eMudhra 八个中间 CA 证书私钥遭泄露
eMudhra Intermediate CA Compromise
eMudhra 八个中间 CA 证书的私钥已遭泄露，这些证书链到 Mozilla、Microsoft、Apple 和 Chrome 根证书计划信任的根证书。任何内置可信证书列表的软件都需要更新；Linux 发行版需要更新 ca-certificates 软件包。uv 0.13.4、pip 26.2.2 和 certifi 2026.10.19 已发布更新后的证书列表。
八个中间 CA 证书私钥泄露波及多个主流根证书计划，材料列出需更新证书列表的软件及已发布更新的工具和软件包。
20th October 2026 - Link Blog
eMudhra Intermediate CA Compromise. This is very, very bad news:
The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores.
Any software that bundles a list of trusted certificates needs to be updated. This site is tracking software updates via this GitHub repository - Linux distros need to update their ca-certificates packages.
In Python world uv 0.13.4 and pip 26.2.2 and certifi 2026.10.19 have been released with upgraded certificate lists.
来源：Simon Willison · simonwillison.net