The Python Software Foundation has released Python 3.14.10, an expedited security update designed to protect developers and applications against newly identified security risks. Published on October 25, 2026, the release addresses compromised eMudhra intermediate certificate-authority keys, along with additional security fixes affecting Python's standard library. The update also includes approximately 120 bug fixes, build improvements and documentation changes contributed since Python 3.14.9.
The release is particularly relevant to developers who use Python for web applications, backend services, automation, data processing and software infrastructure. Although it is a maintenance release rather than a major new feature announcement, its security changes make it important for teams responsible for keeping production environments and development tools up to date.
Why Python released an expedited security update
The main reason for Python 3.14.10 is the discovery of compromised eMudhra intermediate certificate-authority keys. Certificate authorities play an important role in internet security because they help establish trust in digital certificates used by secure connections. If a certificate authority's keys are compromised, attackers may be able to abuse that trust under certain conditions.
Python's ssl module now blocks the affected intermediate certificate-authority keys as a last-resort protection. According to the official release notes, normal uses of pip, including upgrading pip itself, are protected against attacks based on those compromised keys even when pip has not yet been updated.
This matters because Python developers frequently install packages and dependencies from online repositories. Secure connections are an important part of that process, helping developers retrieve software without trusting certificates that should no longer be accepted.
Three security issues addressed in Python 3.14.10
The release includes several security changes beyond the certificate-authority update. One addresses CVE-2026-115557, which distrusts the compromised eMudhra intermediate certificate-authority keys. The change is implemented in Python's SSL functionality to prevent those keys from being accepted as trusted intermediates.
Another fix addresses CVE-2026-114583, involving Python's tarfile extraction filtering. The update changes how the tarfile filter handles links that attempt to replace the intended extraction destination. Archive extraction is a common operation in software development, package handling and data-processing workflows, so safeguards around file paths and links are important for preventing files from being written to unintended locations.
A third security-related change prevents cookies with a negative version from being accepted by Python's http.cookiejar module. This improves input validation in a standard-library component used by applications that handle HTTP cookies.
What developers get beyond security fixes
Python 3.14.10 is the tenth maintenance release in the Python 3.14 series. The Python release page reports around 120 bug fixes, build improvements and documentation changes since version 3.14.9, with contributions from 63 developers.
These maintenance improvements are important because a programming language runtime must remain reliable across different operating systems, development environments and application workloads. Even when a release does not introduce major language features, improvements to stability, compatibility and build processes can benefit developers maintaining long-running projects.
The release is available through the official Python download page, with installers and packages for supported platforms. Developers can also review the full changelog to understand the individual changes before updating their development or production environments.
How to update to Python 3.14.10
Developers using Python 3.14 should first check the version installed on their systems. This can be done from a terminal by running python --version or, depending on the operating system, python3 --version.
After confirming the installed version, developers can download the appropriate Python 3.14.10 installer or source package from the official Python website. Windows, macOS and other supported environments have different installation procedures, so users should follow the instructions for their operating system.
For production applications, updating the Python interpreter should be handled carefully. Teams should test the new version in a staging environment, verify application dependencies and confirm that critical services continue to work as expected before completing a production rollout.
Developers should also remember that updating Python itself does not automatically update every third-party package in a project. Dependency management, application testing and deployment verification remain important parts of a secure upgrade process.
Why this Python update matters for the developer community
Python is used across web development, artificial intelligence, scientific computing, cybersecurity, automation and enterprise software. Security changes in the language runtime can therefore affect a broad range of developers and organizations, even when the update is focused on maintenance rather than new programming features.
The certificate-authority issue also demonstrates how software security depends on components beyond application code. A developer may write secure business logic but still rely on certificate validation, package downloads, archive extraction and standard-library behavior. Vulnerabilities in these underlying components can create risks throughout the software supply chain.
For organizations, the practical response is to maintain supported Python versions, monitor official release announcements and establish a repeatable process for testing and deploying security updates. Keeping development environments current can reduce exposure to known issues and improve the reliability of software delivery.
What developers should do next
Python 3.14.10 is an important maintenance release for developers who use the Python 3.14 series. Its expedited security changes address compromised certificate-authority keys and additional standard-library issues, while also delivering a substantial collection of maintenance improvements.
Developers should review the official release notes, check whether their environments use Python 3.14 and plan an upgrade where appropriate. For production systems, testing the update before deployment remains essential. The release reinforces an important principle of software development: keeping programming language runtimes and their security components maintained is part of building dependable applications.
