Hugo van Kemenade announced expedited security releases of Python on the Python Insider blog, covering 3.15, 3.14, 3.13, 3.12 and 3.11.

The releases address the compromised eMudhra intermediate CA keys. Those keys are now blocked by the ssl module as a last resort against their use. Normal uses of pip, including upgrading pip itself, are safe from attacks based on the compromised keys even if pip has not been updated yet.

Python 3.15.2 and 3.14.10 come with binary installers. Python 3.13.18, 3.12.16 and 3.11.18 are source-only security releases. The release team recommends upgrading for all users of affected versions, and changelogs for each release are linked from the announcement.

See more at blog.python.org and content on GitHub.