Skip to content

Releases: rackitio/pythont

Python 3.15.0 (stable)

Choose a tag to compare

@github-actions github-actions released this 10 Oct 07:40
1c32f8e

Channel: stable
Image: rackitio/pythont@sha256:45cdb98a265bf0defa5601fdddd985ccb4b7c9fd15496058e81e264b0f238b76
Tags: 3.15.0, 3.15, stable, latest, 3.15.0-weekly, weekly
Compared with: rackitio/pythont:stable

Python

3.14.8 → 3.15.0 (changelog)

New minor version. C extensions built for 3.14 will not load; rebuild or reinstall wheels.

Debian packages (linux/amd64)

No Debian package changes.

Vulnerabilities (Trivy, linux/amd64)

CRITICAL HIGH MEDIUM LOW UNKNOWN Total
Before 0 48 60 61 1 170
After 0 48 60 61 1 170

Open with an upstream fix not yet in this image (6): usually libraries bundled inside pip, which clear when pip ships a release.

  • CVE-2025-47273 HIGH in setuptools 70.3.0, fixed in 78.1.1
  • CVE-2026-59890 MEDIUM in setuptools 70.3.0, fixed in 83.0.0
  • CVE-2026-97687 HIGH in urllib3 2.7.0, fixed in 2.8.0
  • CVE-2026-97688 MEDIUM in urllib3 2.7.0, fixed in 2.8.0
  • CVE-2026-97689 HIGH in urllib3 2.7.0, fixed in 2.8.0
  • GHSA-6v7p-g79w-8964 HIGH in msgpack 1.1.2, fixed in 1.2.1

Python 3.14.8 (stable)

Choose a tag to compare

@github-actions github-actions released this 10 Oct 07:10
75772f5

Channel: stable
Image: rackitio/pythont@sha256:818c865279b1321e5a9a2180cd3b4b86e04cb8c58ed082865716ac383daf1d5f
Tags: 3.14.8, 3.14, stable, latest, 3.14.8-weekly, weekly
Compared with: rackitio/pythont:latest

Python

3.14.7 → 3.14.8 (changelog)

Debian packages (linux/amd64)

Package Before After Change
liblzma5 5.8.1-1+deb13u1 5.8.1-1+deb13u2 upgraded
libpcre2-8-0 10.46-1~deb13u2 10.46-1~deb13u3 upgraded

Vulnerabilities (Trivy, linux/amd64)

CRITICAL HIGH MEDIUM LOW UNKNOWN Total
Before 0 49 60 61 3 173
After 0 48 60 61 1 170

Fixed by this build (3):

  • CVE-2026-103111 HIGH in libpcre2-8-0 10.46-1deb13u2, fixed in 10.46-1deb13u3
  • DSA-6549-1 UNKNOWN in liblzma5 5.8.1-1+deb13u1, fixed in 5.8.1-1+deb13u2
  • TEMP-1147318-639065 UNKNOWN in liblzma5 5.8.1-1+deb13u1, fixed in 5.8.1-1+deb13u2

Open with an upstream fix not yet in this image (6): usually libraries bundled inside pip, which clear when pip ships a release.

  • CVE-2025-47273 HIGH in setuptools 70.3.0, fixed in 78.1.1
  • CVE-2026-59890 MEDIUM in setuptools 70.3.0, fixed in 83.0.0
  • CVE-2026-97687 HIGH in urllib3 2.7.0, fixed in 2.8.0
  • CVE-2026-97688 MEDIUM in urllib3 2.7.0, fixed in 2.8.0
  • CVE-2026-97689 HIGH in urllib3 2.7.0, fixed in 2.8.0
  • GHSA-6v7p-g79w-8964 HIGH in msgpack 1.1.2, fixed in 1.2.1

Python 3.15.0 weekly 2026-10-26

Pre-release

Choose a tag to compare

@github-actions github-actions released this 26 Oct 12:38
1c32f8e

Channel: weekly
Image: rackitio/pythont@sha256:2bbbfeb2df2f19f59df8f31d267c90c1382aea990c0230ba1c25be91c12cdc51
Tags: 3.15.0-weekly, weekly
Compared with: rackitio/pythont:weekly

Python

3.15.0 (unchanged)

Debian packages (linux/amd64)

Package Before After Change
ca-certificates 20250419 20250419+deb13u1 upgraded
tzdata 2026c-0+deb13u1 2026e-0+deb13u1 upgraded

Vulnerabilities (Trivy, linux/amd64)

CRITICAL HIGH MEDIUM LOW UNKNOWN Total
Before 1 48 60 62 2 173
After 1 48 60 62 1 172

Fixed by this build (1):

  • DSA-6572-1 UNKNOWN in ca-certificates 20250419, fixed in 20250419+deb13u1

Open with an upstream fix not yet in this image (8): usually libraries bundled inside pip, which clear when pip ships a release.

  • CVE-2025-47273 HIGH in setuptools 70.3.0, fixed in 78.1.1
  • CVE-2026-59890 MEDIUM in setuptools 70.3.0, fixed in 83.0.0
  • CVE-2026-97687 HIGH in urllib3 2.7.0, fixed in 2.8.0
  • CVE-2026-97688 MEDIUM in urllib3 2.7.0, fixed in 2.8.0
  • CVE-2026-97689 HIGH in urllib3 2.7.0, fixed in 2.8.0
  • GHSA-6q48-6c7w-9gw2 CRITICAL in certifi 2026.6.17, fixed in 2026.10.19
  • GHSA-6v7p-g79w-8964 HIGH in msgpack 1.1.2, fixed in 1.2.1
  • GHSA-xmj3-9gf7-h52w LOW in setuptools 70.3.0, fixed in 84.1.0

Python 3.15.0 weekly 2026-10-19

Pre-release

Choose a tag to compare

@github-actions github-actions released this 19 Oct 12:39
1c32f8e

Channel: weekly
Image: rackitio/pythont@sha256:1741dd3bfd255b3738c700348e36bc9c73ef36e1c42fd7fa0a7e97654af3febb
Tags: 3.15.0-weekly, weekly
Compared with: rackitio/pythont:weekly

Python

3.15.0 (unchanged)

Debian packages (linux/amd64)

No Debian package changes.

Vulnerabilities (Trivy, linux/amd64)

CRITICAL HIGH MEDIUM LOW UNKNOWN Total
Before 0 48 60 61 1 170
After 0 48 60 61 1 170

Open with an upstream fix not yet in this image (6): usually libraries bundled inside pip, which clear when pip ships a release.

  • CVE-2025-47273 HIGH in setuptools 70.3.0, fixed in 78.1.1
  • CVE-2026-59890 MEDIUM in setuptools 70.3.0, fixed in 83.0.0
  • CVE-2026-97687 HIGH in urllib3 2.7.0, fixed in 2.8.0
  • CVE-2026-97688 MEDIUM in urllib3 2.7.0, fixed in 2.8.0
  • CVE-2026-97689 HIGH in urllib3 2.7.0, fixed in 2.8.0
  • GHSA-6v7p-g79w-8964 HIGH in msgpack 1.1.2, fixed in 1.2.1

Python 3.15.0 weekly 2026-10-12

Pre-release

Choose a tag to compare

@github-actions github-actions released this 12 Oct 14:54
1c32f8e

Channel: weekly
Image: rackitio/pythont@sha256:74d2769a329c518ae92ca606e61da2989852bca8d0f41867b80964c51d2a66c6
Tags: 3.15.0-weekly, weekly
Compared with: rackitio/pythont:weekly

Python

3.15.0 (unchanged)

Debian packages (linux/amd64)

No Debian package changes.

Vulnerabilities (Trivy, linux/amd64)

CRITICAL HIGH MEDIUM LOW UNKNOWN Total
Before 0 48 60 61 1 170
After 0 48 60 61 1 170

Open with an upstream fix not yet in this image (6): usually libraries bundled inside pip, which clear when pip ships a release.

  • CVE-2025-47273 HIGH in setuptools 70.3.0, fixed in 78.1.1
  • CVE-2026-59890 MEDIUM in setuptools 70.3.0, fixed in 83.0.0
  • CVE-2026-97687 HIGH in urllib3 2.7.0, fixed in 2.8.0
  • CVE-2026-97688 MEDIUM in urllib3 2.7.0, fixed in 2.8.0
  • CVE-2026-97689 HIGH in urllib3 2.7.0, fixed in 2.8.0
  • GHSA-6v7p-g79w-8964 HIGH in msgpack 1.1.2, fixed in 1.2.1