UBports Releases Updates to Block Compromised CAs
The latest Ubuntu Touch releases address the eMudhra certificate compromise to secure user device trust.
Updated on Oct. 25, 2026 in Cybersecurity
Live Poll
Do you trust your mobile operating system to quickly block compromised security certificates?
The UBports team has released versions 24.04-2.2 and 24.04-1.6 to mitigate the compromise of eMudhra Intermediate CA certificates. These updates block root certificates linked to the compromised authority and incorporate standard security changes from Ubuntu upstream.
Why it matters
Blocking compromised certificates is essential for maintaining trust in encrypted mobile communications and network integrity. The update ensures that UBports devices do not rely on a compromised chain of trust following the eMudhra security incident.
The releases 24.04-2.2 and 24.04-1.6 include updated security policies to block root certificates chaining to the compromised eMudhra Intermediate CA. An AppArmor issue—a Linux kernel security module that restricts program capabilities—was also resolved to allow the Morph Browser to launch.
The players
UBports
An open-source project dedicated to maintaining and developing the Ubuntu Touch mobile operating system.
eMudhra
A digital identity and trust services provider whose Intermediate CA certificates were recently compromised.
The details
The update implements a blacklist of root certificates that rely on the compromised eMudhra Intermediate CA to prevent unauthorized certificate validation. Additionally, the team resolved an AppArmor conflict that prevented the Morph Browser from executing its security profile. While these security fixes have been deployed, the Gallery app version 3.2.0 contains a software regression that currently blocks access to stored photo albums.
Timeline
October 25, 2026: UBports versions 24.04-2.2 and 24.04-1.6 were released.
The Tech Race
The UBports team is responding to the eMudhra Intermediate CA compromise incident to maintain the security posture of their Linux-based mobile platform. This update aligns the project with standard security practices following similar certificate authority breaches in the wider industry.
Ubuntu Touch users should install versions 24.04-2.2 or 24.04-1.6 immediately to ensure their device maintains a secure chain of trust. Those currently relying on the Gallery app may face difficulty accessing photo albums until the upcoming patch is released.
The takeaway
The UBports team acted quickly to strip compromised root certificates from their platform following the eMudhra incident. Monitor the Open-Store for the upcoming Gallery app patch to restore full functionality to your device photo library.
What happens next
Users should look for a future update to the Gallery app, which the team intends to distribute via the Open-Store to address the photo album regression.
Further reading
Stay updated on the latest software security developments in the Cybersecurity section.
Live Poll
Do you trust your mobile operating system to quickly block compromised security certificates?
