Tails 7.15.1 Emergency Release Blocks Forged eMudhra Certificates

Published by

Tails 7.15.1 is an emergency release from the Tor Project designed to block compromised eMudhra certificates, following a security breach that allowed weak keys to be exploited. The update includes a new version of Tor Browser and modifies the Debian ca-certificates package to ensure all applications within Tails do not trust the affected certificates. The compromised eMudhra certificates resulted from a key generation flaw that produced keys with only three to eight bits of entropy, which were easily cracked by security researchers. Users of Tails 7.0 or newer are urged to upgrade to the latest version to safeguard against potential attacks on clearnet browsing over Tor



Tails 7.15.1 Emergency Release Blocks Forged eMudhra Certificates

Tails 7.15.1 is a security emergency from the Tor Project that updates Tor Browser to 15.0.26 and blocks the compromised certificates of Indian CA eMudhra. The incident stems from eight eMudhra intermediate keys that had only three to eight bits of entropy, letting researcher Scott Helme crack them in under a second. Mozilla, Apple, and Microsoft raced to revoke the affected certs, and Google confirmed Certificate Transparency limited real-world exploitation. If you're running Tails 7.0 or newer, upgrade now to protect against forged clearnet sites over Tor.

Tails 7.15.1 Emergency Release Blocks Forged eMudhra Certificates @ Linux Compatible