Python: Archive Security and Runtime Stability Fixes
CPython hardened archive command-line tools against module shadowing and fixed tarfile stream errors, alongside free-threading and memory-lifetime crash fixes. The pattern is reliability and security stabilization, with most changes already backported to 3.14 and 3.15.
Duration: PT2M14S
Episode overview
This episode is a short developer briefing from Python.
It explains recent repository work in plain language.
- Show: Python
- Published: 2026-11-10T14:08:46Z
- Audio duration: PT2M14S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good morning, it's Tuesday, November 10th, 2026.
The lead signal is hardening where Python touches untrusted data and concurrent runtimes, with archive tools made safer and several crash and deadlock paths closed.
First, archive handling. PR 161706 removes the startup directory from the module search path in the gzip, tarfile and zipfile command line tools, so extracted files can't shadow standard library modules. It's backed by new internal path tracking in startup code and a helper to strip that entry before running.…
Second, lifetime and locking for threaded runtimes. PR 161674 keeps deleted thread and interpreter states on reuse lists instead of freeing them, after remote profilers were found writing late to freed memory. PR 158535 fixes a self-deadlock when copying sparse dictionaries in free-threaded builds by avoiding…
Finally, platform and tooling health. PR 159454 runs the autoconfigure regeneration container as the invoking user and cleans its cache, ending root-owned files that broke rebuilds. PR 161435 adds a dedicated WASI test command, and PR 158530 stops the allocator from calling system calls directly on Android.
What's next is validation on stable branches, since…
Nearby episodes from Python
- HTTP Query Support and Interpreter Hardening
- HTTP Hardening, Memory Safety and Windows Fixes
- HTTP Fixes and Interpreter Hardening
- Core Crash Hardening and IMAP Security Fix
- Memory Safety Hardening and Core Type Speedups
- Weekly Recap - Build Health, Speed Tweaks and Doc Cleanup
- Core Speedups and Isolation Fixes
- Interpreter Stability Fixes and Silent Data Corrections