Python 3.12 3.12.10

What's new in 3.12.10

macOS
- gh-124111: Update macOS installer to use Tcl/Tk 8.6.16.
- gh-131423: Update macOS installer to use OpenSSL 3.0.16. Patch by Bénédikt Tran.
- gh-131025: Update macOS installer to ship with SQLite 3.49.1.
- gh-91132: Update macOS installer to use ncurses 6.5.
Windows
- gh-131423: Update bundled version of OpenSSL to 3.0.16. The new build also disables uplink support, which may be relevant to embedders but has no impact on normal use.
- gh-131025: Update Windows installer to ship with SQLite 3.49.1.
- gh-131020: pylauncher correctly detects a BOM when searching for the shebang. Fix by Chris Eibl.
Tools/Demos
- gh-131852: msgfmt no longer adds the POT-Creation-Date to generated .mo files for consistency with GNU msgfmt.
- gh-85012: Correctly reset msgctxt when compiling messages in msgfmt.
Tests
- gh-131050: test_ssl.test_dh_params is skipped if the underlying TLS library does not support finite-field ephemeral Diffie-Hellman.
- gh-119727: Add --single-process command line option to Python test runner (regrtest). Patch by Victor Stinner.
Security
- gh-131809: Update bundled libexpat to 2.7.1
- gh-131261: Upgrade to libexpat 2.7.0
- gh-127371: Avoid unbounded buffering for tempfile.SpooledTemporaryFile.writelines(). Previously, disk spillover was only checked after the lines iterator had been exhausted. This is now done after each line is written.
- gh-121284: Fix bug in the folding of rfc2047 encoded-words when flattening an email message using a modern email policy. Previously when an encoded-word was too long for a line, it would be decoded, split across lines, and re-encoded. But commas and other special characters in the original text could be left unencoded and unquoted. This could theoretically be used to spoof header lines using a carefully constructed encoded-word if the resulting rendered email was transmitted or re-parsed.
Library
- gh-116608: undeprecate functional API for importlib.resources
- gh-132075: Fix possible use of socket address structures with uninitialized members. Now all structure members are initialized with zeroes by default.
- gh-132002: Fix crash when deallocating contextvars.ContextVar with weird unahashable string names.
- gh-131668: socket: Fix code parsing AF_BLUETOOTH socket addresses.
- gh-131492: Fix a resource leak when constructing a gzip.GzipFile with a filename fails, for example when passing an invalid compresslevel. …

Full release notes »