Update to ca-certificates-mozilla ≥ 3.131.1-1 to prevent man-in-the-middle attacks
Key points
Arch Linux is asking all users to upgrade right away after several certificates from the eMudhra intermediate Certificate Authority were found to be compromised. The fix ships in ca-certificates-mozilla 3.131.1-1 and later.
What happened
- The compromise of several eMudhra intermediate CA certificates became public on 2026-10-20.
ca-certificates-mozilla3.131.1-1 and newer remove or invalidate the affected certificates.
Who is affected
- Any system still running a version of this central certificate bundle older than 3.131.1-1 is open to man-in-the-middle attacks.
What to do
- Upgrade the system now so that
ca-certificates-mozillais at version 3.131.1-1 or later.
Summary by DistroNews, based on the original post.
On 2026-10-20 it was revealed, that several certificates of the eMudhra intermediate Certificate Authority have been compromised. The compromised certificates have been removed/invalidated with ca-certificates-mozilla ≥ 3.131.1-1. Without an update to this central certificate bundle, systems are susceptible to man-in-the-middle attacks. As such, we urge everyone to upgrade their systems immediately.
This is the summary Arch Linux News published with the story. The full text is on the original page.
Read the original at archlinux.org