python资料包安装资源包

+++++++++++ Python News +++++++++++ What's New in Python 3.11.0 final? ================================== *Release date: 2022-10-24* Security -------- - gh-issue-97616: Fix multiplying a list by an integer (``list *= int``): detect the integer overflow when the new allocated length is close to the maximum size. Issue reported by Jordan Limor. Patch by Victor Stinner. - gh-issue-97514: On Linux the :mod:`multiprocessing` module returns to using filesystem backed unix domain sockets for communication with the *forkserver* process instead of the Linux abstract socket namespace. Only code that chooses to use the :ref:`"forkserver" start method <multiprocessing-start-methods>` is affected. Abstract sockets have no permissions and could allow any user on the system in the same `network namespace <https://man7.org/linux/man-pages/man7/network_namespaces.7.html>`_ (often the whole system) to inject code into the multiprocessing *forkserver* process. This was a potential privilege escalation. Filesystem based socket permissions restrict this to the *forkserver* process user as was the default in Python 3.8 and earlier. This prevents Linux `CVE-2022-42919 <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42919>`_. Core and Builtins ----------------- - gh-issue-97002: Fix an issue where several frame objects could be backed by the same interpreter frame, possibly leading to corrupted memory and hard crashes of the interpreter. - gh-issue-97752: Fix possible data corruption or crashes when accessing the ``f_back`` member of newly-created generator or coroutine frames. - gh-issue-96975: Fix a crash occurring when :c:func:`PyEval_GetFrame` is called while the topmost Python frame is in a partially-initialized state. - gh-issue-96848: Fix command line parsing: reject :option:`-X int_max_str_digits <-X>` option with no value (invalid) when the :envvar:`PYTHONINTMAXSTRDIGITS` environment variable is set to a valid limit. Patch by Victor Stinner. - gh-issue-96821: Fix undefined behaviour in ``_testcapimodule.c``. - gh-issue-95778: When :exc:`ValueError` is raised if an integer is larger than the limit, mention the :func:`sys.set_int_max_str_digits` function in the error message. Patch by Victor Stinner. - gh-issue-96587: Correctly raise ``SyntaxError`` on exception groups (:pep:`654`) on python versions prior to 3.11 - bpo-42316: Document some places where an assignment expression needs parentheses. Library ------- - gh-issue-98331: Update the bundled copies of pip and setuptools to versions 22.3 and 65.5.0 respectively. - gh-issue-90985: Earlier in 3.11 we deprecated ``asyncio.Task.cancel("message")``. We realized we were too harsh, and have undeprecated it. - gh-issue-97545: Make Semaphore run faster. - gh-issue-96865: fix Flag to use boundary CONFORM This restores previous Flag behavior of allowing flags with non-sequential values to be combined; e.g. class Skip(Flag): TWO = 2 EIGHT = 8 Skip.TWO | Skip.EIGHT -> <Skip.TWO|EIGHT: 10> - gh-issue-90155: Fix broken :class:`asyncio.Semaphore` when acquire is cancelled. Documentation ------------- - gh-issue-97741: Fix ``!`` in c domain ref target syntax via a ``conf.py`` patch, so it works as intended to disable ref target resolution. - gh-issue-93031: Update tutorial introduction output to use 3.10+ SyntaxError invalid range. Tests ----- - gh-issue-95027: On Windows, when the Python test suite is run with the ``-jN`` option, the ANSI code page is now used as the encoding for the stdout temporary file, rather than using UTF-8 which can lead to decoding errors. Patch by Victor Stinner. Build ----- - gh-issue-96729: Ensure that Windows releases built with ``Tools\msi\buildrelease.bat`` are upgradable to and from official Python releases. Windows ------- - gh-issue-98360: Fixes :mod:`multiprocessing` spawning child processes on Windows from a virtual environment to ensure that child processes that also use :mod:`multiprocessing` to spawn more children will recognize that they are in a virtual environment. - gh-issue-98414: Fix :file:`py.exe` launcher handling of ``-V:<company>/`` option when default preferences have been set in environment variables or configuration files. - gh-issue-90989: Clarify some text in the Windows installer. macOS ----- - gh-issue-97897: The macOS 13 SDK includes support for the ``mkfifoat`` and ``mknodat`` system calls. Using the ``dir_fd`` option with either :func:`os.mkfifo` or :func:`os.mknod` could result in a segfault if cpython is built with the macOS 13 SDK but run on an earlier version of macOS. Prevent this by adding runtime support for detection of these system calls ("weaklinking") as is done for other newer syscalls on macOS. What's New in Python 3.11.0 release candidate 2? ================================================ *Release date: 2022-09-11* Security -------- - gh-issue-95778: Converting between :class:`int` and :class:`str` in bases other than 2 (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises a :exc:`ValueError` if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic complexity. This is a mitigation for `CVE-2020-10735 <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10735>`_. This new limit can be configured or disabled by environment variable, command line flag, or :mod:`sys` APIs. See the :ref:`integer string conversion length limitation <int_max_str_digits>` documentation. The default limit is 4300 digits in string form. Patch by Gregory P. Smith [Google] and Christian Heimes [Red Hat] with feedback from Victor Stinner, Thomas Wouters, Steve Dower, Ned Deily, and Mark Dickinson. Core and Builtins ----------------- - gh-issue-96678: Fix case of undefined behavior in ceval.c - gh-issue-96641: Do not expose ``KeyWrapper`` in :mod:`_functools`. - gh-issue-96636: Ensure that tracing, ``sys.setrace()``, is turned on immediately. In pre-release versions of 3.11, some tracing events might have been lost when turning on tracing in a ``__del__`` method or interrupt. - gh-issue-96572: Fix use after free in trace refs build mode. Patch by Kumar Aditya. - gh-issue-96611: When loading a file with invalid UTF-8 inside a multi-line string, a correct SyntaxError is emitted. - gh-issue-96612: Make sure that incomplete frames do not show up in tracemalloc traces. - gh-issue-96569: Remove two cases of undefined behavior, by adding NULL checks. - gh-issue-96582: Fix possible ``NULL`` pointer dereference in ``_PyThread_CurrentFrames``. Patch by Kumar Aditya. - gh-issue-96352: Fix :exc:`AttributeError` missing ``name`` and ``obj`` attributes in :meth:`object.__getattribute__`. Patch by Philip Georgi. - gh-issue-96268: Loading a file with invalid UTF-8 will now report the broken character at the correct location. - gh-issue-96187: Fixed a bug that caused ``_PyCode_GetExtra`` to return garbage for negative indexes. Patch by Pablo Galindo - gh-issue-96071: Fix a deadlock in :c:func:`PyGILState_Ensure` when allocating new thread state. Patch by Kumar Aditya. - gh-issue-96046: :c:func:`PyType_Ready` now initializes ``ht_cached_keys`` and performs additional checks to ensure that type objects are properly configured. This avoids crashes in 3rd party packages that don't use regular API to create new types. - gh-issue-95818: Skip over incomplete frames in :c:func:`PyThreadState_GetFrame`. - gh-issue-95876: Fix format string in ``_PyPegen_raise_error_known_location`` that can lead to memory corruption on some 64bit systems. The function was