Python users urged to prefer system stores after eMudhra CA incident
Original title: Re: Information for Python users regarding eMudhra / emSign CA certificate security incident
The reply says distribution pip and requests should use the system certifi store.
An oss-security reply tells Python users that Linux distribution packages can limit exposure from an eMudhra / emSign CA certificate incident by using the system certificate store. It points to certifi-system-store and says pip is unbundled through system requests and system certifi. The excerpt cuts off while mentioning a sigstore update.
Unconfirmed: The excerpt does not state which certificates were affected or whether they were revoked.
- Eli Schwartz posted the reply on October 22.
- The suggested package is projg2/certifi-system-store.
- The excerpt does not describe the certificate incident itself.
- 1.Prefer Linux distribution Python packages that use the system certificate store.
From the original article
Posted by Eli Schwartz on Oct 22 This is why using packages from a Linux distro is good: linux distro https://github. com/projg2/certifi-system-store, to use, well, the system store. And pip is unbundled to use the system certifi.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.