Home » Oreps » Cpython » All Releases » v3.10.21 Release
python/cpython
The Python programming language
Watch
0
Commit Activity
Directory Browser
Velocity History
Releasesv3.10.21
Basic Details Issues Addressed Top Contributors Directory Browser
Cpython v3.10.21

Cpython: v3.10.21 Release

Release date:
August 12, 2026
Previous version:
v3.10.20 (released March 3, 2026)
Magnitude:
551 Diff Delta
Contributors:
9 total committers
Data confidence:
Commits:
40 impacting commits

23 Features Released with v3.10.21

gh-150599: Prevent bz2 decompressor reuse after errors
#150600
[3.10] gh-149486: tarfile.data_filter: validate written link target (GH-149487)
#153180
[3.10] CI: Move Homebrew dependencies into Brewfile (GH-148335) (GH-149884)
#149990
[3.10] gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146…
#148350
gh-144370: Disallow usage of control characters in status in ``Lib/wsgiref/handlers.py`` for security
#144371
[3.10] Remove MSI build from security-only branch (GH-148007) (GH-148008)
#148009
[3.10] gh-145098: Add `permissions: {}` to all workflows (GH-148126)
#148139
[3.10] gh-151987: Pass filter_function to TarFile._extract_one() during .extract() (GH-151988)
#152613
[3.10] gh-145455: Show output of blurb & sphinx-build version commands (GH-145457)
#145489
[3.10] gh-151981: Make tarfile._Stream.seek break at EOF (GH-151982)
#151996
[3.10] gh-137586: Open external osascript program with absolute path (GH-137584)
#148177
[3.10] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code (GH-145507)
#145516
[3.10] gh-145455: Constrain setuptools to a version with pkg_resources
#145456
[3.10] gh-146488: hash-pin all action references (gh-146489)
#147978
[3.10] gh-94632: document the subprocess need for extra_groups=() with user= (GH-148129)
#148134
[3.10] gh-143930: Reject leading dashes in webbrowser URLs (GH-143931)
#146359
[3.10] Default GHA permissions to `contents: read` (GH-148346)
#148391
[3.10] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085)
#146608
[3.10] gh-148395: Fix a possible UAF in `{LZMA,BZ2}Decompressor` (GH-148396)
#148505
[3.10] gh-148169: Fix webbrowser `%action` substitution bypass of dash-prefix check (GH-148170)
#148521
[3.10] gh-141707: Skip TarInfo DIRTYPE normalization during GNU long name handling
#145816
[3.10] gh-150743: Limit trailer lines and interim responses read by http.client (GH-150749)
#152529
[3.10] gh-87451: Apply CVE-2021-4189 PASV fix to ftplib.ftpcp() (GH-149648)
#149797

Browse Other Releases

Latest Pending Unreleased 😎
v3.11.0a4 Released January 13, 2022
13,429 Ξ”
v3.11.0a3 Released December 8, 2021
27,399 Ξ”
v3.11.0a2 Released January 27, 2022
15,971 Ξ”
v3.11.0a1 Released October 5, 2021
31,066 Ξ”
v3.10.21 Released August 12, 2026
551 Ξ”
v3.10.20 Released March 3, 2026
110 Ξ”
v3.10.19 Released October 9, 2025
5 Ξ”
v3.10.18 Released June 3, 2025
337 Ξ”
v3.10.17 Released April 10, 2025
272 Ξ”
v3.10.16 Released December 3, 2024
261 Ξ”

Top Contributors in v3.10.21

miss-islington
StanFromIreland
vstinner
jihugo
sethmlarson
serhiy-storchaka
pablogsal
encukou
woodruffw

Directory Browser for v3.10.21

We haven't yet finished calculating and confirming the files and directories changed in this release. Please check back soon.