Package
graalvm-25-graalpy
Component
pip
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
The affected component is the pip wheel that upstream bundles as the ensurepip seed inside its prebuilt language runtime standalone. The vendor patches that wheel for compatibility with its own runtime and resolves it by filename at seeding time, so substituting an upstream pip release drops those patches. A newer release was tested and left the seeded installer unable to negotiate TLS through the runtime's JSSE-backed ssl module, failing every subsequent install. The seed can only move when the vendor advances it in a new runtime release.
Status