

Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user...

CVE-2023-43902: Weak Password Recovery Mechanism for Forgotten Password

Incorrect access control in the Forgot Your Password function of eMudhra emSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privileges via a crafted password reset token...