Harry Sintonen on Nostr: Mitigating CVE-2026-111943 on #Debian: - sudo dpkg-reconfigure ca-certificates - ...
Mitigating CVE-2026-111943 on #Debian:
- sudo dpkg-reconfigure ca-certificates
- Select "ask" and deselect the following entries:
mozilla/emSign_ECC_Root_CA_-_C3.crt
mozilla/emSign_ECC_Root_CA_-_G3.crt
mozilla/emSign_Root_CA_-_C1.crt
mozilla/emSign_Root_CA_-_G1.crt
- Hit <Ok>
Alternatively you can edit /etc/ca-certificates.conf manually and add the specific entries:
!mozilla/emSign_ECC_Root_CA_-_C3.crt
!mozilla/emSign_ECC_Root_CA_-_G3.crt
!mozilla/emSign_Root_CA_-_C1.crt
!mozilla/emSign_Root_CA_-_G1.crt
...and sudo update-ca-certificates
#CVE_2026_111943
Published at
2026-10-20 14:09:06 UTCEvent JSON
{
"id": "dac9321371ebfee1befc1c2828450be281c09bfed6528d40e6baa185d90ca6db",
"pubkey": "5e4fde2d08a17a34bf773c36b8d53c0c7c778e9985af96ae3a7ce404ba376940",
"created_at": 1792505346,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@harrysintonen/117473630410416077",
"web"
],
[
"t",
"debian"
],
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/473/612/381/299/310/original/65f954077f77d34f.png",
"m image/png"
],
[
"t",
"cve_2026_111943"
],
[
"proxy",
"https://infosec.exchange/users/harrysintonen/statuses/117473630410416077",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/harrysintonen/statuses/117473630410416077",
"pink.momostr"
],
[
"-"
]
],
"content": "Mitigating CVE-2026-111943 on #Debian:\n\n- sudo dpkg-reconfigure ca-certificates\n- Select \"ask\" and deselect the following entries:\n mozilla/emSign_ECC_Root_CA_-_C3.crt\n mozilla/emSign_ECC_Root_CA_-_G3.crt\n mozilla/emSign_Root_CA_-_C1.crt\n mozilla/emSign_Root_CA_-_G1.crt\n- Hit \u003cOk\u003e\n\nAlternatively you can edit /etc/ca-certificates.conf manually and add the specific entries:\n\n!mozilla/emSign_ECC_Root_CA_-_C3.crt\n!mozilla/emSign_ECC_Root_CA_-_G3.crt\n!mozilla/emSign_Root_CA_-_C1.crt\n!mozilla/emSign_Root_CA_-_G1.crt\n\n...and sudo update-ca-certificates\n\n#CVE_2026_111943\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/117/473/612/381/299/310/original/65f954077f77d34f.png\n",
"sig": "5afeda7b81b86599e92b05c67dd747337a1f869edeab31cd5baf386924d98b21675a76e9290244066feaacbe039f48c16c368ae2f6be31b25bb2ba096d147f81"
}
