Expedited security updates are available for Python 3.11–3.15: versions 3.15.2, 3.14.10, 3.13.18, 3.12.16 and 3.11.18. They block compromised eMudhra intermediate CA keys directly in the ssl module. According to Python Insider, this protects normal pip operations, including upgrading pip itself, against attacks using those keys even when pip has not been updated.
All five releases also fix links that replace the destination in tarfile.tar_filter and reject cookies with a negative version in http.cookiejar. The release team strongly recommends upgrading affected versions.
Binary installers are provided for Python 3.15.2 and 3.14.10. The updates for the 3.13, 3.12 and 3.11 branches are source-only security releases.
Choose a sign-in method or comment as a guest below.