返回全部动态
eMudhra 中间 CA 证书私钥泄露
原标题:eMudhra Intermediate CA Compromise
AI 摘要
eMudhra 的八个中间 CA 证书私钥被泄露,这些证书可链到 Mozilla、微软、苹果和 Chrome 根程序及众多下游信任库所信任的根证书。任何内置受信任证书列表的软件都需更新,Linux 发行版需更新 ca-certificates 包;Python 生态中 uv 0.13.4、pip 26.2.2 和 certifi 2026.10.19 已发布升级后的证书列表。
以上摘要由 AI 生成,可能存在误差。事实请以原文为准。
正文节选
20th October 2026 - Link Blog eMudhra Intermediate CA Compromise. This is very, very bad news: The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores. Any software that bundles a list of trusted certificates needs to be updated. This site is tracking software updates via this GitHub repository - Linux distros need to update their ca-certificates
发布时间:2026-10-21 07:50
抓取时间:2026-10-21 08:06
来源机构:Simon Willison