Version in base suite: 20250419 Base version: ca-certificates_20250419 Target version: ca-certificates_20250419+deb13u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/c/ca-certificates/ca-certificates_20250419.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/c/ca-certificates/ca-certificates_20250419+deb13u1.dsc debian/changelog | 8 ++++++++ mozilla/blacklist.txt | 5 +++++ 2 files changed, 13 insertions(+) dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmp17f0ycho/ca-certificates_20250419.dsc: no acceptable signature found dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmp17f0ycho/ca-certificates_20250419+deb13u1.dsc: no acceptable signature found diff -Nru ca-certificates-20250419/debian/changelog ca-certificates-20250419+deb13u1/debian/changelog --- ca-certificates-20250419/debian/changelog 2025-04-19 07:25:37.000000000 +0000 +++ ca-certificates-20250419+deb13u1/debian/changelog 2026-10-20 14:57:59.000000000 +0000 @@ -1,3 +1,11 @@ +ca-certificates (20250419+deb13u1) trixie-security; urgency=high + + * Non-maintainer upload by the Security Team. + * Blacklist "emSign ECC Root CA - G3" and "Comodo AAA Services root" + (Closes: #1151413) + + -- Salvatore Bonaccorso Tue, 20 Oct 2026 16:57:59 +0200 + ca-certificates (20250419) unstable; urgency=medium [ Alexander Kanavin ] diff -Nru ca-certificates-20250419/mozilla/blacklist.txt ca-certificates-20250419+deb13u1/mozilla/blacklist.txt --- ca-certificates-20250419/mozilla/blacklist.txt 2023-03-11 08:37:33.000000000 +0000 +++ ca-certificates-20250419+deb13u1/mozilla/blacklist.txt 2026-10-20 14:57:49.000000000 +0000 @@ -3,4 +3,9 @@ # Blacklist explicitly distrusted certificates to explicitly ignore them and prevent build errors "Explicitly Distrust DigiNotar Root CA" +# Blacklist "emSign ECC Root CA - G3" (cf. #1151413) +"emSign ECC Root CA - G3" +# Blacklist "Comodo AAA Services root" (cf. #1151413) +"Comodo AAA Services root" + # Expired CAs