Ce mail provient de l'extérieur, restons vigilants

=====================================================================


                            CERT-Renater

                Note d'Information No. 2026/VULN1057
_____________________________________________________________________

DATE                : 21/10/2026

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running certifi (pip) versions prior
                                    to 2026.10.19.

====================================================================
https://mail.python.org/archives/list/security-announce@python.org/thread/LSEJ6DOJPIHHNNRS43GROPIH2EPJRUDS/
_____________________________________________________________________

[GHSA-6q48-6c7w-9gw2] CRITICAL security update for certifi, removal
of emSign root certificate

Seth Larson
20 octobre 2026 14:03

There is a CRITICAL severity vulnerability affecting certifi.

Certifi 2026.10.19 removes root certificates from "emSign" from the root
store. These root certificates have intermediates which have been revoked
due to key compromise. A compromised key for a certificate authority can be
used to issue certificates to enable MITM attacks.
Upgrade to certifi 2026.10.19 and rebuild container images to refresh CA
certificate stores.

Please see the links for the latest information on affected versions:

    https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2
    https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJ




=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================