1.. date: 2023-02-08-22-03-04 2.. gh-issue: 101727 3.. nonce: 9P5eZz 4.. release date: 2023-04-04 5.. section: Security 6 7Updated the OpenSSL version used in Windows and macOS binary release builds 8to 1.1.1t to address CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 per 9`the OpenSSL 2023-02-07 security advisory 10<https://www.openssl.org/news/secadv/20230207.txt>`_. 11 12.. 13 14.. date: 2023-01-24-16-12-00 15.. gh-issue: 101283 16.. nonce: 9tqu39 17.. section: Security 18 19:class:`subprocess.Popen` now uses a safer approach to find ``cmd.exe`` when 20launching with ``shell=True``. Patch by Eryk Sun, based on a patch by Oleg 21Iarygin. 22 23.. 24 25.. date: 2023-03-18-02-36-39 26.. gh-issue: 101975 27.. nonce: HwMR1d 28.. section: Core and Builtins 29 30Fixed ``stacktop`` value on tracing entries to avoid corruption on garbage 31collection. 32 33.. 34 35.. date: 2023-03-16-17-24-44 36.. gh-issue: 102701 37.. nonce: iNGVaS 38.. section: Core and Builtins 39 40Fix overflow when creating very large dict. 41 42.. 43 44.. date: 2023-03-06-13-05-33 45.. gh-issue: 102416 46.. nonce: dz6K5f 47.. section: Core and Builtins 48 49Do not memoize incorrectly automatically generated loop rules in the parser. 50Patch by Pablo Galindo. 51 52.. 53 54.. date: 2023-03-04-20-56-12 55.. gh-issue: 102356 56.. nonce: 07KvUd 57.. section: Core and Builtins 58 59Fix a bug that caused a crash when deallocating deeply nested filter 60objects. Patch by Marta Gómez Macías. 61 62.. 63 64.. date: 2023-03-04-06-48-34 65.. gh-issue: 102397 66.. nonce: ACJaOf 67.. section: Core and Builtins 68 69Fix segfault from race condition in signal handling during garbage 70collection. Patch by Kumar Aditya. 71 72.. 73 74.. date: 2023-03-02-13-49-21 75.. gh-issue: 102281 76.. nonce: QCuu2N 77.. section: Core and Builtins 78 79Fix potential nullptr dereference and use of uninitialized memory in 80fileutils. Patch by Max Bachmann. 81 82.. 83 84.. date: 2023-02-24-17-59-39 85.. gh-issue: 102126 86.. nonce: HTT8Vc 87.. section: Core and Builtins 88 89Fix deadlock at shutdown when clearing thread states if any finalizer tries 90to acquire the runtime head lock. Patch by Kumar Aditya. 91 92.. 93 94.. date: 2023-02-21-23-42-39 95.. gh-issue: 102027 96.. nonce: fQARG0 97.. section: Core and Builtins 98 99Fix SSE2 and SSE3 detection in ``_blake2`` internal module. Patch by Max 100Bachmann. 101 102.. 103 104.. date: 2023-02-16-23-19-01 105.. gh-issue: 101967 106.. nonce: Kqr1dz 107.. section: Core and Builtins 108 109Fix possible segfault in ``positional_only_passed_as_keyword`` function, 110when new list created. 111 112.. 113 114.. date: 2023-02-10-07-21-47 115.. gh-issue: 101765 116.. nonce: MO5LlC 117.. section: Core and Builtins 118 119Fix SystemError / segmentation fault in iter ``__reduce__`` when internal 120access of ``builtins.__dict__`` keys mutates the iter object. 121 122.. 123 124.. date: 2023-02-08-17-13-31 125.. gh-issue: 101696 126.. nonce: seJhTt 127.. section: Core and Builtins 128 129Invalidate type version tag in ``_PyStaticType_Dealloc`` for static types, 130avoiding bug where a false cache hit could crash the interpreter. Patch by 131Kumar Aditya. 132 133.. 134 135.. date: 2023-03-27-19-21-51 136.. gh-issue: 102549 137.. nonce: NQ6Nlv 138.. section: Library 139 140Don't ignore exceptions in member type creation. 141 142.. 143 144.. date: 2023-03-23-13-34-33 145.. gh-issue: 102947 146.. nonce: cTwcpU 147.. section: Library 148 149Improve traceback when :func:`dataclasses.fields` is called on a 150non-dataclass. Patch by Alex Waygood 151 152.. 153 154.. date: 2023-03-22-16-15-18 155.. gh-issue: 102780 156.. nonce: NEcljy 157.. section: Library 158 159The :class:`asyncio.Timeout` context manager now works reliably even when 160performing cleanup due to task cancellation. Previously it could raise a 161:exc:`~asyncio.CancelledError` instead of an :exc:`~asyncio.TimeoutError` in 162such cases. 163 164.. 165 166.. date: 2023-03-18-14-59-21 167.. gh-issue: 88965 168.. nonce: kA70Km 169.. section: Library 170 171typing: Fix a bug relating to substitution in custom classes generic over a 172:class:`~typing.ParamSpec`. Previously, if the ``ParamSpec`` was substituted 173with a parameters list that itself contained a :class:`~typing.TypeVar`, the 174``TypeVar`` in the parameters list could not be subsequently substituted. 175This is now fixed. 176 177Patch by Nikita Sobolev. 178 179.. 180 181.. date: 2023-02-28-09-52-25 182.. gh-issue: 101979 183.. nonce: or3hXV 184.. section: Library 185 186Fix a bug where parentheses in the ``metavar`` argument to 187:meth:`argparse.ArgumentParser.add_argument` were dropped. Patch by Yeojin 188Kim. 189 190.. 191 192.. date: 2023-02-23-15-06-01 193.. gh-issue: 102179 194.. nonce: P6KQ4c 195.. section: Library 196 197Fix :func:`os.dup2` error message for negative fds. 198 199.. 200 201.. date: 2023-02-21-10-05-33 202.. gh-issue: 101961 203.. nonce: 7e56jh 204.. section: Library 205 206For the binary mode, :func:`fileinput.hookcompressed` doesn't set the 207``encoding`` value even if the value is ``None``. Patch by Gihwan Kim. 208 209.. 210 211.. date: 2023-02-21-07-15-41 212.. gh-issue: 101936 213.. nonce: QVOxHH 214.. section: Library 215 216The default value of ``fp`` becomes :class:`io.BytesIO` if 217:exc:`~urllib.error.HTTPError` is initialized without a designated ``fp`` 218parameter. Patch by Long Vo. 219 220.. 221 222.. date: 2023-02-20-16-47-56 223.. gh-issue: 102069 224.. nonce: FS7f1j 225.. section: Library 226 227Fix ``__weakref__`` descriptor generation for custom dataclasses. 228 229.. 230 231.. date: 2023-02-17-20-24-15 232.. gh-issue: 101566 233.. nonce: FjgWBt 234.. section: Library 235 236In zipfile, apply fix for extractall on the underlying zipfile after being 237wrapped in ``Path``. 238 239.. 240 241.. date: 2023-02-14-09-08-48 242.. gh-issue: 101892 243.. nonce: FMos8l 244.. section: Library 245 246Callable iterators no longer raise :class:`SystemError` when the callable 247object exhausts the iterator but forgets to either return a sentinel value 248or raise :class:`StopIteration`. 249 250.. 251 252.. date: 2023-02-11-13-23-29 253.. gh-issue: 97786 254.. nonce: QjvQ1B 255.. section: Library 256 257Fix potential undefined behaviour in corner cases of floating-point-to-time 258conversions. 259 260.. 261 262.. date: 2023-02-10-16-02-29 263.. gh-issue: 101517 264.. nonce: r7S2u8 265.. section: Library 266 267Fixed bug where :mod:`bdb` looks up the source line with :mod:`linecache` 268with a ``lineno=None``, which causes it to fail with an unhandled exception. 269 270.. 271 272.. date: 2023-02-09-19-40-41 273.. gh-issue: 101673 274.. nonce: mX-Ppq 275.. section: Library 276 277Fix a :mod:`pdb` bug where ``ll`` clears the changes to local variables. 278 279.. 280 281.. date: 2022-09-19-08-12-58 282.. gh-issue: 96931 283.. nonce: x0WQhh 284.. section: Library 285 286Fix incorrect results from :meth:`ssl.SSLSocket.shared_ciphers` 287 288.. 289 290.. date: 2022-09-05-12-17-34 291.. gh-issue: 88233 292.. nonce: gff9qJ 293.. section: Library 294 295Correctly preserve "extra" fields in ``zipfile`` regardless of their 296ordering relative to a zip64 "extra." 297 298.. 299 300.. date: 2022-08-27-10-35-50 301.. gh-issue: 96127 302.. nonce: 8RdLre 303.. section: Library 304 305``inspect.signature`` was raising ``TypeError`` on call with mock objects. 306Now it correctly returns ``(*args, **kwargs)`` as infered signature. 307 308.. 309 310.. date: 2022-07-30-23-01-43 311.. gh-issue: 95495 312.. nonce: RA-q1d 313.. section: Library 314 315When built against OpenSSL 3.0, the :mod:`ssl` module had a bug where it 316reported unauthenticated EOFs (i.e. without close_notify) as a clean 317TLS-level EOF. It now raises :exc:`~ssl.SSLEOFError`, matching the behavior 318in previous versions of OpenSSL. The :attr:`~ssl.SSLContext.options` 319attribute on :class:`~ssl.SSLContext` also no longer includes 320:data:`~ssl.OP_IGNORE_UNEXPECTED_EOF` by default. This option may be set to 321specify the previous OpenSSL 3.0 behavior. 322 323.. 324 325.. date: 2022-06-30-21-28-41 326.. gh-issue: 94440 327.. nonce: LtgX0d 328.. section: Library 329 330Fix a :mod:`concurrent.futures.process` bug where ``ProcessPoolExecutor`` 331shutdown could hang after a future has been quickly submitted and canceled. 332 333.. 334 335.. date: 2023-03-29-14-51-39 336.. gh-issue: 103112 337.. nonce: XgGSEO 338.. section: Documentation 339 340Add docstring to :meth:`http.client.HTTPResponse.read` to fix ``pydoc`` 341output. 342 343.. 344 345.. date: 2023-02-19-10-33-01 346.. gh-issue: 85417 347.. nonce: kYO8u3 348.. section: Documentation 349 350Update :mod:`cmath` documentation to clarify behaviour on branch cuts. 351 352.. 353 354.. date: 2023-02-07-21-43-24 355.. gh-issue: 97725 356.. nonce: cuY7Cd 357.. section: Documentation 358 359Fix :meth:`asyncio.Task.print_stack` description for ``file=None``. Patch by 360Oleg Iarygin. 361 362.. 363 364.. date: 2023-03-23-23-25-18 365.. gh-issue: 102980 366.. nonce: Zps4QF 367.. section: Tests 368 369Improve test coverage on :mod:`pdb`. 370 371.. 372 373.. date: 2023-03-08-13-54-20 374.. gh-issue: 102537 375.. nonce: Vfplpb 376.. section: Tests 377 378Adjust the error handling strategy in 379``test_zoneinfo.TzPathTest.python_tzpath_context``. Patch by Paul Ganssle. 380 381.. 382 383.. date: 2023-02-11-20-28-08 384.. gh-issue: 89792 385.. nonce: S-Y5BZ 386.. section: Tests 387 388``test_tools`` now copies up to 10x less source data to a temporary 389directory during the ``freeze`` test by ignoring git metadata and other 390artifacts. It also limits its python build parallelism based on 391os.cpu_count instead of hard coding it as 8 cores. 392 393.. 394 395.. date: 2023-01-27-18-10-40 396.. gh-issue: 101377 397.. nonce: IJGpqh 398.. section: Tests 399 400Improved test_locale_calendar_formatweekday of calendar. 401 402.. 403 404.. date: 2023-03-15-02-03-39 405.. gh-issue: 102711 406.. nonce: zTkjts 407.. section: Build 408 409Fix ``-Wstrict-prototypes`` compiler warnings. 410 411.. 412 413.. date: 2023-02-13-16-32-50 414.. gh-issue: 101849 415.. nonce: 7lm_53 416.. section: Windows 417 418Ensures installer will correctly upgrade existing ``py.exe`` launcher 419installs. 420 421.. 422 423.. date: 2023-02-10-14-26-05 424.. gh-issue: 101763 425.. nonce: RPaj7r 426.. section: Windows 427 428Updates copy of libffi bundled with Windows installs to 3.4.4. 429 430.. 431 432.. date: 2023-02-09-22-09-27 433.. gh-issue: 101759 434.. nonce: zFlqSH 435.. section: Windows 436 437Update Windows installer to SQLite 3.40.1. 438 439.. 440 441.. date: 2023-02-07-18-22-54 442.. gh-issue: 101614 443.. nonce: NjVP0n 444.. section: Windows 445 446Correctly handle extensions built against debug binaries that reference 447``python3_d.dll``. 448 449.. 450 451.. date: 2023-04-04-13-37-28 452.. gh-issue: 103207 453.. nonce: x0vvQp 454.. section: macOS 455 456Add instructions to the macOS installer welcome display on how to workaround 457the macOS 13 Ventura “The installer encountered an error” failure. 458 459.. 460 461.. date: 2023-02-09-22-07-17 462.. gh-issue: 101759 463.. nonce: B0JP2H 464.. section: macOS 465 466Update macOS installer to SQLite 3.40.1. 467