Python 3.9.22
Warning:
Python 3.9.22 reached end-of-life on 2025-10-31.
It is no longer supported and does not receive security updates.
We recommend upgrading to the latest Python release.
Note: Python 3.9.22 has been superseded by Python 3.9.25.
Release date: April 8, 2025
This is a security release of Python 3.9
Note: The release you're looking at is Python 3.9.22, a security bugfix release for the legacy 3.9 series. Python 3.13 is now the latest feature release series of Python 3. Get the latest release of 3.13.x here.
Security content in this release
- gh-131809 and gh-131261: Upgrade vendored expat to 2.7.1
- gh-121284: Invalid RFC 2047 address header after refolding with email.policy.default
- gh-105704: CVE-2025-0938 urlparse does not flag hostname containing [ or ] as incorrect
- gh-119511: OOM vulnerability in the imaplib module
No installers
According to the release calendar specified in PEP 596, Python 3.9 is now in the "security fixes only" stage of its life cycle: the 3.9 branch only accepts security fixes and releases of those are made irregularly in source-only form until October 2025. Python 3.9 isn't receiving regular bug fixes anymore, and binary installers are no longer provided for it. Python 3.9.13 was the last full bugfix release of Python 3.9 with binary installers.
Files
Source release
| Version | Operating system | Description | File size | Sigstore | GPG | MD5 checksum | |
|---|---|---|---|---|---|---|---|
| Gzipped source tarball | Source release | 24.9 MB | .sigstore | SIG | 8fe76e248a0e149ac23e8e4886397475 | ||
| XZ compressed source tarball | Source release | 18.7 MB | .sigstore | SIG | cee32bb2e6abf73bd8dda59a6f5f56bd | ||