Python: Weekly Recap - Certificate Distrust and Concurrency Hardening
CPython merged coordinated security and reliability fixes across all supported branches, led by distrust of compromised eMudhra intermediates. The week also delivered asyncio TLS hang fixes, multithreading crash fixes, and a major AST memory reduction.
Duration: PT3M57S
Episode overview
This episode is a short developer briefing from Python.
It explains recent repository work in plain language.
- Show: Python
- Published: 2026-10-26T09:29:46Z
- Audio duration: PT3M57S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Hello and welcome to the Python weekly recap for October 19th through 26th.
50 pull request activity items, 30 additional commits this week.
The lead pattern is hardening across every supported release: a coordinated certificate distrust, plus fixes for connections that hang and interpreters that crash under threads.
First, trust and transport. Maintainers distrusted compromised eMudhra intermediate certificate authority keys, tracked as CVE-2026-115557. The same change landed on main and was backported to 3.11 through 3.15, in pull requests 160568 through 160572, with a release notes follow-up in 160591. For developers, S S L…
Second, crash safety under concurrency, especially for the free-threaded build. Two linked Z S T D issues drew repeated attention. Pull request 160550 fixes a crash when freeing a busy multithreaded compressor, and pull request 160536 keeps dictionaries alive until the compression context is freed, preventing the…
Third, a faster, clearer core. Pull request 160616 switches A S T nodes to a managed dictionary, cutting A S T memory by about half and speeding parsing and tree walking by roughly sixteen percent in project measurements. Developers parsing large…
Nearby episodes from Python
- Asyncio Hardening and OSError Safety Fix
- Import Lock and Socket Leak Fixes
- ZoneInfo Security Fix and Thread-Safety Hardening
- Security Backports and Faster AST Parsing
- Threading Reliability and Security Hardening
- TLS Trust Removal and Parser Fixes
- Crash Hardening and Data Safety Fixes
- Clinic Conversion for Core Slots and Doc Push