Fedora 44 Updates Rust Certificate Roots After CA Compromise

Running self-managed GitLab? Critical flaws could allow server code execution. Check the fixes. ×

Mozilla trusted certificate authorities in self-signed X.509 format for

use with crates other than webpki.

Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories RUSTSEC-2026-0382, RUSTSEC-2026-0381, and RUSTSEC-2026-0383 - also known as CVE-2026-111943 (i.e. the eMudhra Intermediate CA Compromise). Rebuilds of affected packages are tracked in rust/backlog#46.

* Tue Oct 20 2026 Fabio Valentini - 1.0.10-1 - Update to version 1.0.10; Fixes RHBZ#2555854

* Tue Oct 20 2026 Fabio Valentini - 1.0.10-1 - Update to version 1.0.10; Fixes RHBZ#2555854

Fedora Update Notification FEDORA-2026-8eeffa4c43 2026-10-21 16:43:43.710094+00:00 Name : rust-webpki-root-certs Product : Fedora 44 Version : 1.0.10 Release : 1.fc44 URL : Summary : Mozilla trusted certificate authorities in self-signed X.509 format Description : Mozilla trusted certificate authorities in self-signed X.509 format for use with crates other than webpki.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-8eeffa4c43' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases