bretton.dev / coves
A community based topic aggregation platform built on atproto
Star
Fork 0
Watch

chore(aggregators): require certifi 2026.10.18+ to distrust compromised eMudhra intermediates master

The aggregator images bundled certifi 2026.7.22 or older, which still trusts the emSign and AAA Certificate Services roots behind the eight compromised eMudhra intermediates (CVE-2026-111943). certifi 2026.10.18 drops them. Verified in freshly built images: the we-have-a-problem.com canary host is rejected and ordinary HTTPS still works. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author Bretton Co-author Claude Opus 5.5 Date Commit a0f3ef0e Parent 5aa3ce32
+9
3 changed files