Could the eMudhra issue impact #wordpress sites?
TLDR: #Debian and downstream no, others maybe.
Default Wordpress has an embedded ca-bundle for CAs it trusts as a client, such as getting the weather from a weather service. This bundle was updated 2 days ago.
The latest wordpress release was 7.1.3 on October 6th and doesn't have the certificate removals.
Debian packages are patched to use the system CA path so as long as you have the latest ca-certificates you're fine.
@smallsees
what the actual F*..
(most hosters use vanilla wordpress package, not debian's..)
$ sudo -u www-data curl --cacert wp-includes/certificates/ca-bundle.crt https://dv-g3b-emudhra.we-have-a-problem.com/
Your client successfully connected to the site. That's bad!
#arghhhhhhhhhhh #emudhra #wordpress