Home » Oreps » Cpython » All Releases » v3.11.16 Release
python/cpython
The Python programming language
Watch
0
Commit Activity
Directory Browser
Velocity History
Releasesv3.11.16
Basic Details Issues Addressed Top Contributors Directory Browser
Cpython v3.11.16

Cpython: v3.11.16 Release

Release date:
August 12, 2026
Previous version:
v3.11.15 (released March 3, 2026)
Magnitude:
827 Diff Delta
Contributors:
10 total committers
Data confidence:
Commits:
48 impacting commits

27 Features Released with v3.11.16

[3.11] gh-145098: Use `macos-15-intel` instead of unstable `macos-26-…intel` in `{jit,tail-call}.yml` (GH-148126)
#148138
[3.11] gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146…
#148351
gh-144370: Disallow usage of control characters in status in ``Lib/wsgiref/handlers.py`` for security
#144371
[3.11] Remove MSI build from security-only branch (GH-148007)
#148008
Add `permissions: {}` to all reusable workflows
#148114
[3.11] gh-148169: Fix webbrowser `%action` substitution bypass of dash-prefix check (GH-148170)
#148520
[3.11] Replace deprecated action with RtD app (GH-149111) (GH-150233)
#151657
[3.11] gh-148395: Fix a possible UAF in `{LZMA,BZ2}Decompressor` (GH-148396)
#148504
[3.11] gh-141707: Skip TarInfo DIRTYPE normalization during GNU long name handling
#145815
[3.11] Add `mkdir`s to fix 3.11 docs build
#145571
[3.11] gh-145455: Show output of blurb & sphinx-build version commands (GH-145457)
#145491
[3.11] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085)
#146607
[3.11] gh-145098: Run Apple Silicon macOS CI on macos-26 (Tahoe) (GH-145099) (GH-146412) (GH-146414) (GH-146635)
#146638
[3.11] gh-146488: hash-pin all action references (gh-146489)
#147979
[3.11] gh-137586: Open external osascript program with absolute path (GH-137584)
#148176
[3.11] gh-94632: document the subprocess need for extra_groups=() with user= (GH-148129)
#148133
[3.11] gh-143930: Reject leading dashes in webbrowser URLs (GH-143931)
#146364
[3.11] Default GHA permissions to `contents: read` (GH-148346)
#148389
[3.11] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code (GH-145507)
#145515
[3.11] Replace `pre-commit/action` with `j178/prek-action`
#150237
[3.11] gh-149486: tarfile.data_filter: validate written link target (GH-149487)
#150904
[3.11] CI: Move Homebrew dependencies into Brewfile (GH-148335) (GH-149884)
#149989
[3.11] gh-151558: Fix symlink escape via `tarfile` hardlink-extraction fallback (GH-151559)
#152001
[3.11] gh-150743: Limit trailer lines and interim responses read by http.client (GH-150749)
#152528
[3.11] gh-87451: Apply CVE-2021-4189 PASV fix to ftplib.ftpcp() (GH-149648)
#149796
[3.11] gh-151981: Make tarfile._Stream.seek break at EOF (GH-151982)
#151995
[3.11] gh-151987: Pass filter_function to TarFile._extract_one() during .extract() (GH-151988)
#152612

Browse Other Releases

Latest Pending Unreleased 😎
v3.12.0a5 Released June 24, 2023
20,887 Ξ”
v3.12.0a4 Released September 2, 2023
7,500 Ξ”
v3.12.0a3 Released October 8, 2024
7,349 Ξ”
v3.12.0a2 Released September 2, 2023
3,062 Ξ”
v3.12.0a1 Released October 24, 2022
29,433 Ξ”
v3.11.16 Released August 12, 2026
827 Ξ”
v3.11.15 Released March 3, 2026
114 Ξ”
v3.11.14 Released October 9, 2025
236 Ξ”
v3.11.13 Released June 3, 2025
352 Ξ”
v3.11.12 Released April 8, 2025
377 Ξ”

Top Contributors in v3.11.16

StanFromIreland
serhiy-storchaka
miss-islington
sethmlarson
jihugo
pablogsal
encukou
ezio-melotti
vstinner
woodruffw

Directory Browser for v3.11.16

We haven't yet finished calculating and confirming the files and directories changed in this release. Please check back soon.