Python and rustup refresh certificate trust after the eMudhra incident
Python 3.15.1, 3.14.9 and 3.13.17 update bundled pip to 26.2.2, including a refreshed certifi package addressing the eMudhra certificate incident. The Python team also asks users to update pip and uv in existing virtual environments. Separately, rustup 1.29.2 refreshes its certificate-validation dependencies. These are concrete ecosystem updates following the incident; replacing an interpreter alone does not refresh every existing environment.
Python release team · Rustup Team · Oct 21, 2026
Why it matters
Trust stores can live inside individual tools and environments, beyond the operating system’s certificate bundle.
More context
Inventory the Python environments and rustup installations used locally and in CI, then follow the projects’ update instructions. Rustup’s October 20 release changes rustls-webpki and webpki-root-certs; it is a toolchain-manager update, rather than a new Rust language release.
Keep in mind
This covers the named tools, not every application’s TLS stack. Use the official version-specific instructions and verify distribution-managed packages separately.
Original read