cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

About vulnerability

Apple-Ringo
Making moves

I'm Japanese, so I'm using a translator. Please let me know if there are any mistakes.

I can't correctly determine the disguised certificate in Firefox. The test site allows you to access without blocking 3 fake certificates.

At this rate, I think it will involve serious security. Safari and other browsers can be blocked, so I think it can be solved relatively easily.

 

1 REPLY 1

dftf
Collaborator

I assume you are referring to this story:
https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compro...

If "yes", then you are safe if you have one of the following versions of Firefox installed:
158.0.1
153.5.1 ESR
115.43.1 ESR

For each of those, the "release notes" say this issue was addressed:

Mozilla blocked compromised eMudhra intermediate certificates via OneCRL on October 17th. The blocks were distributed to clients via Remote Settings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is disabled by policy or otherwise unavailable in the user's network environment.

Is that what you wanted to know?