Hacker News new | past | comments | ask | show | jobs | submit
wtf Python is also effected. https://pypi.org/project/brotli/ not sure about shell
Side point from going to pypi:

> Security notice: Upgrade certifi, pip, and uv in response to CA certificate incident

Blimey PIP is affected? That's bad. I feel like that should have been bigger news?

Because pip uses it's own certificate bundle, so even if you fix the system itself pip still needs its own upgrade to handle the eMudhra episode.
loading story #50221260
loading story #50228596
loading story #50222371
Pretty sure that's the eMudhra "private key is 4" issue.