Python 3.12.12, 3.11.14, 3.10.19 and 3.9.24 are now available!
Old-timer Release Party We couldn’t just let Hugo have fun with 3.14.0, so here are new security releases of the venerated Python versions, 3.12 through 3.9! Security content in these releases XML-related gh-139312 : Upgraded bundled libexpat to 2.7.3 to fix CVE-2025-59375 gh-139400 : xml.parsers.expat : Made sure that parent Expat parsers are only garbage-collected once they are no longer referenced by subparsers created by ExternalEntityParserCreate() . Archive-related gh-130577 : tarfile now validates archives to ensure member offsets are non-negative. gh-139700 : Now checking consistency of the zip64 end of central directory record. Added support for records with “zip64 extensible data” if there are no bytes prepended to the ZIP file. HTML parsing-related gh-135661 : Fixed parsing start and end tags in html.parser.HTMLParser according to the HTML5 standard. Whitespaces no longer accepted between </ and the tag name. E.g. </ script> does not end the script section. Vertical tabulati
Continue reading on Python Blog
Opens in a new tab



