Repository navigation
Please upgrade bundled Expat to 2.6.0 (e.g. for the fix to CVE-2023-52425) #115399
Description
Activity
Thanks for letting us know. We'll be addressing this.
Reacted by Sebastian PippingGH-115468 is a backport of this pull request to the 3.11 branch.
- added a commit that references this issue
on Feb 14, 2024 GH-115474 is a backport of this pull request to the 3.9 branch.
GH-115475 is a backport of this pull request to the 3.8 branch.
4 remaining items
- added 5 commits that reference this issue
on Feb 21, 2024 - added 7 commits that reference this issue
on Feb 21, 2024
Bug report
Bug description:
Hi! 👋
Please upgrade bundled Expat to 2.6.0 (e.g. for the fix to CVE-2023-52425).
The CPython issue for previous 2.5.0 was #98739 and the related merged pull request was #98742, in case you want to have a look. In particular comment #98742 (review) could be of help.
Thanks in advance!
CPython versions tested on:
3.8, 3.9, 3.10, 3.11, 3.12, 3.13, CPython main branch
Operating systems tested on:
Linux, macOS, Windows, Other
Linked PRs