alt Hacker NewsSide point from going to pypi:
> Security notice: Upgrade certifi, pip, and uv in response to CA certificate incident
Blimey PIP is affected? That's bad. I feel like that should have been bigger news?
Replies
murderfs • today at 11:51 AM
Pretty sure that's the eMudhra "private key is 4" issue.
Because pip uses it's own certificate bundle, so even if you fix the system itself pip still needs its own upgrade to handle the eMudhra episode.