Tails 7.15.1 released to block compromised eMudhra certificates
Key Takeaway
Tails 7.15.1 is an emergency release that updates Tor Browser and certificate authorities to mitigate a compromise of eMudhra intermediate certificates.
Summary
The Tor Project has issued Tails 7.15.1 as an emergency update following the compromise of eMudhra certificate authority intermediate certificates. The release updates Tor Browser to version 15.0.26 to fix CVE-2026-113470 and updates the Debian ca-certificates package. This prevents attackers from impersonating websites via HTTPS, a risk that could be exploited by exit nodes or ISPs.
Security implications of the eMudhra compromise
- Updates Tor Browser to 15.0.26 to address CVE-2026-113470.
- Blocks all eMudhra certificates within the system via the ca-certificates Debian package.
- Mitigates risks where an attacker (such as an exit node or ISP) could impersonate a website using compromised intermediate certificates.
- Onion sites remain unaffected by this specific vulnerability.
Why it matters
Users running Tails should upgrade immediately to protect their HTTPS connections from impersonation attacks, though onion services are not at risk.
What to do
- Update Tails to version 7.15.1 to receive the Tor Browser 15.0.26 update and the new Debian ca-certificates package.
- Perform an automatic upgrade from Tails 7.0 or later to keep Persistent Storage.
- Follow manual upgrade instructions if the automatic upgrade fails or if Tails fails to start.
Original reference: blog.torproject.org →