eMudhra/emSign CA compromise (October 2026): what Cloud SDK Python Libraries developers need to do
还没有人认领这个 Issue。
评估
调研方向
The issue is a security notice listing affected dependencies and fixed versions; it does not name a repository file or test. Start by checking the project’s security or release documentation and its dependency guidance. Done means developers can find the affected packages and the stated upgrade versions; the issue is locked, so it gives no path for questions or discussion.
由索引模型根据 Issue 内容生成。
描述
Summary
Eight eMudhra (emSign) intermediate CA certificates have recoverable private keys (Mozilla bug 2083449). Clients whose trust store still contains emSign ECC Root CA - G3, emSign Root TLS CA - G3 or AAA Certificate Services can be impersonated by an on-path attacker.
The following packages are affected
certifiearlier than 2026.10.19 (REST transports).httplib2earlier than 0.32.1, used bygoogle-api-python-clientandgoogle-auth-httplib2; its bundled trust store is used whencertifiis not installed.grpcioearlier than 1.84.1 (gRPC transports); bundled root store, does not read the operating system trust store.
You can take the following actions to resolve these issues
- Upgrade
certifito 2026.10.19 or later. - Upgrade
httplib2to 0.32.1 or later. - Upgrade
grpcioto 1.84.1 or later. Patch releases for earlier release lines are being published; see GHSA-2xm2-c8xx-p9vh for the current list of fixed versions.
Advisories:
- GHSA-6q48-6c7w-9gw2 (
certifi) - GHSA-2xm2-c8xx-p9vh (
grpcio)
Google Cloud Security Bulletin: GCP-2026-075.
This issue is locked. Please open a new issue for questions.
- 主要语言
- Python
- 星标
- 9k
- 派生
- 2.6k
- 平均合并
- 28 分钟
- 30 天内合并 PR
- 4
环境准备
- 没有 Dockerfile 或 Docker Compose 文件
- 有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
googleapis/google-api-python-client 的其他 Issue
-
fix: @_helpers.positional raises TypeError when decorating functions without default arguments可能已有人在做 @codeXsidd 于 22 天前认领。 未关闭
难度 1/5 1 小时以内 新手友好度 88/100
-
难度 1/5 1 小时以内 新手友好度 88/100
-
Disable prettyPrint by default for Google Sheets API responses可能已有人在做 @pawciobiel 于 91 天前认领。 未关闭
难度 2/5 1-3 小时 新手友好度 68/100
-
test: connection leak test test_discovery_http_is_closed is shadowed and syntactically invalid可能已有人在做 @Capstan 于 167 天前认领。 未关闭
难度 2/5 1-3 小时 新手友好度 75/100
googleapis/google-api-python-client#2757 · 1 条评论 ·
-
test: strict positional parameter enforcement is ignored under pytest可能已有人在做 @Capstan 于 167 天前认领。 未关闭
难度 1/5 1 小时以内 新手友好度 92/100
查看 googleapis/google-api-python-client 的全部 Issue
相似的 Issue
-
难度 2/5 1-3 小时 新手友好度 72/100
dbt-labs/spark-utils#51 ·
-
bug pydanty:is-working
难度 2/5 1-3 小时 新手友好度 68/100
pydantic/pydantic-ai#13444 ·
维护者通常 1 天内回复
-
good first issue help wanted
难度 2/5 1-3 小时 新手友好度 82/100
-
good first issue help wanted
难度 1/5 1 小时以内 新手友好度 72/100
-
changelog investigate
难度 1/5 1 小时以内 新手友好度 68/100
ramnes/notion-sdk-py#502 ·