We are pleased to announce the release of Python 2.3.6 (FINAL), a bugfix release of Python 2.3, on November 1, 2006.
Important: 2.3.6 includes a security fix (PSF-2006-001) for the repr() of unicode strings in wide unicode builds (UCS-4)
Python 2.3 is now well and truly in bugfix-only mode; no new features are being added, and only security critical bugs have been fixed. There are 3 bugs fixed in this release - a problem with the email package's handling of RFC2231 headers, the unicode repr() fix for PSF-2006-01, and a fix for the deprecated PCRE module.
See the detailed release notes for more details.
Python 2.5 and Python 2.4 are newer releases of Python. This release of the older 2.3 code is to provide bug fixes for people who are still using Python 2.3. Most vendors shipping 2.3 should have already released patched versions of 2.3.5 - this release is for other people who want to build their own version, but don't want to have to fool around with patch or svn. You will only need to worry about rebuilding if you are using a UCS-4 build of Python - see the security announcement for details on how to determine if your build is vulnerable.
This is a source only release. The Windows and Mac binaries of 2.3.5 were built with UCS-2 unicode, and are therefore not vulnerable to the problem outlined in PSF-2006-001. The PCRE fix is for a long-deprecated module (you should use the 're' module instead) and the email fix can be obtained by downloading the standalone version of the email package.
Please see the separate bugs page for known issues and the bug reporting procedure.
See also the license
Download the release
As noted, python.org is not providing binary installers for 2.3.6. Windows and Mac OS X users who cannot compile their own versions should continue to use the 2.3.5 installers. These installers are not vulnerable to PSF-2006-001.
gzip-compressed source code: Python-2.3.6.tgz
bzip2-compressed source code: Python-2.3.6.tar.bz2, the source archive.
The bzip2-compressed version is considerably smaller, so get that one if your system has the appropriate tools to deal with it.
Unpack the archive with tar -zxvf Python-2.3.6.tgz (or bzcat Python-2.3.6.tar.bz2 | tar -xf -). Change to the Python-2.3.6 directory and run the "./configure", "make", "make install" commands to compile and install Python. The source archive is also suitable for Windows users who feel the need to build their own version.
- See the highlights of the Python 2.3 release.
- Andrew Kuchling's What's New in Python 2.3 describes the most visible changes since Python 2.2 in more detail.
- A detailed list of the changes in 2.3.6 can be found in the release notes, or the Misc/NEWS file in the source distribution. This is a very short list - only security fixes have been included.
- For the full list of changes, you can poke around in Subversion.
The documentation for 2.3.5 is still current for this release.