Skip to content

Update CPython versions to those with the eMudhra mitigation - #1405

Merged
jjhelmus merged 5 commits into
astral-sh:mainfrom
Edward-Knight:emudhra
Oct 26, 2026
Merged

jjhelmus merged 5 commits into
astral-sh:mainfrom
Edward-Knight:emudhra

Conversation

@Edward-Knight

Copy link
Copy Markdown
Contributor

https://discuss.python.org/t/python-3-15-2-3-14-10-3-13-18-3-12-16-and-3-11-18-are-out/109678

  • 3.11.17 --> 3.11.18
  • 3.12.15 --> 3.12.16
  • 3.13.17 --> 3.13.18
  • 3.14.9 --> 3.14.10
  • 3.15.1 --> 3.15.2

Fixes #1404

https://discuss.python.org/t/python-3-15-2-3-14-10-3-13-18-3-12-16-and-3-11-18-are-out/109678

* 3.11.17 --> 3.11.18
* 3.12.15 --> 3.12.16
* 3.13.17 --> 3.13.18
* 3.14.9  --> 3.14.10
* 3.15.1  --> 3.15.2
The hunk that applied to generate-build-details.py has now been
upstreamed, so Geoff's patch now just modifies the Makefile.pre.in.
This patch has been upstreamed in 3.14.10 and 3.15.2.
@Edward-Knight

Copy link
Copy Markdown
Contributor Author

If a maintainer could add the python:all label to test the other Python versions that would be great :)

I've got CI running in my own project but I suspect it will take a while to run over there: Edward-Knight#3

@Edward-Knight
Edward-Knight marked this pull request as ready for review October 26, 2026 12:25
@jjhelmus jjhelmus added arch:all Select all architectures python:all Select all Python versions platform:all Select all platforms, e.g., darwin, linux, windows build:all labels Oct 26, 2026
@jjhelmus jjhelmus closed this Oct 26, 2026
@jjhelmus jjhelmus reopened this Oct 26, 2026
@jjhelmus

Copy link
Copy Markdown
Contributor

Added the labels and restarted CI. Thanks for these updates.

@Edward-Knight

Copy link
Copy Markdown
Contributor Author

Thanks, looks like I've got some more patches to edit 🙃

@jjhelmus

Copy link
Copy Markdown
Contributor

I'm on it unless you want to do these updated. I'll push shortly.

@Edward-Knight

Copy link
Copy Markdown
Contributor Author

Looks good, I was just doing the applink patch myself - I had made the same change locally

@jjhelmus
jjhelmus merged commit fa506e0 into astral-sh:main Oct 26, 2026
608 checks passed
@Edward-Knight

Copy link
Copy Markdown
Contributor Author

Thanks for landing it so quickly @jjhelmus! <3

@Edward-Knight

Copy link
Copy Markdown
Contributor Author

@jjhelmus do you know if a new PBS release is planned with this fix in?

@jjhelmus

Copy link
Copy Markdown
Contributor

@jjhelmus do you know if a new PBS release is planned with this fix in?

A release is going out now. Once it is out I'll work on getting uv updated and a release out for that as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

arch:all Select all architectures build:all platform:all Select all platforms, e.g., darwin, linux, windows python:all Select all Python versions

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update CPython to mitigate eMudhra compromised certificate issue

2 participants