Python: Security Backports and a Cleaner C API
Today's CPython activity centers on security-driven backports across Expat and Unicode normalization, alongside a steady maintainability push by Victor Stinner and Serhiy Storchaka to replace positional tuple access with named attributes and Argument Clinic. A subtle async testing bug that silently skipped test coroutines was also fixed and is already propagating to three release branches.
Duration: PT2M56S
Episode overview
This episode is a short developer briefing from Python.
It explains recent repository work in plain language.
- Show: Python
- Published: 2026-08-11T13:08:56Z
- Audio duration: PT2M56S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good day, it's August 11th, 2026, and here's your Python development briefing.
The dominant story today is security patching flowing backward through supported branches. The bundled Expat XML library got upgraded across 3.10, 3.11, and 3.12 in PRs 149075, 149074, and 155552, closing out known vulnerabilities in a library many projects don't even know they depend on. Alongside that, the fix for…
Second theme: code cleanliness led by Victor Stinner. A cluster of commits replaces indexed tuple access with named attributes across the pwd, grp, os, and script helper modules — so instead of obscure numeric indexing into a stat result, code now reads st_size or pw_uid directly. This is pure maintainability work,…
One correctness fix worth flagging: PR 155412 discovered that test.support.subTests failed to actually await asynchronous test functions, meaning those tests silently reported success without ever running. That's already been backported to 3.13, 3.14, and 3.15 — a reminder that a passing test suite doesn't always…
Smaller but notable: PyCapsule_Import now correctly imports submodules and propagates real errors instead of masking them, and os.exec functions finally include the…
What…
Nearby episodes from Python
- Free-Threading Race Conditions Take Center Stage
- Data Corruption Fixes and the Great Backport Sweep
- System Calls, Copy Replace, and a Reference Leak Fix
- Expat Patch Sweeps the Branches, Old Bugs Finally Close
- Backports, Security Fixes, and Long-Standing Bug Cleanup
- Weekly Recap - Argument Clinic Overhaul & Cross-Platform Reliability
- Windows Path and Encoding Cleanup Marathon
- Structseq Cleanup and Data-Race Hardening