1.. date: 2023-02-08-22-03-04
2.. gh-issue: 101727
3.. nonce: 9P5eZz
4.. release date: 2023-04-04
5.. section: Security
6
7Updated the OpenSSL version used in Windows and macOS binary release builds
8to 1.1.1t to address CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 per
9`the OpenSSL 2023-02-07 security advisory
10<https://www.openssl.org/news/secadv/20230207.txt>`_.
11
12..
13
14.. date: 2023-01-24-16-12-00
15.. gh-issue: 101283
16.. nonce: 9tqu39
17.. section: Security
18
19:class:`subprocess.Popen` now uses a safer approach to find ``cmd.exe`` when
20launching with ``shell=True``. Patch by Eryk Sun, based on a patch by Oleg
21Iarygin.
22
23..
24
25.. date: 2023-03-18-02-36-39
26.. gh-issue: 101975
27.. nonce: HwMR1d
28.. section: Core and Builtins
29
30Fixed ``stacktop`` value on tracing entries to avoid corruption on garbage
31collection.
32
33..
34
35.. date: 2023-03-16-17-24-44
36.. gh-issue: 102701
37.. nonce: iNGVaS
38.. section: Core and Builtins
39
40Fix overflow when creating very large dict.
41
42..
43
44.. date: 2023-03-06-13-05-33
45.. gh-issue: 102416
46.. nonce: dz6K5f
47.. section: Core and Builtins
48
49Do not memoize incorrectly automatically generated loop rules in the parser.
50Patch by Pablo Galindo.
51
52..
53
54.. date: 2023-03-04-20-56-12
55.. gh-issue: 102356
56.. nonce: 07KvUd
57.. section: Core and Builtins
58
59Fix a bug that caused a crash when deallocating deeply nested filter
60objects. Patch by Marta Gómez Macías.
61
62..
63
64.. date: 2023-03-04-06-48-34
65.. gh-issue: 102397
66.. nonce: ACJaOf
67.. section: Core and Builtins
68
69Fix segfault from race condition in signal handling during garbage
70collection. Patch by Kumar Aditya.
71
72..
73
74.. date: 2023-03-02-13-49-21
75.. gh-issue: 102281
76.. nonce: QCuu2N
77.. section: Core and Builtins
78
79Fix potential nullptr dereference and use of uninitialized memory in
80fileutils. Patch by Max Bachmann.
81
82..
83
84.. date: 2023-02-24-17-59-39
85.. gh-issue: 102126
86.. nonce: HTT8Vc
87.. section: Core and Builtins
88
89Fix deadlock at shutdown when clearing thread states if any finalizer tries
90to acquire the runtime head lock. Patch by Kumar Aditya.
91
92..
93
94.. date: 2023-02-21-23-42-39
95.. gh-issue: 102027
96.. nonce: fQARG0
97.. section: Core and Builtins
98
99Fix SSE2 and SSE3 detection in ``_blake2`` internal module. Patch by Max
100Bachmann.
101
102..
103
104.. date: 2023-02-16-23-19-01
105.. gh-issue: 101967
106.. nonce: Kqr1dz
107.. section: Core and Builtins
108
109Fix possible segfault in ``positional_only_passed_as_keyword`` function,
110when new list created.
111
112..
113
114.. date: 2023-02-10-07-21-47
115.. gh-issue: 101765
116.. nonce: MO5LlC
117.. section: Core and Builtins
118
119Fix SystemError / segmentation fault in iter ``__reduce__`` when internal
120access of ``builtins.__dict__`` keys mutates the iter object.
121
122..
123
124.. date: 2023-02-08-17-13-31
125.. gh-issue: 101696
126.. nonce: seJhTt
127.. section: Core and Builtins
128
129Invalidate type version tag in ``_PyStaticType_Dealloc`` for static types,
130avoiding bug where a false cache hit could crash the interpreter. Patch by
131Kumar Aditya.
132
133..
134
135.. date: 2023-03-27-19-21-51
136.. gh-issue: 102549
137.. nonce: NQ6Nlv
138.. section: Library
139
140Don't ignore exceptions in member type creation.
141
142..
143
144.. date: 2023-03-23-13-34-33
145.. gh-issue: 102947
146.. nonce: cTwcpU
147.. section: Library
148
149Improve traceback when :func:`dataclasses.fields` is called on a
150non-dataclass. Patch by Alex Waygood
151
152..
153
154.. date: 2023-03-22-16-15-18
155.. gh-issue: 102780
156.. nonce: NEcljy
157.. section: Library
158
159The :class:`asyncio.Timeout` context manager now works reliably even when
160performing cleanup due to task cancellation.  Previously it could raise a
161:exc:`~asyncio.CancelledError` instead of an :exc:`~asyncio.TimeoutError` in
162such cases.
163
164..
165
166.. date: 2023-03-18-14-59-21
167.. gh-issue: 88965
168.. nonce: kA70Km
169.. section: Library
170
171typing: Fix a bug relating to substitution in custom classes generic over a
172:class:`~typing.ParamSpec`. Previously, if the ``ParamSpec`` was substituted
173with a parameters list that itself contained a :class:`~typing.TypeVar`, the
174``TypeVar`` in the parameters list could not be subsequently substituted.
175This is now fixed.
176
177Patch by Nikita Sobolev.
178
179..
180
181.. date: 2023-02-28-09-52-25
182.. gh-issue: 101979
183.. nonce: or3hXV
184.. section: Library
185
186Fix a bug where parentheses in the ``metavar`` argument to
187:meth:`argparse.ArgumentParser.add_argument` were dropped. Patch by Yeojin
188Kim.
189
190..
191
192.. date: 2023-02-23-15-06-01
193.. gh-issue: 102179
194.. nonce: P6KQ4c
195.. section: Library
196
197Fix :func:`os.dup2` error message for negative fds.
198
199..
200
201.. date: 2023-02-21-10-05-33
202.. gh-issue: 101961
203.. nonce: 7e56jh
204.. section: Library
205
206For the binary mode, :func:`fileinput.hookcompressed` doesn't set the
207``encoding`` value even if the value is ``None``. Patch by Gihwan Kim.
208
209..
210
211.. date: 2023-02-21-07-15-41
212.. gh-issue: 101936
213.. nonce: QVOxHH
214.. section: Library
215
216The default value of ``fp`` becomes :class:`io.BytesIO` if
217:exc:`~urllib.error.HTTPError` is initialized without a designated ``fp``
218parameter. Patch by Long Vo.
219
220..
221
222.. date: 2023-02-20-16-47-56
223.. gh-issue: 102069
224.. nonce: FS7f1j
225.. section: Library
226
227Fix ``__weakref__`` descriptor generation for custom dataclasses.
228
229..
230
231.. date: 2023-02-17-20-24-15
232.. gh-issue: 101566
233.. nonce: FjgWBt
234.. section: Library
235
236In zipfile, apply fix for extractall on the underlying zipfile after being
237wrapped in ``Path``.
238
239..
240
241.. date: 2023-02-14-09-08-48
242.. gh-issue: 101892
243.. nonce: FMos8l
244.. section: Library
245
246Callable iterators no longer raise :class:`SystemError` when the callable
247object exhausts the iterator but forgets to either return a sentinel value
248or raise :class:`StopIteration`.
249
250..
251
252.. date: 2023-02-11-13-23-29
253.. gh-issue: 97786
254.. nonce: QjvQ1B
255.. section: Library
256
257Fix potential undefined behaviour in corner cases of floating-point-to-time
258conversions.
259
260..
261
262.. date: 2023-02-10-16-02-29
263.. gh-issue: 101517
264.. nonce: r7S2u8
265.. section: Library
266
267Fixed bug where :mod:`bdb` looks up the source line with :mod:`linecache`
268with a ``lineno=None``, which causes it to fail with an unhandled exception.
269
270..
271
272.. date: 2023-02-09-19-40-41
273.. gh-issue: 101673
274.. nonce: mX-Ppq
275.. section: Library
276
277Fix a :mod:`pdb` bug where ``ll`` clears the changes to local variables.
278
279..
280
281.. date: 2022-09-19-08-12-58
282.. gh-issue: 96931
283.. nonce: x0WQhh
284.. section: Library
285
286Fix incorrect results from :meth:`ssl.SSLSocket.shared_ciphers`
287
288..
289
290.. date: 2022-09-05-12-17-34
291.. gh-issue: 88233
292.. nonce: gff9qJ
293.. section: Library
294
295Correctly preserve "extra" fields in ``zipfile`` regardless of their
296ordering relative to a zip64 "extra."
297
298..
299
300.. date: 2022-08-27-10-35-50
301.. gh-issue: 96127
302.. nonce: 8RdLre
303.. section: Library
304
305``inspect.signature`` was raising ``TypeError`` on call with mock objects.
306Now it correctly returns ``(*args, **kwargs)`` as infered signature.
307
308..
309
310.. date: 2022-07-30-23-01-43
311.. gh-issue: 95495
312.. nonce: RA-q1d
313.. section: Library
314
315When built against OpenSSL 3.0, the :mod:`ssl` module had a bug where it
316reported unauthenticated EOFs (i.e. without close_notify) as a clean
317TLS-level EOF. It now raises :exc:`~ssl.SSLEOFError`, matching the behavior
318in previous versions of OpenSSL. The :attr:`~ssl.SSLContext.options`
319attribute on :class:`~ssl.SSLContext` also no longer includes
320:data:`~ssl.OP_IGNORE_UNEXPECTED_EOF` by default. This option may be set to
321specify the previous OpenSSL 3.0 behavior.
322
323..
324
325.. date: 2022-06-30-21-28-41
326.. gh-issue: 94440
327.. nonce: LtgX0d
328.. section: Library
329
330Fix a :mod:`concurrent.futures.process` bug where ``ProcessPoolExecutor``
331shutdown could hang after a future has been quickly submitted and canceled.
332
333..
334
335.. date: 2023-03-29-14-51-39
336.. gh-issue: 103112
337.. nonce: XgGSEO
338.. section: Documentation
339
340Add docstring to :meth:`http.client.HTTPResponse.read` to fix ``pydoc``
341output.
342
343..
344
345.. date: 2023-02-19-10-33-01
346.. gh-issue: 85417
347.. nonce: kYO8u3
348.. section: Documentation
349
350Update :mod:`cmath` documentation to clarify behaviour on branch cuts.
351
352..
353
354.. date: 2023-02-07-21-43-24
355.. gh-issue: 97725
356.. nonce: cuY7Cd
357.. section: Documentation
358
359Fix :meth:`asyncio.Task.print_stack` description for ``file=None``. Patch by
360Oleg Iarygin.
361
362..
363
364.. date: 2023-03-23-23-25-18
365.. gh-issue: 102980
366.. nonce: Zps4QF
367.. section: Tests
368
369Improve test coverage on :mod:`pdb`.
370
371..
372
373.. date: 2023-03-08-13-54-20
374.. gh-issue: 102537
375.. nonce: Vfplpb
376.. section: Tests
377
378Adjust the error handling strategy in
379``test_zoneinfo.TzPathTest.python_tzpath_context``. Patch by Paul Ganssle.
380
381..
382
383.. date: 2023-02-11-20-28-08
384.. gh-issue: 89792
385.. nonce: S-Y5BZ
386.. section: Tests
387
388``test_tools`` now copies up to 10x less source data to a temporary
389directory during the ``freeze`` test by ignoring git metadata and other
390artifacts.  It also limits its python build parallelism based on
391os.cpu_count instead of hard coding it as 8 cores.
392
393..
394
395.. date: 2023-01-27-18-10-40
396.. gh-issue: 101377
397.. nonce: IJGpqh
398.. section: Tests
399
400Improved test_locale_calendar_formatweekday of calendar.
401
402..
403
404.. date: 2023-03-15-02-03-39
405.. gh-issue: 102711
406.. nonce: zTkjts
407.. section: Build
408
409Fix ``-Wstrict-prototypes`` compiler warnings.
410
411..
412
413.. date: 2023-02-13-16-32-50
414.. gh-issue: 101849
415.. nonce: 7lm_53
416.. section: Windows
417
418Ensures installer will correctly upgrade existing ``py.exe`` launcher
419installs.
420
421..
422
423.. date: 2023-02-10-14-26-05
424.. gh-issue: 101763
425.. nonce: RPaj7r
426.. section: Windows
427
428Updates copy of libffi bundled with Windows installs to 3.4.4.
429
430..
431
432.. date: 2023-02-09-22-09-27
433.. gh-issue: 101759
434.. nonce: zFlqSH
435.. section: Windows
436
437Update Windows installer to SQLite 3.40.1.
438
439..
440
441.. date: 2023-02-07-18-22-54
442.. gh-issue: 101614
443.. nonce: NjVP0n
444.. section: Windows
445
446Correctly handle extensions built against debug binaries that reference
447``python3_d.dll``.
448
449..
450
451.. date: 2023-04-04-13-37-28
452.. gh-issue: 103207
453.. nonce: x0vvQp
454.. section: macOS
455
456Add instructions to the macOS installer welcome display on how to workaround
457the macOS 13 Ventura “The installer encountered an error” failure.
458
459..
460
461.. date: 2023-02-09-22-07-17
462.. gh-issue: 101759
463.. nonce: B0JP2H
464.. section: macOS
465
466Update macOS installer to SQLite 3.40.1.
467