Skip to content
NewA calmer, faster ZeroHour

Firefox 153 ESR still trusts Comodo AAA, list reply says

Original title: Re: eMudhra Intermediates Compromise

oss-security ()1 · 1 read
Part of a story covered by 21 sourceseMudhra to exit TLS after weak intermediate keys blockedMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

Jakub Wilk says his Firefox 153 ESR still trusted the Comodo AAA certificate despite Mozilla bug 1957685.

In an oss-security reply on a thread titled eMudhra Intermediates Compromise, Jakub Wilk cites Mozilla bug 1957685 and a note from Solar Designer. He writes that his Firefox 153 ESR, which he expected to include the related change, still trusted the Comodo AAA certificate. The short post does not describe the compromise or a fix.

Unconfirmed: The snippet does not confirm why trust remained or the scope of any eMudhra intermediate compromise.

Key facts
  • The message is a brief reply dated October 21, not a full incident report.
  • Wilk says he is confused that the certificate remained trusted.
Security assessment · AI, from the article

Impact: Browser still trusts the Comodo AAA certificate

ProductAffected
Mozilla Firefox153 ESR
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

Posted by Jakub Wilk on Oct 21 * Solar Designer , 2026-10-21 07:54: https://bugzilla. mozilla. org/show_bug.

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.