]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-44394: Update libexpat copy to 2.4.1 (GH-26945) (GH-28032)
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Sun, 29 Aug 2021 14:36:36 +0000 (07:36 -0700)
committerGitHub <noreply@github.com>
Sun, 29 Aug 2021 14:36:36 +0000 (16:36 +0200)
commit007221a43e566db08c0c5c00756d80dfd9dccafe
tree49d81dc0e3697ceffee84c0dd4aee347d990d52b
parent45409518c1cec5ee91d49f69a2f8eb4196d242f0
bpo-44394: Update libexpat copy to 2.4.1 (GH-26945) (GH-28032)

Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the
fix for the CVE-2013-0340 "Billion Laughs" vulnerability. This copy
is most used on Windows and macOS.

Co-authored-by: Ɓukasz Langa <lukasz@langa.pl>
(cherry picked from commit 3fc5d84046ddbd66abac5b598956ea34605a4e5d)

Co-authored-by: Victor Stinner <vstinner@python.org>
22 files changed:
Doc/library/xml.rst
Misc/NEWS.d/next/Security/2021-06-29-02-45-53.bpo-44394.A220N1.rst [new file with mode: 0644]
Modules/expat/COPYING
Modules/expat/ascii.h
Modules/expat/asciitab.h
Modules/expat/expat.h
Modules/expat/expat_external.h
Modules/expat/iasciitab.h
Modules/expat/internal.h
Modules/expat/latin1tab.h
Modules/expat/nametab.h
Modules/expat/siphash.h
Modules/expat/utf8tab.h
Modules/expat/winconfig.h
Modules/expat/xmlparse.c
Modules/expat/xmlrole.c
Modules/expat/xmlrole.h
Modules/expat/xmltok.c
Modules/expat/xmltok.h
Modules/expat/xmltok_impl.c
Modules/expat/xmltok_impl.h
Modules/expat/xmltok_ns.c