{
  "@context": "https://schema.org",
  "@id": "https://aggr.aymericbeaumet.com/items/simonwillison-net/2026-10-20-emudhra-intermediate-ca-compromise/#webpage",
  "@type": [
    "WebPage",
    "ArchiveComponent"
  ],
  "articleBody": "**[eMudhra Intermediate CA Compromise](https://emudhra.we-have-a-problem.com)**. This is very, very bad news:\n\n> The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores.\n\nAny software that bundles a list of trusted certificates needs to be updated. This site is tracking software updates [via this GitHub repository](https://github.com/galadran/we-have-a-problem.com) - Linux distros need to update their `ca-certificates` packages.\n\nIn Python world [uv 0.13.4](https://github.com/astral-sh/uv/releases/tag/0.13.4) and [pip 26.2.2](https://github.com/pypa/pip/releases/tag/26.2.2) and [certifi 2026.10.19](https://github.com/certifi/python-certifi/releases/tag/2026.10.19) have been released with upgraded certificate lists.\n",
  "authors": [],
  "captured_at": "2026-10-21T00:05:10.170627791+00:00",
  "category": "programming",
  "content_html": "<p><strong><a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://emudhra.we-have-a-problem.com\">eMudhra Intermediate CA Compromise</a></strong>. This is very, very bad news:</p>\n<blockquote>\n<p>The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores.</p>\n</blockquote>\n<p>Any software that bundles a list of trusted certificates needs to be updated. This site is tracking software updates <a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://github.com/galadran/we-have-a-problem.com\">via this GitHub repository</a> - Linux distros need to update their <code>ca-certificates</code> packages.</p>\n<p>In Python world <a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://github.com/astral-sh/uv/releases/tag/0.13.4\">uv 0.13.4</a> and <a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://github.com/pypa/pip/releases/tag/26.2.2\">pip 26.2.2</a> and <a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://github.com/certifi/python-certifi/releases/tag/2026.10.19\">certifi 2026.10.19</a> have been released with upgraded certificate lists.</p>\n",
  "content_markdown": "**[eMudhra Intermediate CA Compromise](https://emudhra.we-have-a-problem.com)**. This is very, very bad news:\n\n> The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores.\n\nAny software that bundles a list of trusted certificates needs to be updated. This site is tracking software updates [via this GitHub repository](https://github.com/galadran/we-have-a-problem.com) - Linux distros need to update their `ca-certificates` packages.\n\nIn Python world [uv 0.13.4](https://github.com/astral-sh/uv/releases/tag/0.13.4) and [pip 26.2.2](https://github.com/pypa/pip/releases/tag/26.2.2) and [certifi 2026.10.19](https://github.com/certifi/python-certifi/releases/tag/2026.10.19) have been released with upgraded certificate lists.\n",
  "dateCreated": "2026-10-21T00:05:10.170627791+00:00",
  "date_created": "2026-10-20T23:50:25+00:00",
  "date_modified": "2026-10-20T23:50:25+00:00",
  "date_published": "2026-10-20T23:50:25+00:00",
  "description": "eMudhra Intermediate CA Compromise This is very, very bad news: The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and…",
  "external_url": "https://simonwillison.net/2026/Oct/20/emudhra-certificates/",
  "git": {
    "commit": "33e7967b937ef6329f2d9194d87eba92105b7ced",
    "path": "items/simonwillison-net/2026/10/2026-10-20-emudhra-intermediate-ca-compromise.md",
    "permalink": "https://github.com/aymericbeaumet/aggr-instance/blob/33e7967b937ef6329f2d9194d87eba92105b7ced/items/simonwillison-net/2026/10/2026-10-20-emudhra-intermediate-ca-compromise.md"
  },
  "id": "urn:aggr:item:09b06ee9aa009a2d28af3d4fa4e3264a2533346b",
  "isBasedOn": {
    "@id": "https://simonwillison.net/2026/Oct/20/emudhra-certificates/"
  },
  "mainEntity": {
    "@id": "https://simonwillison.net/2026/Oct/20/emudhra-certificates/",
    "@type": "CreativeWork",
    "archivedAt": {
      "@id": "https://aggr.aymericbeaumet.com/items/simonwillison-net/2026-10-20-emudhra-intermediate-ca-compromise/#webpage"
    },
    "dateModified": "2026-10-20T23:50:25+00:00",
    "datePublished": "2026-10-20T23:50:25+00:00",
    "headline": "eMudhra Intermediate CA Compromise",
    "timeRequired": "PT1M",
    "url": "https://simonwillison.net/2026/Oct/20/emudhra-certificates/",
    "wordCount": 92
  },
  "name": "Archived snapshot: eMudhra Intermediate CA Compromise",
  "preview": null,
  "reading_minutes": 1,
  "replicated_at": null,
  "source": "simonwillison-net",
  "source_name": "Simon Willison's Weblog",
  "summary": "eMudhra Intermediate CA Compromise This is very, very bad news: The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores. Any software that bundles a list of trusted certificates needs to be updated. This site is tracking software updates via this GitHub repository - Linux distros need to update their ca-certificates packages. In Python world uv 0.13.4 and pip 26.2.2 and certifi 2026.10.19 have been released with upgraded certificate lists. Tags: encryption, https, pip, python, security, uv",
  "tags": [
    "encryption",
    "https",
    "pip",
    "python",
    "security",
    "uv"
  ],
  "temporalCoverage": "2026-10-21T00:05:10.170627791+00:00",
  "title": "eMudhra Intermediate CA Compromise",
  "url": "https://aggr.aymericbeaumet.com/items/simonwillison-net/2026-10-20-emudhra-intermediate-ca-compromise/",
  "word_count": 92
}