Skip to content

Python 3.15.0 weekly 2026-10-26

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 26 Oct 12:38
weekly-20261026
1c32f8e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Channel: weekly
Image: rackitio/pythont@sha256:2bbbfeb2df2f19f59df8f31d267c90c1382aea990c0230ba1c25be91c12cdc51
Tags: 3.15.0-weekly, weekly
Compared with: rackitio/pythont:weekly

Python

3.15.0 (unchanged)

Debian packages (linux/amd64)

Package Before After Change
ca-certificates 20250419 20250419+deb13u1 upgraded
tzdata 2026c-0+deb13u1 2026e-0+deb13u1 upgraded

Vulnerabilities (Trivy, linux/amd64)

CRITICAL HIGH MEDIUM LOW UNKNOWN Total
Before 1 48 60 62 2 173
After 1 48 60 62 1 172

Fixed by this build (1):

  • DSA-6572-1 UNKNOWN in ca-certificates 20250419, fixed in 20250419+deb13u1

Open with an upstream fix not yet in this image (8): usually libraries bundled inside pip, which clear when pip ships a release.

  • CVE-2025-47273 HIGH in setuptools 70.3.0, fixed in 78.1.1
  • CVE-2026-59890 MEDIUM in setuptools 70.3.0, fixed in 83.0.0
  • CVE-2026-97687 HIGH in urllib3 2.7.0, fixed in 2.8.0
  • CVE-2026-97688 MEDIUM in urllib3 2.7.0, fixed in 2.8.0
  • CVE-2026-97689 HIGH in urllib3 2.7.0, fixed in 2.8.0
  • GHSA-6q48-6c7w-9gw2 CRITICAL in certifi 2026.6.17, fixed in 2026.10.19
  • GHSA-6v7p-g79w-8964 HIGH in msgpack 1.1.2, fixed in 1.2.1
  • GHSA-xmj3-9gf7-h52w LOW in setuptools 70.3.0, fixed in 84.1.0
Assets 2
Loading