Aptible: Security Advisory: eMudhra Certificate Compromise - No Aptible Platform Impact
Timeline of updates
- resolved
We are aware of a security incident involving compromised eMudhra Certificate Authority (CA) certificates that could affect HTTPS security on systems with outdated certificate trust stores.
The Aptible platform is not directly impacted by this issue. However, as a precaution, we recommend that customers:
- Update operating systems and web browsers to their latest security-patched versions to ensure certificate trust stores are current.
- Upgrade to Aptible CLI v1.0.5, which includes additional mitigations for systems whose OS trust stores have not yet been updated: https://www.aptible.com/docs/reference/aptible-cli/overview (opens in new tab)
For additional background, see Cloudflare's security advisory:
https://blog.cloudflare.com/emudhra-certificate-compromise (opens in new tab)
Archive proof
Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert.
How the archive is checked, and what it cannot prove.
Rewindex captured this after the last checkpoint; the next run () commits it.
Impact, status and times are the vendor’s own, as last archived. View on stspg.io (opens in new tab).