diff --git a/Include/patchlevel.h b/Include/patchlevel.h
index 7d32ce5e2f0144d..fde09df0f9a3957 100644
--- a/Include/patchlevel.h
+++ b/Include/patchlevel.h
@@ -27,7 +27,7 @@
 #define PY_RELEASE_SERIAL	0
 
 /* Version as a string */
-#define PY_VERSION      	"2.7.18.16"
+#define PY_VERSION      	"2.7.18.17"
 /*--end constants--*/
 
 /* Subversion Revision number of this file (not of the repository). Empty
diff --git a/Misc/NEWS.d/next/Library/2026-06-15-15-32-36.gh-issue-151497.1cfmSV.rst b/Misc/NEWS.d/2.7.18.17.rst
similarity index 60%
rename from Misc/NEWS.d/next/Library/2026-06-15-15-32-36.gh-issue-151497.1cfmSV.rst
rename to Misc/NEWS.d/2.7.18.17.rst
index a4c03c9d71d7618..592daba03f93798 100644
--- a/Misc/NEWS.d/next/Library/2026-06-15-15-32-36.gh-issue-151497.1cfmSV.rst
+++ b/Misc/NEWS.d/2.7.18.17.rst
@@ -1,3 +1,12 @@
+.. bpo: 0
+.. date: 2026-10-30
+.. nonce: as0117
+.. release date: 2026-10-30
+.. original section: Library
+.. section: Security
+
+gh-151497: tarfile no longer pre-allocates oversized extended headers
+
 Opening a :mod:`tarfile` archive no longer attempts to pre-allocate a huge
 buffer when a crafted or truncated member claims an oversized extended header
 (a GNU long name/link or a pax header).  The extended header is now read in