Python has released emergency updates (3.15.1, 3.14.9, and 3.13.17) to address vulnerabilities associated with the eMudhra certificate authority, which had compromised private keys that allowed attackers to forge HTTPS identities. The updates include a new version of pip (26.2.2) and certifi (2026.10.19), removing trust in the compromised CA, and users are urged to upgrade their installations to ensure security. The issue arose from eMudhra's weak key generation, where all eight intermediate CA keys were guessable due to inadequate private key sizes. This incident highlights the importance of cryptographic hygiene and the need for users to keep their software updated to maintain security

Python Releases Emergency Update to Block Broken eMudhra Certificate Authority

Python pushed three expedited security releases today, 3.15.1, 3.14.9, and 3.13.17, all designed to swap in pip 26.2.2 with certifi 2026.10.19, dropping trust in eMudhra's compromised certificate authority. The CA's eight intermediate keys were useless, generated with private values small enough to guess, which lets attackers forge any website's HTTPS identity. Updating your OS won't fix it, since pip ships its own bundled certificate store, so upgrading pip or one of these releases is the only real defense. If you're on a pip older than 26.2.2, install the update from a pinned checksum URL and rebuild any container images that pin old versions.

Python Releases Emergency Update to Block Broken eMudhra Certificate Authority @ Linux Compatible