| Package | ca-certificates |
|---|---|
| Version | 20250419~deb12u1~deb11u1~deb10u1~deb9u2 (stretch), 20250419~deb12u1~deb11u1~deb10u2 (buster), 20250419~deb12u1~deb11u2 (bullseye) |
It was discovered that several eMudhra intermediate CA certificates have been compromised. Updated ca-certificate packages are provided to remove the “emSign ECC Root CA - G3” and “Comodo AAA Services root” certificates.
For Debian 10 buster, these problems have been fixed in version 20250419~deb12u1~deb11u1~deb10u2.
For Debian 11 bullseye, these problems have been fixed in version 20250419~deb12u1~deb11u2.
For Debian 9 stretch, these problems have been fixed in version 20250419~deb12u1~deb11u1~deb10u1~deb9u2.
We recommend that you upgrade your ca-certificates packages.
Further information about Extended LTS security advisories can be found in the dedicated section of our website.