Firefox ESR 115.43.1 does not block eMudhra

[errefmorh]

I checked at https://emudhra.we-have-a-problem.com/, and all results were flagged as "insecure."
This applies to both existing and new profiles.

[Agentvirtuel]

Bonjour

Windows7 Firefox 115 does your client still trust the compromised intermediates.

[Agentvirtuel]

Windows10 Firefox 115 does your client still trust the compromised intermediates.

[Agentvirtuel]

A article https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-em...

Just to see https://support.mozilla.org/en-US/questions/firefox?show=done

[Agentvirtuel]

Related subject.

Firefox Release Calendar
https://whattrainisitnow.com/calendar
https://whattrainisitnow.com/release/?version=esr

J'ai installé Linux en double-démarrage avec Windows7.

Install Firefox on Linux
https://support.mozilla.org/en-US/kb/install-firefox-linux
As for me, System Firefox installation (for advanced users), that's my installation.

[Agentvirtuel]

(e.g.) https://support.mozilla.org/en-US/questions/1613540

Below, Windows7.

[Agentvirtuel]

Below, Windows10.

Firefox a bloqué cette page. Faites preuve de prudence, il semble y avoir un problème.

[Agentvirtuel]

New SSL Report: Overall Rating A, at the moment, analyzed.
https://www.ssllabs.com/ssltest/analyze.html?d=indianvisaonline.gov.in

[Agentvirtuel]

Bonsoir

To complement, below, Firefox Windows7.

[Agentvirtuel]

Bonjour

New test Firefox Windows7.
Your browser trusted 0 of 14 compromised certificate chains.

[dftf]

@errefmorh : I see that ESR 115.44.0 has since released for Windows 7 and 8.

Do you still get the same result after updating to that new version?

[dftf]

@errefmorh : have just tested the ESR 115.44 release myself, and confirmed this is still an issue:

The certificates that should have been removed are still listed:

For now, you can protect yourself by removing those certificates manually.  Go into the Firefox settings, then search for certificates and you should have a "manage certificates" button.  Click that, and you'll see the "Certificate Manager" shown in the right-side of the image above.

Expand "eMudhra Inc" and then hold CONTROL and you can select both the certificates below it; then click "Delete or Distrust", then OK in the next dialog.  Once they are gone, do the same for ones under the "eMudhra Technologies Limited" heading.

When they are all gone, run the test again and it'll now pass all 14.

[dftf]

@kelimuttu : I've just logged this issue as an idea.

Given the severity of this issue, could you please approve it ASAP and then ask internally who manages the ESR 115 legacy releases and ask them to look into this?  It's pretty-bad that the latest version (ESR 115.44) is still shipping the compromised certificates.  (ESR 153.6.0 however is safe.)

Thank you

[kelimuttu]

@dftf Thanks for the nudge! I just forwarded the report to the release team.

[dftf]

@kelimuttu : a member of the "eMudhra we have a problem" website team has now opened this BugZilla ticket: https://bugzilla.mozilla.org/show_bug.cgi?id=2086788 

The reply there is odd though: "if users are idle for 20 seconds, the browser should call out to a remote server to query which certificates should be withdrawn".

How about just not ship the affected certificates to begin with?  A clean install of ESR 115.44 shouldn't include them.

[Agentvirtuel]

Bonjour

As for me, new verifications performed.

Windows7 Firefox 115.43.1 does your client still trust the compromised intermediates. Your browser trusted 0 of 14 compromised certificate chains.

[Agentvirtuel]

Windows7 Firefox 115.44.0 does your client still trust the compromised intermediates. Your browser trusted 0 of 14 compromised certificate chains.

[Agentvirtuel]

Linux Firefox 159.0 does your client still trust the compromised intermediates. Your browser trusted 0 of 14 compromised certificate chains.

[dftf]

@Agentvirtuel : thanks, but this discussion is solely about the 115 ESR releases.

Not sure anyone asked if 159.0 on Linux was affected or not? 🤷🏻‍♂️

[Agentvirtuel]

Related subject, anyway, Firefox 115 browser is out of date https://support.mozilla.org/en-US/questions/1614398

[dftf]

Please stop posting this randomly, it's annoying

For someone who isn't a bot, you sure exhibit a lot of bot-like behaviour 💀

[Agentvirtuel]

Je vous explique ce qu'est un navigateur internet obsolète, que faire si mon navigateur est obsolète ?.

Je vous souhaite une agréable journée, et agréable journée à tous.

[dftf]

@Agentvirtuel : what browser would you recommend to someone who's PC is still running Windows 7 or 8?

[Agentvirtuel]

Firefox support for Windows 7, 8 and 8.1
https://support.mozilla.org/en-US/kb/firefox-users-windows-7-8-and-81-moving-extended-support
https://support.mozilla.org/fr/kb/passage-firefox-windows-7-8-et-81-ESR

If your current hardware can't handle Windows 10 or higher for some reason, you can switch to a Linux-based operating system. The vast majority of Linux distributions come with Firefox as the default browser. Please see the support websites for the version of Linux that you're interested in.

[Agentvirtuel]

Bonsoir

Si vous souhaitez essayer https://portableapps.com/apps/internet/r3dfox-portable

Below, un test effectué https://support.mozilla.org/en-US/questions/1613255

[Agentvirtuel]

@dftf 

File a bug report or feature request for Mozilla products
https://support.mozilla.org/en-US/kb/file-bug-report-or-feature-request-mozilla
If you wish, you can file a bug report

[dftf]

@Agentvirtuel : a member of the team behind the "eMudhra we have a problem" website has filled a BugZilla ticket here: https://bugzilla.mozilla.org/show_bug.cgi?id=2086788