The Wayback Machine - https://web.archive.org/web/20211011221822/https://github.com/python/cpython/pull/28042
Skip to content

/ cpython Public

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[3.7] bpo-44394: Update libexpat copy to 2.4.1 (GH-26945) #28042

Merged
merged 2 commits into from Aug 31, 2021
Merged

[3.7] bpo-44394: Update libexpat copy to 2.4.1 (GH-26945) #28042

merged 2 commits into from Aug 31, 2021

Conversation

@ambv
Copy link
Contributor

@ambv ambv commented Aug 29, 2021 •
edited by bedevere-bot

Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the
fix for the CVE-2013-0340 "Billion Laughs" vulnerability. This copy
is most used on Windows and macOS.

Co-authored-by: Łukasz Langa [email protected].
(cherry picked from commit 3fc5d84)

Co-authored-by: Victor Stinner [email protected]

https://bugs.python.org/issue44394
@vstinner @ambv
[3.7] bpo-44394: Update libexpat copy to 2.4.1 (pythonGH-26945)
181046c 
Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the
fix for the CVE-2013-0340 "Billion Laughs" vulnerability. This copy
is most used on Windows and macOS.

Co-authored-by: Łukasz Langa <[email protected]>.
(cherry picked from commit 3fc5d84)

Co-authored-by: Victor Stinner <[email protected]>
@bedevere-bot bedevere-bot mentioned this pull request Aug 29, 2021
Merged
@ambv
Make expat_config.h import unconditional like in the other branches
ade1fe4
@ned-deily ned-deily merged commit 79101b8 into python:3.7 Aug 31, 2021
10 checks passed
ned-deily added a commit to ned-deily/cpython that referenced this issue Aug 31, 2021
@ambv @ned-deily
[3.6] bpo-44394: Update libexpat copy to 2.4.1 (pythonGH-26945) (pyth…
4013a8d 
…onGH-28042)

Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the
fix for the CVE-2013-0340 "Billion Laughs" vulnerability. This copy
is most used on Windows and macOS.

Co-authored-by: Victor Stinner <[email protected]>

Co-authored-by: Łukasz Langa <[email protected]>.
(cherry picked from commit 3fc5d84)
ned-deily added a commit that referenced this issue Aug 31, 2021
@ned-deily
[3.6] bpo-44394: Update libexpat copy to 2.4.1 (GH-26945) (GH-28042) (G…
910886a 
…H-28080)

Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the
fix for the CVE-2013-0340 "Billion Laughs" vulnerability. This copy
is most used on Windows and macOS.

Co-authored-by: Victor Stinner <[email protected]>

Co-authored-by: Łukasz Langa <[email protected]>.
(cherry picked from commit 3fc5d84)
@ambv ambv deleted the backport-3fc5d84-3.7 branch Sep 17, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
CLA signed
Projects
None yet
Milestone
No milestone
5 participants
@ambv @ned-deily @the-knights-who-say-ni @bedevere-bot @vstinner