Share story
Security

Python security releases block compromised eMudhra certificate keys

Python security releases block compromised eMudhra certificate keys Image: Primary
Python's release team issued expedited security updates for five version branches to block compromised eMudhra intermediate certificate authority keys. The team says the change protects normal uses of pip, including upgrading pip itself, from attacks using those keys even when pip has not been updated. The releases block the keys through Python's ssl module and also fix archive-link filtering and cookie handling. Python 3.15.2 and 3.14.10 include binary installers; Python 3.13.18, 3.12.16 and 3.11.18 are available only as source releases.
Sources
Python Insider
Published by Tech & Business, a media brand covering technology and business. This story was sourced from Python Insider and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Infrastructure
Infrastructure

Sycamine says Japan committed $21 billion to two GlobalFoundries fabs

Japan has committed $21 billion to two GlobalFoundries chip plants in Malta, New York, under an agreement lasting at least 20 years, investment firm Sycamine Capital Management said in a press release. A vehicle co-owned by the US...

Yahoo Finance
AI Science
AI Science

ALTO recipe narrows four-bit model training gap in simulated tests

Researchers report in a preprint that ALTO, an open-source training recipe for the 20-billion-parameter GPT-OSS-20B model, reduced the extra training steps needed with four-bit arithmetic. On the MLPerf Small MoE Training benchmar...

cs.AI updates on arXiv.org
Security
Security

Unit 42 reports PHP2Shell breach at European government entity

Attackers exploiting PHP2Shell vulnerabilities accessed password hashes and multi-factor authentication secrets at a European government entity within two hours of initial exploitation, Palo Alto Networks Unit 42 said. They also e...

The Hacker News