On 21/10/2026 12:27, Robin Candau wrote:
On 21/10/2026 11:52, David Runge wrote:
Hi,

I would like to send the following news item asap:

```
On 2026-10-20 it was revealed, that [several certificates of the eMudhra intermediate Certificate Authority have been compromised] (https://emudhra.we-have-a-problem.com/).

The compromised certificates have been removed/invalidated with ca- certificates-mozilla >= 1.131.1-1.

Without an update to this central certificate bundle, systems are susceptible to man-in-the-middle attacks.
As such, we urge everyone to upgrade their systems.
```

In case you have wording suggestions, please add them in the hedgedoc:

https://md.archlinux.org/P-DJtqUkRB6PxZUrFWJ80A?view

Best,
David

LGTM, thanks!


Ah, I was about to say that there's a typo on the version (it's 3.131-1 not 1.131.1-1), but I see it's already fixed in the pad :)

--
Regards,
Robin Candau / Antiz

Attachment: OpenPGP_0xFDC3040B92ACA748.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to