X XFediYour place in the Fediverse
XFEDI

Conversation

ActivityPub

🚨Python friends, upgrade (or have your agent upgrade) every certifi package across all your projects and machines!

uv self update
uv lock --upgrade-package certifi

Private keys from 8 intermediate CA certs have been compromised!

https://x.com/astuyve/status/2112559796914167931

X (formerly Twitter)AJ Stuyvenberg (@astuyve) on Xprivate keys from 8 intermediate CA certs have been compromised (eMudhra) Happy "Update everything" day to all my pager-carrying friends https://t.co/7ASSy72Rxg
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Oct 20, 2026 · 18:47 UTC

Replies
↳ In reply to a post

Some other things to upgrade:

* Go: 1.27.3 or 1.26.10, then rebuild your Go programs
* rustls-webpki: 0.103.16
* webpki-roots / webpki-root-certs: 1.0.10
* Electron: 44.9.1, 43.8.1 or 42.11.16
* NSS: 3.131.1
* Firefox: 158.0.1 (ESR: 153.5.1 or 115.43.1)
* Ubuntu ca-certificates: 20260816ubuntu0.<release>.1 (for 22.04, 24.04, 26.04 and 26.10)
* Homebrew ca-certificates: 2026-09-25_1
* Chrome, Apple, Windows: nothing to do, they’re blocked automatically

↩ Reply ♡ 0 · ↻ 0 ↗ Original