Python: TLS Trust Removal and Parser Fixes
Security dominates with distrust of compromised eMudhra CA keys and new Encrypted Client Hello support, alongside parser fixes for f-string errors and comprehension scoping. The pattern is trust hardening plus front-end correctness.
Duration: PT2M40S
Episode overview
This episode is a short developer briefing from Python.
It explains recent repository work in plain language.
- Show: Python
- Published: 2026-10-24T13:08:23Z
- Audio duration: PT2M40S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good morning, it's October 24th, 2026.
Security work dominates CPython this cycle, with the TLS stack getting both an emergency trust removal and new privacy support.
First, certificate trust. Commit 7dd8b47 distrusts compromised eMudhra intermediate certificate authority keys, tracked as C-V-E 2026-115557. The S-S-L module now rejects chains containing those keys, matching on the public key fingerprint so cross-signed copies are also blocked. The feed describes this as an…
Second, parser and compiler correctness. Pull request 160493 fixes where invalid escapes in F strings and T strings are reported. Instead of pointing at the closing quote, or the wrong line in multi-line strings, the error now points at the literal being decoded, with backports to 3.14 and 3.15. Separately, pull…
Finally, a hardening thread. Pull request 160405 guards the C profiler against re-entry from an external timer during result handling, and commit eaab974 fixes a crash in the free-threaded build when dict construction races with mutation of a list pair. Pull request 160564 corrects timed log backup names across…
What to watch: update test trust stores for the eMudhra denylist, and expect further Encrypted…
Nearby episodes from Python
- ZoneInfo Security Fix and Thread-Safety Hardening
- Security Backports and Faster AST Parsing
- Weekly Recap - Certificate Distrust and Concurrency Hardening
- Threading Reliability and Security Hardening
- Crash Hardening and Data Safety Fixes
- Clinic Conversion for Core Slots and Doc Push
- Free-Threading Race Hardening and Stable Branch Fixes
- Crash-Path Hardening, Asyncio Fixes, and Efficiency Wins