]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.6] bpo-44394: Update libexpat copy to 2.4.1 (GH-26945) (GH-28042) (GH-28080)
authorNed Deily <nad@python.org>
Tue, 31 Aug 2021 06:35:31 +0000 (02:35 -0400)
committerGitHub <noreply@github.com>
Tue, 31 Aug 2021 06:35:31 +0000 (02:35 -0400)
commit910886a6448e4bf1edf49eeace4aa240b6403772
treef3907be2308011c3a9964bfc0c13ae8a5f4fe4eb
parent8934bb0c3179e4c020cd6f08dea64bccbf56ffa2
[3.6] bpo-44394: Update libexpat copy to 2.4.1 (GH-26945) (GH-28042) (GH-28080)

Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the
fix for the CVE-2013-0340 "Billion Laughs" vulnerability. This copy
is most used on Windows and macOS.

Co-authored-by: Victor Stinner <vstinner@python.org>
Co-authored-by: Ɓukasz Langa <lukasz@langa.pl>.
(cherry picked from commit 3fc5d84046ddbd66abac5b598956ea34605a4e5d)
23 files changed:
Doc/library/xml.rst
Doc/whatsnew/3.6.rst
Misc/NEWS.d/next/Security/2021-06-29-02-45-53.bpo-44394.A220N1.rst [new file with mode: 0644]
Modules/expat/COPYING
Modules/expat/ascii.h
Modules/expat/asciitab.h
Modules/expat/expat.h
Modules/expat/expat_external.h
Modules/expat/iasciitab.h
Modules/expat/internal.h
Modules/expat/latin1tab.h
Modules/expat/nametab.h
Modules/expat/siphash.h
Modules/expat/utf8tab.h
Modules/expat/winconfig.h
Modules/expat/xmlparse.c
Modules/expat/xmlrole.c
Modules/expat/xmlrole.h
Modules/expat/xmltok.c
Modules/expat/xmltok.h
Modules/expat/xmltok_impl.c
Modules/expat/xmltok_impl.h
Modules/expat/xmltok_ns.c