← Back to context

Comment by keks24

9 hours ago

Gentoo Linux users are adviced to update the package "app-misc/ca-certificates" to version "20260816.3.125" or higher!:

    # emerge --sync
    # emerge --ask --oneshot --verbose ">=app-misc/ca-certificates-20260816.3.125"

To check via "curl":

    $ curl --url="https://dv-g3b-emudhra.we-have-a-problem.com/"
    $ curl --url="https://dv-g3b-aaa-emudhra.we-have-a-problem.com/"

They should return:

    curl: (60) SSL certificate OpenSSL verify result: unable to get local issuer certificate (20)
    More details here: https://curl.se/docs/sslcerts.html

    curl failed to verify the legitimacy of the server and therefore could not
    establish a secure connection to it. To learn more about this situation and
    how to fix it, please visit the webpage mentioned above.

---

* GLSA 202610-01: https://security.gentoo.org/glsa/202610-01

* https://emudhra.we-have-a-problem.com/

I feel like you shouldn’t have to ask for a non-default version of the package at this point.