Skip to content

ActiveState Release of Python 2.7.18.15 rc2

Pre-release
Pre-release

Choose a tag to compare

View all tags
@icanhasmath icanhasmath released this 28 Oct 16:46
· 52 commits to 2.7 since this release
2.7.18.15.rc2
ff19c1d

Release candidate for Windows/legacy-platform testing of PR #91. Not final.

Built on top of 2.7.18.14:

  • ssl: rejects certificate chains that contain any of the compromised eMudhra intermediate CA keys. This is CVE-2026-115557, pythongh-160040, backported as an SPKI denylist.
  • ensurepip: bundles pip 20.3.4.post4 (certifi 2026.10.23.post1) and setuptools 44.1.1.post3, replacing pip 19.2.3 and setuptools 41.2.0.

Changes since rc1:

  • Bundled pip: now 20.3.4.post4 instead of 20.3.4.post3. Its vendored certifi also drops emSign Root CA - C1 and emSign ECC Root CA - C3, so emSign Root CA - G1 is the only emSign root left.
  • Release notes: the certifi wording in Misc/NEWS.d/2.7.18.15.rst is corrected.

Linux x86_64 against OpenSSL 1.1.1w: the full suite shows no regressions compared with 2.7.18.14, and the ensurepip install test passes with the new pip. Windows x64 has not been tested yet.

Assets 2
Loading