diff --git a/Cargo.lock b/Cargo.lock
index a609527b59..99ce53d6d2 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1201,9 +1201,9 @@ dependencies = [
 
 [[package]]
 name = "rustls-webpki"
-version = "0.103.14"
+version = "0.103.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0527518605e68109d875e248ea259b6758801cf165e4b2c2733ae3b51f12535a"
+checksum = "4443b1b6d39d7c663139942cc4558262562d2c84123bb6282ef177009ca8b281"
 dependencies = [
  "ring",
  "rustls-pki-types",
diff --git a/changelog.d/20392.misc b/changelog.d/20392.misc
new file mode 100644
index 0000000000..b068bdb0ec
--- /dev/null
+++ b/changelog.d/20392.misc
@@ -0,0 +1 @@
+Bump `rustls-webpki` to `0.103.16` to actively distrust [compromised eMudhra intermediate CA certificates](https://emudhra.we-have-a-problem.com/).