Security

• gh-101727: Updated the OpenSSL version used in Windows and macOS binary release builds to 1.1.1t to address CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 per the OpenSSL 2023-02-07 security advisory.
• gh-101283: subprocess.Popen now uses a safer approach to find cmd.exe when launching with shell=True. Patch by Eryk Sun, based on a patch by Oleg Iarygin. Core and Builtins
• gh-102416: Do not memoize incorrectly automatically generated loop rules in the parser. Patch by Pablo Galindo.
• gh-102356: Fix a bug that caused a crash when deallocating deeply nested filter objects. Patch by Marta Gómez Macías.
• gh-102397: Fix segfault from race condition in signal handling during garbage collection. Patch by Kumar Aditya.
• gh-102126: Fix deadlock at shutdown when clearing thread states if any finalizer tries to acquire the runtime head lock. Patch by Kumar Aditya.
• gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal module. Patch by Max Bachmann.
• gh-101967: Fix possible segfault in positional_only_passed_as_keyword function, when new list created.
• gh-101765: Fix SystemError / segmentation fault in iter reduce when internal access of builtins.dict keys mutates the iter object. Library
• gh-102947: Improve traceback when dataclasses.fields() is called on a non-dataclass. Patch by Alex Waygood
• gh-101979: Fix a bug where parentheses in the metavar argument to argparse.ArgumentParser.add_argument() were dropped. Patch by Yeojin Kim.
• gh-102179: Fix os.dup2() error message for negative fds.
• gh-101961: For the binary mode, fileinput.hookcompressed() doesn’t set the encoding value even if the value is None. Patch by Gihwan Kim.
• gh-101936: The default value of fp becomes io.BytesIO if HTTPError is initialized without a designated fp parameter. Patch by Long Vo.
• gh-101566: In zipfile, apply fix for extractall on the underlying zipfile after being wrapped in Path.
• gh-101997: Upgrade pip wheel bundled with ensurepip (pip 23.0.1)
• gh-101892: Callable iterators no longer raise SystemError when the callable object exhausts the iterator but forgets to either return a sentinel value or raise StopIteration.
• gh-97786: Fix potential undefined behaviour in corner cases of floating-point-to-time conversions.
• gh-101517: Fixed bug where bdb looks up the source line with linecache with a lineno=None, which causes it to fail with an unhandled exception.
• gh-101673: Fix a pdb bug where ll clears the changes to local variables.
• gh-96931: Fix incorrect results from ssl.SSLSocket.shared_ciphers()
• gh-88233: Correctly preserve “extra” fields in zipfile regardless of their ordering relative to a zip64 “extra.”
• gh-95495: When built against OpenSSL 3.0, the ssl module had a bug where it reported unauthenticated EOFs (i.e. without close_notify) as a clean TLS-level EOF. It now raises SSLEOFError, matching the behavior in previous versions of OpenSSL. The options attribute on SSLContext also no longer includes OP_IGNORE_UNEXPECTED_EOF by default. This option may be set to specify the previous OpenSSL 3.0 behavior.
• gh-94440: Fix a concurrent.futures.process bug where ProcessPoolExecutor shutdown could hang after a future has been quickly submitted and canceled. Documentation
• gh-103112: Add docstring to http.client.HTTPResponse.read() to fix pydoc output.
• gh-85417: Update cmath documentation to clarify behaviour on branch cuts.
• gh-97725: Fix asyncio.Task.print_stack() description for file=None. Patch by Oleg Iarygin. Tests
• gh-102980: Improve test coverage on pdb.
• gh-102537: Adjust the error handling strategy in test_zoneinfo.TzPathTest.python_tzpath_context. Patch by Paul Ganssle.
• gh-101377: Improved test_locale_calendar_formatweekday of calendar. Build
• gh-102711: Fix -Wstrict-prototypes compiler warnings. Windows
• gh-101759: Update Windows installer to SQLite 3.40.1.
• gh-101614: Correctly handle extensions built against debug binaries that reference python3_d.dll. macOS
• gh-103207: Add instructions to the macOS installer welcome display on how to workaround the macOS 13 Ventura “The installer encountered an error” failure.
• gh-101759: Update macOS installer to SQLite 3.40.1.
• gh-87235: On macOS python3 /dev/fd/9 9</path/to/script.py failed for any script longer than a couple of bytes.