]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-44394: Update libexpat copy to 2.4.1 (GH-26945)
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Sun, 29 Aug 2021 14:32:50 +0000 (07:32 -0700)
committerGitHub <noreply@github.com>
Sun, 29 Aug 2021 14:32:50 +0000 (07:32 -0700)
commit270678564c16452614a8acd93763bdf64fb4d286
treeb26a9e2fbd0328a269ffbdc973698d0f56896b9e
parent532ebba6c8697d214a0d94514ad0b2464a59cb7c
bpo-44394: Update libexpat copy to 2.4.1 (GH-26945)

Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the
fix for the CVE-2013-0340 "Billion Laughs" vulnerability. This copy
is most used on Windows and macOS.

Co-authored-by: Ɓukasz Langa <lukasz@langa.pl>
(cherry picked from commit 3fc5d84046ddbd66abac5b598956ea34605a4e5d)

Co-authored-by: Victor Stinner <vstinner@python.org>
22 files changed:
Doc/library/xml.rst
Misc/NEWS.d/next/Security/2021-06-29-02-45-53.bpo-44394.A220N1.rst [new file with mode: 0644]
Modules/expat/COPYING
Modules/expat/ascii.h
Modules/expat/asciitab.h
Modules/expat/expat.h
Modules/expat/expat_external.h
Modules/expat/iasciitab.h
Modules/expat/internal.h
Modules/expat/latin1tab.h
Modules/expat/nametab.h
Modules/expat/siphash.h
Modules/expat/utf8tab.h
Modules/expat/winconfig.h
Modules/expat/xmlparse.c
Modules/expat/xmlrole.c
Modules/expat/xmlrole.h
Modules/expat/xmltok.c
Modules/expat/xmltok.h
Modules/expat/xmltok_impl.c
Modules/expat/xmltok_impl.h
Modules/expat/xmltok_ns.c