Python: HTTP Hardening, Memory Safety and Windows Fixes
CPython activity centers on hardening rather than features, with HTTP client security fixes, C-level memory-safety corrections, and Windows and build reliability fixes. Most changes are already backported to 3.14 and 3.15, signaling release stabilization.
Duration: PT2M16S
Episode overview
This episode is a short developer briefing from Python.
It explains recent repository work in plain language.
- Show: Python
- Published: 2026-11-13T14:08:07Z
- Audio duration: PT2M16S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Hello, and welcome to your Python briefing for Friday, November 13th, 2026.
The big signal this cycle isn't new features — it's hardening: a cluster of HTTP client security fixes, plus a set of C-level stability corrections, most already backported to 3.14 and 3.15.
First, HTTP. In PR 158956, proxy auth handlers no longer send proxy credentials to a direct origin on a 407 response. Password lookup ignored the scheme, so credentials stored for HTTPS could be retried in cleartext over HTTP. Related work tightens cookie parsing by refusing semicolons in most attributes, and checks…
Second, interpreter stability. PR 160662 fixes a use-after-free in garbage collector debug printing, where writing output to standard error could free the object being reported. PR 158044 holds a strong reference to element tags during Element iter comparison, preventing a crash if custom equality replaces the tag…
Third, Windows and builds. PR 154852 fixes clearing the read-only flag on Windows, which was silently ignored when no other attributes were set. PR 161822 adds a fallback to LLD for Clang link-time optimized builds where the GNU linker plugin is missing, as on Debian 13. Workflow locking in PR…
What'…
Nearby episodes from Python
- HTTP Fixes and Interpreter Hardening
- Core Crash Hardening and IMAP Security Fix
- Archive Security and Runtime Stability Fixes
- Memory Safety Hardening and Core Type Speedups
- Weekly Recap - Build Health, Speed Tweaks and Doc Cleanup
- Core Speedups and Isolation Fixes
- Interpreter Stability Fixes and Silent Data Corrections
- Crash Hardening and Faster Exceptions