UnratedFix available
uv 0.13.5
uv 0.13.5 rejects certificate chains containing compromised eMudhra intermediate keys and updates managed CPython builds for 3.11 and newer to use certificate bundles that remove the affected root. Upgrading uv alone does not update existing managed interpreters or virtual environments.
Announced Group revision 1
Original source ↗github-astral-sh-uv
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Reject certificate chains containing compromised eMudhra intermediate keys via rustls-webpki 0.103.16 (#22777)
uv
Install uv 0.13.5
- Affected versions
- Not stated in this extraction
- Fixed versions
- 0.13.5
Install uv 0.13.5
- Prerequisites
- Not stated in this extraction
managed CPython builds
updates the latest managed CPython builds for 3.11 and newer to python-build-standalone 20261021
- Affected versions
- Not stated in this extraction
- Fixed versions
- python-build-standalone 20261021
updates the latest managed CPython builds for 3.11 and newer to python-build-standalone 20261021
- Prerequisites
- 3.11 and newer
the latest managed CPython builds for 3.11 and newer
uv Docker images
Stop publishing uv Docker images based on Python 3.9 and 3.10 images that no longer receive upstream updates (#22773)
- Affected versions
- Not stated in this extraction
- Fixed versions
- Not stated in this extraction
- Prerequisites
- Not stated in this extraction
Publisher severity
No explicit severity was extracted.
- Event
- #78761 · Revision 1
- Added to Heist Feed
- Publisher date