On 2026/10/22 13:43, Alan Coopersmith wrote: > > A security incident affecting eMudhra intermediate certificates has > > required removing the emSign root CA certificate from CA bundles such > > as “certifi”. It’s important to immediately upgrade the software > > packages below to at least the versions specified and rebuild > > container images with layer caching disabled to fetch the latest > > system certificates. Failure to do so could result in > > monster-in-the-middle (MITM) attacks against TLS clients, including > > python.org and pypi.org . > > > > certifi 2026.10.19 (1) > > pip 26.2.2 > > uv 0.13.4 > > sigstore 4.5.1 > > conda 26.9.4 > > pixi 0.82.1
virtualenv 21.14.11 (has vendored pip) - note that this requires python-discovery >= 1.6.1.
