Arch Linux is urging users to update their systems immediately. Version 3.131.1-1 or later of ca-certificates-mozilla removes or invalidates compromised certificates belonging to the eMudhra intermediate Certificate Authority. The distribution published its warning on October 21, saying the compromise had been disclosed the previous day.
According to Arch Linux, systems remain susceptible to man-in-the-middle attacks without an update to this central certificate bundle. Users should update their systems and verify that ca-certificates-mozilla is at least version 3.131.1-1. The notice does not detail the compromise, explain attack conditions or report exploitation; it does establish that an updated package is available.
Choose a sign-in method or comment as a guest below.