Python Software Foundation on Mythryl: “In response to the eMudhra / emSign certificate security incident…”

In response to the eMudhra / emSign certificate security incident we've published guidance for Python users to update CA certificates: discuss.python.org/t/informatio... #security #Python #pki

discuss.python.orgInformation for Python users regarding eMudhra / emSign CA certificate security incidentA security incident affecting eMudhra intermediate certificates has required removing the emSign root CA certificate from CA bundles such as “certifi”. It’s important to immediately upgrade the software packages below to at least the versions specified and rebuild container images to fetch the latest system certificates. Failure to do so could result in monster-in-the-middle (MITM) attacks against TLS clients, including python.org and pypi.org . certifi 2026.10.19 (1) pip 26.2.2 uv 0.13.4 sigs...

21/10/26, 5:18 pm17 reposts25 likes

Post