Problem Description:
eMudhra generated several of its TLS intermediate CA certificates
using a flawed procedure that used trivially small private keys.
The keys have been recovered by several parties and publicly
disclosed. The intermediates are signed by the "emSign ECC Root
CA - G3" root certificate, which was included in the trusted
certificate bundle.
The intermediates have been revoked, but OpenSSL does not check
certificate revocation by default.
The corrected bundle marks "emSign ECC Root CA - G3" as untrusted.
It also incorporates the other root certificate additions and
removals in NSS 3.131.1.
Impact:
An attacker able to intercept network traffic can use the
compromised keys to issue a certificate that impersonates any TLS
server, allowing the traffic to be read or modified without
detection.