From: "Sven Püschel" <s.pueschel@pengutronix.de>
To: ptxdist@pengutronix.de
Cc: "Sven Püschel" <s.pueschel@pengutronix.de>
Subject: [ptxdist] [PATCH 3/3] ca-certificates: version bump 3_130 -> 3_131_1
Date: Wed, 21 Oct 2026 11:51:40 +0200 [thread overview]
Message-ID: <20261021-fixemudhra-v1-3-36306b489b2e@pengutronix.de> (raw)
In-Reply-To: <20261021-fixemudhra-v1-0-36306b489b2e@pengutronix.de>
This fixes the compromised eMudhra intermediate certificates [1] by dropping
the relevant root certificates:
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/vSxZxnOMMvs
[1] https://emudhra.we-have-a-problem.com/
Signed-off-by: Sven Püschel <s.pueschel@pengutronix.de>
---
rules/ca-certificates.make | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/rules/ca-certificates.make b/rules/ca-certificates.make
index edebddb2cc1cb5fb5f8b937bf123a47c4dfbcf01..2929cb55f130f417bba588a1a2eb2ca37212b94d 100644
--- a/rules/ca-certificates.make
+++ b/rules/ca-certificates.make
@@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_CA_CERTIFICATES) += ca-certificates
#
# Paths and names
#
-CA_CERTIFICATES_VERSION := NSS_3_130_RTM
-CA_CERTIFICATES_SHA256 := beb7e6dfe6499926e52c075c27bcfbe4c957f8609c575b3860273ae2806f63eb
+CA_CERTIFICATES_VERSION := NSS_3_131_1_RTM
+CA_CERTIFICATES_SHA256 := 3ec2b4d240dc12c747eaf450061db84af757c483bbda302f9e29ceb5d70be510
CA_CERTIFICATES := ca-certificates-$(CA_CERTIFICATES_VERSION)
CA_CERTIFICATES_SUFFIX := txt
CA_CERTIFICATES_URL := https://hg.mozilla.org/projects/nss/raw-file/$(CA_CERTIFICATES_VERSION)/lib/ckfw/builtins/certdata.$(CA_CERTIFICATES_SUFFIX)
--
2.47.3
prev parent reply other threads:[~2026-10-21 9:52 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-10-21 9:51 [ptxdist] [PATCH 0/3] nss/nspr: Update to fix the eMudhra Intermediate CA Compromise Sven Püschel
2026-10-21 9:51 ` [ptxdist] [PATCH 1/3] nspr: version bump 4.37 -> 4.40 Sven Püschel
2026-10-21 9:51 ` [ptxdist] [PATCH 2/3] nss: version bump 3.130 -> 3.131.1 Sven Püschel
2026-10-26 7:57 ` Michael Olbrich
2026-10-21 9:51 ` Sven Püschel [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20261021-fixemudhra-v1-3-36306b489b2e@pengutronix.de \
--to=s.pueschel@pengutronix.de \
--cc=ptxdist@pengutronix.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox