# Astronomer: Incident updated: Security Update: Runtime Releases and Guidance for the eMudhra/emSign Certificate Issue

> Incident updated: Security Update: Runtime Releases and Guidance for the eMudhra/emSign Certificate Issue. Detected 2026-10-23 by Rewindex: what changed on Astronomer’s status page, with the before/after diff.

Canonical: https://rewindex.com/change/rc240045037a25d
Last updated: 2026-10-23T21:33:14Z

**Summary:** _summary pending_
- Kind: Incident update · Label: Normal progress (rule)
- Changed: 2026-10-23 21:33 UTC · Detected: 2026-10-23 21:33 UTC
- [Source: https://status.astronomer.io/incidents/01M5GEKQW2J6J9QTP7185NK365](https://status.astronomer.io/incidents/01M5GEKQW2J6J9QTP7185NK365)
- [Company: Astronomer](https://rewindex.com/company/astronomer.md)
- Versions: before incident\_version:135/01M5GEKQW2J6J9QTP7185NK365@bb0bb00e264a → after incident\_version:135/01M5GEKQW2J6J9QTP7185NK365@77482d7bb5d7
- Change 1 of 1 for this incident

Incident page (full timeline): [Security Update: Runtime Releases and Guidance for the eMudhra/emSign Certificate Issue](https://rewindex.com/company/astronomer/incidents/01M5GEKQW2J6J9QTP7185NK365.md)
## What changed

**1. Changed: Status**

```diff
- identified
+ resolved
```

**2. Added: Resolved time**

```diff
+ 2026-10-23 21:28 UTC
```

**3. Added: Update** (resolved) · 2026-10-23 21:28 UTC

```diff
+ We have now released updated agent client patches for use in Remote Execution deployments that incorporate certificate trust updates to mitigate the vulnerability. These are 1.8.11, 1.7.7, and 1.6.5. See more details in the Agent Release Notes: https://www.astronomer.io/docs/runtime/runtime-release-feed.   Additionally, we have released another update of the Runtime images to handle the following two changes related to this vulnerability. • New virtual environments created with python -m venv now get pip 26.2.2 • Upgrade grpcio to 1.84.1, whose bundled CA list no longer includes the roots affected by the eMudhra compromise The following Runtime image versions include these changes. For more details see Runtime Release Notes: https://www.astronomer.io/docs/runtime/runtime-release-feed. • Runtime 13: 13.12.2 • Runtime 3.0: 3.0-21 • Runtime 3.1: 3.1-24 • Runtime 3.2: 3.2-13 • Runtime 3.3: 3.3-11
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-10-23 21:33 UTC | Incident updated: Security Update: Runtime Releases and Guidance for the eMudhra/emSign Certificate Issue (this change) | Normal progress |

All Astronomer changes: [timeline](https://rewindex.com/company/astronomer/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._

## Cite this

Incident updated: Security Update: Runtime Releases and Guidance for the eMudhra/emSign Certificate Issue on Astronomer’s status page, changed 2026-10-23 21:33 UTC (change 1 of 1).

- Canonical URL: https://rewindex.com/change/rc240045037a25d
- Citation: Astronomer, “Incident updated: Security Update: Runtime Releases and Guidance for the eMudhra/emSign Certificate Issue” (2026-10-23 21:33 UTC). Archived by Rewindex: https://rewindex.com/change/rc240045037a25d (CC BY 4.0).
- Markdown link: `[Astronomer: Incident updated: Security Update: Runtime Releases and Guidance for the eMudhra/emSign Certificate Issue (2026-10-23)](https://rewindex.com/change/rc240045037a25d)`


---
Canonical: https://rewindex.com/change/rc240045037a25d · Markdown: https://rewindex.com/change/rc240045037a25d.md · JSON: https://rewindex.com/api/v1/changes/rc240045037a25d · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-11T04:21:53.016Z