Eric Duncan 🔵 on Mythryl: “Remember, we also had root certificates compromised last week (with…”

Remember, we also had root certificates compromised last week (with the Linux kernel root exploit). Sidenote: their password was 4. Not four as in "four letter." No, the CA Root certificate just had the number "4" as the password.

Filippo Valsorda@filippo.abyssdomain.expert

THIS IS NOT A DRILL. If you package/distribute/maintain root stores or chain verifiers, act immediately. If you know how to remove trust in a root, consider doing it now. Otherwise, prepare to update systems as patches/mitigations come. Go users, update to Go 1.27.3 or Go 1.26.10.

groups.google.comCompromised eMudhra Intermediate CertificatesDear Mozilla Community,

23/10/26, 5:07 pm1 repost1 like

Post