Repository navigation

[3.10] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234) - #139532

Merged

pablogsal merged 9 commits into

python:3.10from

hartwork:backport-f04bea4-3.10

Nov 25, 2025

Merged

[3.10] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234)#139532
pablogsal merged 9 commits into
python:3.10from
hartwork:backport-f04bea4-3.10

Commits on Oct 2, 2025
- gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (#139234)
  
  picnixz
  authored and
  hartwork
  committed
  de690f1
- gh-90949: amend GH-139234 in prevision of future mitigation API (#139366)
  
  picnixz
  authored and
  hartwork
  committed
  6ae7665
Commits on Oct 3, 2025
- Workaround lack of _Py_ID in CPython 3.10.x
  hartwork
  committed
  a6a31cf
- Add temporary workaround for issue 139400
  hartwork
  committed
  98cb5cd
- Migrate py_id_code into pyexpat_state
  hartwork
  committed
  d1da6d6
- Revert introduction of stddef.h import
  hartwork
  committed
  21bdc0d
Commits on Oct 7, 2025
- Merge remote-tracking branch 'upstream/3.10' into backport-f04bea4-3.10
  hartwork
  committed
  0049b51
- Drop workaround for 139400 as no-longer-needed
  hartwork
  committed
  8027b28
Commits on Nov 2, 2025
- Merge remote-tracking branch 'upstream/3.10' into backport-f04bea4-3.10
  hartwork
  committed
  7499b90