mbox series

[wrynose,0/6] Disable compromised CA certificates

Message ID 20261023-certs-wrynose-v1-0-83dd2facdbd3@pbarker.dev
Headers show
Series Disable compromised CA certificates | expand

Message

Paul Barker Oct. 23, 2026, 10:36 a.m. UTC 
These changes update ca-certificates & python3-certifi for wrynose to
handle the fallout of the recent Emudhra CA certificate compromise.

Assuming these patches pass testing, they will be merged to wrynose
outside of the usual stable review process.

Branch: https://git.openembedded.org/openembedded-core-contrib/log/?h=pbarker/certs-wrynose
AB Build: https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/4985

Signed-off-by: Paul Barker <paul@pbarker.dev>
---
Paul Barker (1):
      ca-certificates: Disable compromised CA certificates

Richard Purdie (1):
      python3-certifi: upgrade 2026.2.25 -> 2026.4.22

Ross Burton (1):
      python3-certifi: upgrade 2026.7.22 -> 2026.10.19

Tim Orling (3):
      python3-certifi: upgrade 2026.4.22 -> 2026.5.20
      python3-certifi: upgrade 2026.5.20 -> 2026.6.17
      python3-certifi: upgrade 2026.6.17 -> 2026.7.22

 ..._2026.2.25.bb => python3-certifi_2026.10.19.bb} |  2 +-
 ...mSign-ECC-Root-CA-G3-and-Comodo-AAA-Servi.patch | 35 ++++++++++++++++++++++
 .../ca-certificates/ca-certificates_20260816.bb    |  1 +
 3 files changed, 37 insertions(+), 1 deletion(-)
---
base-commit: 636e5d3b12d54951c13d57346648bc29a0e6b24e
change-id: 20261023-certs-wrynose-1b6cebb1da31

Best regards,
--  
Paul Barker