Release Date: Dec. 3, 2024

This is a security release of Python 3.10

Note: The release you're looking at is Python 3.10.16, a security bugfix release for the legacy 3.10 series. Python 3.13 is now the latest feature release series of Python 3. Get the latest release of 3.13.x here.

Security content in this release

• gh-126623: Upgraded libexpat to 2.6.4 to fix CVE-2024-50602.
• gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to consistently use the mapped IPv4 address value for deciding properties. Properties which have their behavior fixed are is_multicast, is_reserved, is_link_local, is_global, and is_unspecified.
• gh-124651: Properly quote template strings in venv activation scripts.
• gh-103848: Added checks to ensure that [ bracketed ] hosts found by urllib.parse.urlsplit() are of IPv6 or IPvFuture format.

No installers

According to the release calendar specified in PEP 619, Python 3.10 is now in the "security fixes only" stage of its life cycle: 3.10 branch only accepts security fixes and releases of those are made irregularly in source-only form until October 2026. Python 3.10 isn't receiving regular bug fixes anymore, and binary installers are no longer provided for it. Python 3.10.11 was the last full bugfix release of Python 3.10 with binary installers.

Full Changelog