Skip to content
NewA calmer, faster ZeroHour
Advisorylow

virtualenv 21.14.11 noted for Python users after emSign CA incident

Original title: Re: Information for Python users regarding eMudhra / emSign CA certificate security incident

oss-security ()1 · 1 read
Read at seclists.org
Part of a story covered by 5 sourcesPython users discuss eMudhra/emSign CA incident without impact detailsMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

The release vendors pip and requires python-discovery 1.6.1 or newer.

A short oss-security follow-up for Python users about the eMudhra / emSign CA certificate incident points to virtualenv 21.14.11. The poster notes that this virtualenv release includes a vendored pip and requires python-discovery 1.6.1 or newer. No further impact or affected-user details are in the snippet.

Unconfirmed: The snippet does not describe what the eMudhra/emSign incident exposed or which Python installs are affected.

Key facts
  • Posted by Stuart Henderson on October 23.
  • virtualenv 21.14.11 includes vendored pip.
  • python-discovery must be version 1.6.1 or newer.
Security assessment · AI, from the article
ProductAffectedFixed in
virtualenv—21.14.11
What to do
  1. 1.Use virtualenv 21.14.11, which requires python-discovery 1.6.1 or newer.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
pythonvirtualenvpipemsigncertificate
Vendors
eMudhra
Products
virtualenvpip

From the original article

Posted by Stuart Henderson on Oct 23 virtualenv 21. 14. 11 (has vendored pip) - note that this requires python-discovery >= 1.

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.