← Back to all sparks
T

Tutor

EDTECH
Velocity2.5

Docker-based Open edX distribution

Tutor 21.0.10 drops trust in the compromised eMudhra CA across its Open edX images.

open edxself-hostedsecuritydockerlms
◆Current state
Tutor, the Docker-based distribution for running Open edX, shipped v21.0.10 as a security patch. It upgrades certifi, pip, uv and Node.js 24 in the Open edX image, along with Caddy, so deployments stop trusting the compromised eMudhra/emSign CA certificates. It is the only entry tracked so far.
◆Where it's heading
With one patch release in view, the clearest signal is that the 21.x line is maintained and security fixes reach it quickly. The entries don't yet show where Tutor's feature work is heading.
◆Prediction
Expect more 21.0.x patches; one entry isn't enough to predict the next feature release.

◆Recent moves

  1. 7h ago

    Tutor 21.0.10 stops trusting compromised eMudhra CA certs

    A security patch that rebuilds the Open edX image and Caddy with updated certificate bundles and runtimes, dropping trust in the compromised eMudhra/emSign CA. Operators get it by upgrading and rebuilding their images.

    View source ↗