| route-pattern | /_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format) |
| route-controller | voltron_pull_requests_fragments |
| route-action | pull_request_layout |
| fetch-nonce | v2:133f4d9a-fb44-8ac3-9f41-c849b03f771b |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | EE1A:24534E:8A4E48:BB9BB7:6A51F98F |
| html-safe-nonce | c19d73d8bf904d2e1fdf9d1c64dd448fcc16028838ddea18d2fbb313557c9066 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFRTFBOjI0NTM0RTo4QTRFNDg6QkI5QkI3OjZBNTFGOThGIiwidmlzaXRvcl9pZCI6IjI1NzkyMzU1NTUwNDE3MzcxMDMiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | e39446355742173d71da1e7b7ce5dc5425be0f2f45adfb16ac5f3f5d5e2cd0fb |
| hovercard-subject-tag | pull_request:3683006416 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///voltron/pull_requests_fragments/pull_request_layout |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/python/cpython/149824/pull_request_layout |
| twitter:image | https://opengraph.githubassets.com/8f3bf9f35a6f16f975bd81272951d6181b7350af51ecbf0cf8b4cd5f92af7086/python/cpython/pull/149824 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/8f3bf9f35a6f16f975bd81272951d6181b7350af51ecbf0cf8b4cd5f92af7086/python/cpython/pull/149824 |
| og:image:alt | I am not sure that it would be easy to repro / test in a real env, but it can be a potential problem.
Original description from 17.md:
Vulnerability #17
Title: Unlocked init races with PRNG state ... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | sobolevn |
| hostname | github.com |
| expected-hostname | github.com |
| None | b9a586c06a05a7a86fc7e3f4dbd03e42f6869085879aa184aa6369456dbd50fb |
| turbo-cache-control | no-cache |
| go-import | github.com/python/cpython git https://github.com/python/cpython.git |
| octolytics-dimension-user_id | 1525981 |
| octolytics-dimension-user_login | python |
| octolytics-dimension-repository_id | 81598961 |
| octolytics-dimension-repository_nwo | python/cpython |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 81598961 |
| octolytics-dimension-repository_network_root_nwo | python/cpython |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 7aed05249554b889eb33d002851a973eebcc7e91 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/python/cpython/pull/149824#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fpull%2F149824 |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/open-source/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/open-source/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fpull%2F149824 |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=python%2Fcpython |
| Reload | https://github.com/python/cpython/pull/149824 |
| Reload | https://github.com/python/cpython/pull/149824 |
| Reload | https://github.com/python/cpython/pull/149824 |
| Please reload this page | https://github.com/python/cpython/pull/149824 |
|
python
| https://github.com/python |
| cpython | https://github.com/python/cpython |
| Please reload this page | https://github.com/python/cpython/pull/149824 |
|
Notifications
| https://github.com/login?return_to=%2Fpython%2Fcpython |
|
Fork
35k
| https://github.com/login?return_to=%2Fpython%2Fcpython |
|
Star
73.7k
| https://github.com/login?return_to=%2Fpython%2Fcpython |
|
Code
| https://github.com/python/cpython |
|
Issues
5k+
| https://github.com/python/cpython/issues |
|
Pull requests
2.3k
| https://github.com/python/cpython/pulls |
|
Actions
| https://github.com/python/cpython/actions |
|
Projects
| https://github.com/python/cpython/projects |
|
Security and quality
0
| https://github.com/python/cpython/security |
|
Insights
| https://github.com/python/cpython/pulse |
|
Code
| https://github.com/python/cpython |
|
Issues
| https://github.com/python/cpython/issues |
|
Pull requests
| https://github.com/python/cpython/pulls |
|
Actions
| https://github.com/python/cpython/actions |
|
Projects
| https://github.com/python/cpython/projects |
|
Security and quality
| https://github.com/python/cpython/security |
|
Insights
| https://github.com/python/cpython/pulse |
| sobolevn | https://github.com/sobolevn |
| python:main | https://github.com/python/cpython/tree/main |
| sobolevn:issue-149816-17 | https://github.com/sobolevn/cpython/tree/issue-149816-17 |
| Conversation | https://github.com/python/cpython/pull/149824 |
| Commits2 (2) | https://github.com/python/cpython/pull/149824/commits |
| Checks | https://github.com/python/cpython/pull/149824/checks |
| Files changed | https://github.com/python/cpython/pull/149824/files |
| gh-149816: Fix a RC in _random.Random.__init__ method | https://github.com/python/cpython/pull/149824#top |
| sobolevn | https://github.com/sobolevn |
| python:main | https://github.com/python/cpython/tree/main |
| sobolevn:issue-149816-17 | https://github.com/sobolevn/cpython/tree/issue-149816-17 |
|
| https://github.com/sobolevn |
| sobolevn | https://github.com/sobolevn |
| May 14, 2026 | https://github.com/python/cpython/pull/149824#issue-4446080354 |
| Please reload this page | https://github.com/python/cpython/pull/149824 |
| #17 | https://github.com/python/cpython/pull/17 |
| 22 free-threading race conditions #149816 | https://github.com/python/cpython/issues/149816 |
| Please reload this page | https://github.com/python/cpython/pull/149824 |
| https://github.com/sobolevn |
| sobolevn | https://github.com/sobolevn |
| colesbury | https://github.com/colesbury |
| May 14, 2026 12:58 | https://github.com/python/cpython/pull/149824#event-25529618162 |
| https://github.com/sobolevn |
| sobolevn | https://github.com/sobolevn |
| rhettinger | https://github.com/rhettinger |
| code owner | https://github.com/python/cpython/blob/c6f7368157ecf9f2cdd537d8b6fad6e011bce344/.github/CODEOWNERS#L568 |
| May 14, 2026 12:58 | https://github.com/python/cpython/pull/149824#event-25529618527 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
May 14, 2026
| https://github.com/python/cpython/pull/149824#ref-issue-4442224953 |
|
22 free-threading race conditions
#149816
| https://github.com/python/cpython/issues/149816 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
awaiting core review
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22awaiting%20core%20review%22 |
| May 14, 2026 | https://github.com/python/cpython/pull/149824#event-25529624055 |
|
| https://github.com/sobolevn |
| pythongh-149816 | https://github.com/python/cpython/issues/149816 |
| : Fix a RC in | https://github.com/python/cpython/pull/149824/commits/6632a253d4dc9793729df55b3ae7a901d2d74c8a |
| _random.Random.__init__ | https://github.com/python/cpython/pull/149824/commits/6632a253d4dc9793729df55b3ae7a901d2d74c8a |
| method | https://github.com/python/cpython/pull/149824/commits/6632a253d4dc9793729df55b3ae7a901d2d74c8a |
| 6632a25 | https://github.com/python/cpython/pull/149824/commits/6632a253d4dc9793729df55b3ae7a901d2d74c8a |
| https://github.com/sobolevn |
| sobolevn | https://github.com/sobolevn |
| force-pushed | https://github.com/python/cpython/compare/ff2d5ad71ddbf8a39c4792673aa61b8b0041317c..6632a253d4dc9793729df55b3ae7a901d2d74c8a |
| ff2d5ad | https://github.com/python/cpython/commit/ff2d5ad71ddbf8a39c4792673aa61b8b0041317c |
| 6632a25 | https://github.com/python/cpython/commit/6632a253d4dc9793729df55b3ae7a901d2d74c8a |
|
Compare
| https://github.com/python/cpython/compare/ff2d5ad71ddbf8a39c4792673aa61b8b0041317c..6632a253d4dc9793729df55b3ae7a901d2d74c8a |
| May 14, 2026 13:28 | https://github.com/python/cpython/pull/149824#event-25530736502 |
| https://github.com/lunixbochs |
| lunixbochs | https://github.com/lunixbochs |
| May 14, 2026 | https://github.com/python/cpython/pull/149824#issuecomment-4451650725 |
| 6632a25 | https://github.com/python/cpython/commit/6632a253d4dc9793729df55b3ae7a901d2d74c8a |
| 31d1a72 | https://github.com/python/cpython/commit/31d1a7216ce27342788917cfc1e60a1debe0d530 |
| Please reload this page | https://github.com/python/cpython/pull/149824 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
|
May 15, 2026
| https://github.com/python/cpython/pull/149824#pullrequestreview-4297377314 |
|
View reviewed changes
| https://github.com/python/cpython/pull/149824/files/6632a253d4dc9793729df55b3ae7a901d2d74c8a |
| picnixz | https://github.com/picnixz |
| https://github.com/python/cpython/pull/149824#pullrequestreview-4297377314 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/python/cpython/pull/149824 |
| Modules/_randommodule.c | https://github.com/python/cpython/pull/149824/files/6632a253d4dc9793729df55b3ae7a901d2d74c8a#diff-c2608f08e5410416046fb2fc953730740d0b29b26c148c2cb4a40e87212012fa |
| Please reload this page | https://github.com/python/cpython/pull/149824 |
| Modules/_randommodule.c | https://github.com/python/cpython/pull/149824/files/6632a253d4dc9793729df55b3ae7a901d2d74c8a#diff-c2608f08e5410416046fb2fc953730740d0b29b26c148c2cb4a40e87212012fa |
| Please reload this page | https://github.com/python/cpython/pull/149824 |
| Modules/_randommodule.c | https://github.com/python/cpython/pull/149824/files/6632a253d4dc9793729df55b3ae7a901d2d74c8a#diff-c2608f08e5410416046fb2fc953730740d0b29b26c148c2cb4a40e87212012fa |
| Please reload this page | https://github.com/python/cpython/pull/149824 |
|
| https://github.com/sobolevn |
| Address review | https://github.com/python/cpython/pull/149824/commits/de0b35d830b0c9cfc99a330ee9964ff5a1b85384 |
| de0b35d | https://github.com/python/cpython/pull/149824/commits/de0b35d830b0c9cfc99a330ee9964ff5a1b85384 |
| https://github.com/sobolevn |
| sobolevn | https://github.com/sobolevn |
| May 15, 2026 | https://github.com/python/cpython/pull/149824#issuecomment-4459119078 |
| Please reload this page | https://github.com/python/cpython/pull/149824 |
| https://github.com/colesbury |
| colesbury | https://github.com/colesbury |
|
needs backport to 3.14
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.14%22 |
|
needs backport to 3.15
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.15%22 |
| May 18, 2026 | https://github.com/python/cpython/pull/149824#event-25664152165 |
| https://github.com/colesbury |
| colesbury | https://github.com/colesbury |
|
May 18, 2026
| https://github.com/python/cpython/pull/149824#pullrequestreview-4311416652 |
|
View reviewed changes
| https://github.com/python/cpython/pull/149824/files/de0b35d830b0c9cfc99a330ee9964ff5a1b85384 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
awaiting merge
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22awaiting%20merge%22 |
|
awaiting core review
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22awaiting%20core%20review%22 |
| May 18, 2026 | https://github.com/python/cpython/pull/149824#event-25664159597 |
| https://github.com/sobolevn |
| sobolevn | https://github.com/sobolevn |
| 14af19e | https://github.com/python/cpython/commit/14af19e6c0d9dd05b525596fdd53373f726253d8 |
| May 18, 2026 | https://github.com/python/cpython/pull/149824#event-25665167257 |
| Please reload this page | https://github.com/python/cpython/pull/149824 |
| https://github.com/apps/miss-islington-app |
| miss-islington-app | https://github.com/apps/miss-islington-app |
| May 18, 2026 | https://github.com/python/cpython/pull/149824#issuecomment-4479305696 |
| @sobolevn | https://github.com/sobolevn |
| Please reload this page | https://github.com/python/cpython/pull/149824 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
awaiting merge
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22awaiting%20merge%22 |
| May 18, 2026 | https://github.com/python/cpython/pull/149824#event-25665170066 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
| May 18, 2026 | https://github.com/python/cpython/pull/149824#issuecomment-4479307799 |
| GH-149997 | https://github.com/python/cpython/pull/149997 |
| 3.15 branch | https://github.com/python/cpython/tree/3.15 |
| Please reload this page | https://github.com/python/cpython/pull/149824 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
needs backport to 3.15
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.15%22 |
| May 18, 2026 | https://github.com/python/cpython/pull/149824#event-25665182544 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
| May 18, 2026 | https://github.com/python/cpython/pull/149824#issuecomment-4479308618 |
| GH-149998 | https://github.com/python/cpython/pull/149998 |
| 3.14 branch | https://github.com/python/cpython/tree/3.14 |
| Please reload this page | https://github.com/python/cpython/pull/149824 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
needs backport to 3.14
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.14%22 |
| May 18, 2026 | https://github.com/python/cpython/pull/149824#event-25665186973 |
| sobolevn | https://github.com/sobolevn |
|
May 18, 2026
| https://github.com/python/cpython/pull/149824#ref-commit-01b07df |
|
| https://github.com/miss-islington |
|
| https://github.com/sobolevn |
| [3.15] | https://github.com/python/cpython/commit/01b07df858a9594f4421dacfd10a1c1b26102e29 |
| gh-149816 | https://github.com/python/cpython/issues/149816 |
| : Fix a RC in | https://github.com/python/cpython/commit/01b07df858a9594f4421dacfd10a1c1b26102e29 |
| _random.Random.__init__ | https://github.com/python/cpython/commit/01b07df858a9594f4421dacfd10a1c1b26102e29 |
| method ( | https://github.com/python/cpython/commit/01b07df858a9594f4421dacfd10a1c1b26102e29 |
| GH-14… | https://github.com/python/cpython/pull/149824 |
| 01b07df | https://github.com/python/cpython/commit/01b07df858a9594f4421dacfd10a1c1b26102e29 |
| …9824 | https://github.com/python/cpython/pull/149824 |
| #149997 | https://github.com/python/cpython/pull/149997 |
| gh-149816 | https://github.com/python/cpython/issues/149816 |
| GH-149824 | https://github.com/python/cpython/pull/149824 |
| 14af19e | https://github.com/python/cpython/commit/14af19e6c0d9dd05b525596fdd53373f726253d8 |
| sobolevn | https://github.com/sobolevn |
|
May 18, 2026
| https://github.com/python/cpython/pull/149824#ref-commit-21a7236 |
|
| https://github.com/miss-islington |
|
| https://github.com/sobolevn |
| [3.14] | https://github.com/python/cpython/commit/21a72363f99fb940dd3c0649e4545785bac1213f |
| gh-149816 | https://github.com/python/cpython/issues/149816 |
| : Fix a RC in | https://github.com/python/cpython/commit/21a72363f99fb940dd3c0649e4545785bac1213f |
| _random.Random.__init__ | https://github.com/python/cpython/commit/21a72363f99fb940dd3c0649e4545785bac1213f |
| method ( | https://github.com/python/cpython/commit/21a72363f99fb940dd3c0649e4545785bac1213f |
| GH-14… | https://github.com/python/cpython/pull/149824 |
| 21a7236 | https://github.com/python/cpython/commit/21a72363f99fb940dd3c0649e4545785bac1213f |
| …9824 | https://github.com/python/cpython/pull/149824 |
| #149998 | https://github.com/python/cpython/pull/149998 |
| gh-149816 | https://github.com/python/cpython/issues/149816 |
| GH-149824 | https://github.com/python/cpython/pull/149824 |
| 14af19e | https://github.com/python/cpython/commit/14af19e6c0d9dd05b525596fdd53373f726253d8 |
| https://github.co/hiddenchars |
| https://github.com/python/cpython/pull/{{ revealButtonHref }} |
| Sign up for free | https://github.com/join?source=comment-repo |
| Sign in to comment | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fpull%2F149824 |
|
| https://github.com/picnixz |
|
picnixz
| https://github.com/picnixz |
|
| https://github.com/python/cpython/pull/149824/files/6632a253d4dc9793729df55b3ae7a901d2d74c8a |
|
| https://github.com/colesbury |
|
colesbury
| https://github.com/colesbury |
|
| https://github.com/python/cpython/pull/149824/files/de0b35d830b0c9cfc99a330ee9964ff5a1b85384 |
|
| https://github.com/rhettinger |
|
rhettinger
| https://github.com/rhettinger |
| Please reload this page | https://github.com/python/cpython/pull/149824 |
|
| https://github.com/sobolevn |
|
| https://github.com/lunixbochs |
|
| https://github.com/colesbury |
|
| https://github.com/picnixz |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |