Ubuntu reports that eMudhra CA private keys were compromised and has released ca-certificates updates. The changes remove the emSign Root TLS CA – G3 and Comodo AAA Certificate Services roots, which cross-signed eMudhra. Fraudulent certificates could enable TLS endpoint impersonation and interception of connections.
Administrators should update ca-certificates. Fixes are available under standard support for Ubuntu 22.04, 24.04, 26.04 and 26.10; the listed releases from 14.04 through 20.04 require Ubuntu Pro ESM. Removing trust may make some legitimate hosts unreachable.
Browsers packaged as snaps typically use a separate certificate store. Updating the system package alone therefore does not cover them: Ubuntu recommends manually refreshing snaps if automatic updates are disabled.
Choose a sign-in method or comment as a guest below.