Python 3.15.2

Release date: Oct. 25, 2026

This is the second maintenance release of Python 3.15

Python 3.15.2 is an expedited security release and the second maintenance release of 3.15, containing around 130 bugfixes, build improvements and documentation changes from 70 contributors since 3.15.1.

This is an expedited security release to address the compromised eMudhra intermediate CA keys. These keys are now blocked by the ssl module as a last resort against their use. Normal uses of pip, including to upgrade pip itself, are now safe from attacks based on those compromised keys, even if pip hasn't been updated yet.

Security content in this release

• CVE-2026-115557 gh-160040: Distrust compromised eMudhra intermediate CA keys

• CVE-2026-114583 gh-160097: Reject links replacing the destination in tarfile.tar_filter

• gh-160300: Reject cookies with a negative version in http.cookiejar

Full Changelog