Wagtail site operators need to check dependencies that validate HTTPS certificates: updating the operating system alone does not protect outgoing requests made through requests. That library uses certifi’s separate certificate bundle, which also needs updating following the compromise of eMudhra certificate authority keys.
The warning applies to features including frontend cache invalidation and Embeds, where the CMS contacts external servers. Wagtail points to certifi fixes and Python Security Response Team guidance. Container deployments should be rebuilt using updated base images, with application dependencies updated too.
Sites using affected eMudhra TLS certificates must replace them with certificates from another authority. At publication, a macOS system trust-store fix was still unavailable; the article points to a temporary workaround.
Choose a sign-in method or comment as a guest below.