# Tor Browser 15.0.26 blocks compromised eMudhra intermediate certificates

> **Key takeaway:** Tor Browser 15.0.26 updates its certificate authority intermediate store to block compromised eMudhra certificates, with the revocation database rebuilding on first startup.

**Published:** 2026-10-21T00:00:00+00:00 
**Source:** Tor Project Privacy Blog 
**Category:** decentralized-p2p 
**Canonical URL:** https://fosswire.org/news/tor-browser-15026-blocks-compromised-emudhra-intermediate-ce.html 

## Summary
The Tor Project has released Tor Browser 15.0.26, a security-focused update that blocks compromised intermediate certificates issued by eMudhra, an Indian certificate authority. This change addresses a supply-chain trust issue where fraudulent or misused intermediate CA certificates could potentially be exploited to impersonate websites or intercept TLS-encrypted traffic. The update requires users to download the new version from the Tor Project's distribution channels. On first launch, the browser will rebuild its certificate revocation database, a process that may take several minutes and could briefly affect startup time.

The release is available across all supported platforms and represents a routine but critical maintenance update to the browser's trust infrastructure. The underlying change was tracked as tor-browser#45397, which covered updates to CA intermediates and related settings dumps. No additional feature changes or bug fixes were highlighted in the abbreviated changelog since version 15.0.25.

## Certificate authority update and trust store changes
- **Compromised certificate blocking:** The update specifically targets intermediate certificates from eMudhra, a certificate authority that issues digital certificates for TLS authentication, indicating these intermediates were flagged as untrustworthy.
- **Revocation database rebuild:** The browser's local certificate revocation database must reconstruct itself on first startup after installation, with the Tor Project noting this process can take several minutes.
- **Cross-platform deployment:** The CA intermediate updates and settings dumps apply uniformly across all supported Tor Browser platforms, maintaining consistent trust anchor behavior.
- **Settings dump synchronization:** The change includes updates to 'settings dumps' used in Tor Browser's application releases, suggesting automated configuration packaging was regenerated to incorporate the new trust store state.

## Why it matters
For Tor Browser users, this update closes a window where compromised CA intermediates could have enabled man-in-the-middle attacks against .onion services or clearnet sites visited through Tor circuits. The automatic revocation database rebuild, while potentially slowing first launch, eliminates the need for manual certificate management. Linux distribution maintainers packaging Tor Browser should note that downstream rebuilds will need to incorporate this trust store revision to ensure users receive equivalent protection.