Repository navigation
Please upgrade bundled Expat to 2.6.2 (e.g. for the fix to CVE-2024-28757)聽#116741
Description
Bug report
Bug description:
Hi! 馃憢
Please upgrade bundled Expat to 2.6.2 (e.g. for the fix to CVE-2024-28757).
- GitHub release: https://github.com/libexpat/libexpat/releases/tag/R_2_6_2
- Change log: https://github.com/libexpat/libexpat/blob/R_2_6_2/expat/Changes
The CPython issue for previous 2.6.0 was #115399 and the related merged main pull request was #115431, in case you want to have a look. Comment #115431 (comment) could be of help by raising confidence in the bump pull request when going forward.
Thanks in advance!
CPython versions tested on:
3.8, 3.9, 3.10, 3.11, 3.12, 3.13, CPython main branch
Operating systems tested on:
Linux, macOS, Windows, Other
Linked PRs
- gh-116741: Upgrade libexpat to 2.6.2聽#117296
- [3.12] gh-116741: Upgrade libexpat to 2.6.2 (GH-117296)聽#118166
- [3.11] gh-116741: Upgrade libexpat to 2.6.2 (GH-117296)聽#118185
- [3.10] gh-116741: Upgrade libexpat to 2.6.2 (GH-117296)聽#118186
- [3.9] gh-116741: Upgrade libexpat to 2.6.2 (GH-117296)聽#118187
- [3.8] gh-116741: Upgrade libexpat to 2.6.2 (GH-117296)聽#118188
Activity
[-] Please upgrade bundled Expat to 2.6.2 (e.g. for the fix toCVE-2024-28757)[/-][+] Please upgrade bundled Expat to 2.6.2 (e.g. for the fix to CVE-2024-28757)[/+]hartwork commentedon Mar 24, 2024
@sethmlarson any chance we could team up on this once more?
sethmlarson commentedon Mar 27, 2024
@hartwork Sorry for not replying, I was gone for the past 2 weeks on vacation. Here's a PR upgrading 2.6.2, please take a look.
hartwork commentedon Mar 27, 2024
@sethmlarson looks good, thank you! 馃憤
gh-116741: Upgrade libexpat to 2.6.2 (#117296)
pythongh-116741: Upgrade libexpat to 2.6.2 (pythonGH-117296)
[3.12] gh-116741: Upgrade libexpat to 2.6.2 (GH-117296) (GH-118166)
[3.11] pythongh-116741: Upgrade libexpat to 2.6.2 (pythonGH-117296)
[3.10] pythongh-116741: Upgrade libexpat to 2.6.2 (pythonGH-117296)
[3.9] pythongh-116741: Upgrade libexpat to 2.6.2 (pythonGH-117296)
[3.8] pythongh-116741: Upgrade libexpat to 2.6.2 (pythonGH-117296)
[3.11] gh-116741: Upgrade libexpat to 2.6.2 (GH-117296) (#118185)
[3.10] gh-116741: Upgrade libexpat to 2.6.2 (GH-117296) (GH-118186)
[3.9] gh-116741: Upgrade libexpat to 2.6.2 (GH-117296) (GH-118187)
[3.8] gh-116741: Upgrade libexpat to 2.6.2 (GH-117296) (GH-118188)
eli-schwartz commentedon May 21, 2024
Is this fully implemented now?
gpshead commentedon May 21, 2024
it looks like all of the backports are in. yes.