136 private links
According to El Diario, the authorities responded to Infineon's October vulnerability disclosure by revoking, on November 6, all certificates issued since April 2015.
What's more, the authorities have stopped letting people sign things with the card at the self-service terminals found at many police stations.
That decision affects every card, not only those that have the flaw.
But there is as yet no indication of when the affected cards will be updated. Indeed, there doesn't seem to be much official information out there at all, something which has not gone unnoticed in the Spanish tech press.
"Neither the police nor other public bodies have given more information through their social media accounts about the impact of the vulnerability and how to act if affected," said Xataka.