Firefox 158.0.1 blocks compromised eMudhra intermediate certificates
Key Takeaway
Mozilla issued Firefox 158.0.1 to block compromised intermediate certificates from Indian CA eMudhra through its OneCRL certificate revocation list.
Summary
Mozilla released Firefox 158.0.1, a security update that adds compromised eMudhra intermediate certificates to its OneCRL block list. eMudhra is an Indian certificate authority. The update prevents browsers from trusting these certificates. No other major changes were noted in this release.
What OneCRL blocks and why
- OneCRL (One Certificate Revocation List) is Mozilla's centralized mechanism for blocking revoked or compromised certificates without waiting for full CRL or OCSP checks
- The update targets intermediate certificates from eMudhra, not root certificates
- Intermediate certificates sit between root CAs and end-entity certificates; compromising them can enable forged TLS certificates for any domain
- Firefox applies OneCRL updates independently of version releases, but this version bundles the updated block list
Original reference: 9to5linux.com →