[Python-Dev] Re: PEP 622 and variadic positional-only args

2020-08-12 Thread Jim J. Jewett
Oscar Benjamin's study of sympy is part of what prompted this, and does provide a concrete example of why constructors should be echoed. I think in general, the matching has fallen into two categories: (1) Simple literal-like matching, that mostly works OK. There is still some concern over wh

[Python-Dev] Re: [python-committers] Upcoming 3.7.9 and 3.6.12 Security Releases

2020-08-12 Thread Victor Stinner
Le mer. 12 août 2020 à 14:09, Vinay Sharma a écrit : > This is being tracked at https://bugs.python.org/issue39584. > Could please comment whether this should be fixed by python, or we should > wait for a macos fix. This issue looks like a regular bug. I suggest not holding a security release fo

[Python-Dev] Re: [python-committers] Upcoming 3.7.9 and 3.6.12 Security Releases

2020-08-12 Thread Vinay Sharma via Python-Dev
Hi, I am sorry to intrude in this thread. But I think there is a vulnerability in macos caused by ftruncate. For instance running the following code abruptly crashed macos (mojave and catalina). ``` from multiprocessing.shared_memory import SharedMemory shm = SharedMemory(name='test-crash', crea

[Python-Dev] Re: [python-committers] Upcoming 3.7.9 and 3.6.12 Security Releases

2020-08-12 Thread Victor Stinner
Le mer. 12 août 2020 à 12:03, Ned Deily a écrit : > Core developers: if you know of any additional security issues that should be > addressed in these releases, please mark the relevant bpo issues as "release > blocker" and, if possible, submit PRs for review prior to the end of > 2020-08-13 AO

[Python-Dev] Re: async generator bug fixed in 3.8+ and backported to 3.6 but not to 3.7

2020-08-12 Thread Ned Deily
On Aug 11, 2020, at 16:59, Guido van Rossum wrote: > If the release manager agrees, this should be a simple call to cherry-picker. > > On Tue, Aug 11, 2020 at 13:18 Matthew Einhorn wrote: >> The fix for https://bugs.python.org/issue33786 ("@asynccontextmanager >> doesn't work well with async ge

[Python-Dev] Upcoming 3.7.9 and 3.6.12 Security Releases

2020-08-12 Thread Ned Deily
We are planning to produce security-fix rollup releases for Python 3.7.x and 3.6.x on 2020-08-14. The most recent releases for these versions were on 2020-06-27 and 3.7.8 was the final bugfix release for 3.7. Shortly after those releases, several security issues affecting them were fixed. Beca