Repository navigation
Please upgrade bundled Expat to 2.6.0 (e.g. for the fix to CVE-2023-52425) #115399
Description
Bug report
Bug description:
Hi! 👋
Please upgrade bundled Expat to 2.6.0 (e.g. for the fix to CVE-2023-52425).
- GitHub release: https://github.com/libexpat/libexpat/releases/tag/R_2_6_0
- Change log: https://github.com/libexpat/libexpat/blob/R_2_6_0/expat/Changes
The CPython issue for previous 2.5.0 was #98739 and the related merged pull request was #98742, in case you want to have a look. In particular comment #98742 (review) could be of help.
Thanks in advance!
CPython versions tested on:
3.8, 3.9, 3.10, 3.11, 3.12, 3.13, CPython main branch
Operating systems tested on:
Linux, macOS, Windows, Other
Linked PRs
- gh-115399: Upgrade bundled libexpat to 2.6.0 #115431
- [3.11] Upgrade bundled libexpat to 2.6.0 (GH-115399) #115468
- [3.12] gh-115399: Upgrade bundled libexpat to 2.6.0 (GH-115431) #115469
- [3.10] Upgrade bundled libexpat to 2.6.0 (GH-115399) (GH-115468) #115473
- [3.9] Upgrade bundled libexpat to 2.6.0 (GH-115399) #115474
- [3.8] Upgrade bundled libexpat to 2.6.0 (GH-115399) #115475
- gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" #115400
- [3.12] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) #115760
- [3.11] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) #115761
- [3.10] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) #115762
- [3.9] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) #115763
- [3.8] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) #115764
Activity
ambv commented on Feb 13, 2024
Thanks for letting us know. We'll be addressing this.
bedevere-app commented on Feb 14, 2024
GH-115468 is a backport of this pull request to the 3.11 branch.
gh-115399: Upgrade bundled libexpat to 2.6.0 (#115431)
pythongh-115399: Upgrade bundled libexpat to 2.6.0 (pythonGH-115431)
[3.11] Upgrade bundled libexpat to 2.6.0 (GH-115399) (GH-115468)
[3.11] Upgrade bundled libexpat to 2.6.0 (pythonGH-115399) (pythonGH-…
[3.9] [3.11] Upgrade bundled libexpat to 2.6.0 (pythonGH-115399) (pyt…
bedevere-app commented on Feb 14, 2024
GH-115474 is a backport of this pull request to the 3.9 branch.
[3.8] [3.11] Upgrade bundled libexpat to 2.6.0 (pythonGH-115399) (pyt…
bedevere-app commented on Feb 14, 2024
GH-115475 is a backport of this pull request to the 3.8 branch.
[3.9] Upgrade bundled libexpat to 2.6.0 (pythonGH-115399) (pythonGH-1…
[3.8] Upgrade bundled libexpat to 2.6.0 (pythonGH-115399) (pythonGH-1…
4 remaining items
pythongh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (p…
pythongh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (p…
pythongh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (p…
pythongh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (p…
pythongh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (p…
[3.12] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (…
[3.11] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (…
[3.10] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (…
[3.8] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (G…
[3.9] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (G…
[3.9] Upgrade bundled libexpat to 2.6.0 (GH-115399) (GH-115474)
[3.8] Upgrade bundled libexpat to 2.6.0 (GH-115399) (GH-115475)
pythongh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (p…
pythongh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (p…
pythongh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (p…