simonwillison.netarticleeMudhra Intermediate CA Compromise
eMudhra Intermediate CA Compromise is a 20 October 2026 link-blog post reporting that private keys of eight eMudhra intermediate CA certificates were compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome programs. Software bundling trust lists needs updating: Linux distros must update ca-certificates, and uv 0.13.4, pip 26.2.2 and certifi 2026.10.19 ship new lists. The post does not describe how the keys were compromised.
TL;DR Flags compromised private keys of eight eMudhra intermediate CAs and lists trust-store updates for Linux, uv, pip and certifi.
Organisations named here
- eMudhra
Technologies named here
- uv 0.13.4
- Linux distributions
- pip 26.2.2
- certifi 2026.10.19
- Python ecosystem
- Python
- pip
- uv
- Linux
- certifi
Related in other
eprint.iacr.orgpaperRerandomizable Garbling for Arithmetic Circuits
aseemshrey.inarticle