FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

[3.8] gh-115133: Fix tests for XMLPullParser with Expat 2.6.0 (GH-115164 by sethmlarson · Pull Request #115536 · python/cpython · GitHub

Repository navigation

[3.8] gh-115133: Fix tests for XMLPullParser with Expat 2.6.0 (GH-115164 - #115536

Merged
ambv merged 1 commit into
python:3.8from
sethmlarson:backport-4a08e7b-3.8
Feb 21, 2024
Merged

ambv merged 1 commit into
python:3.8from
sethmlarson:backport-4a08e7b-3.8

Conversation

sethmlarson commented Feb 15, 2024 •
edited by bedevere-app Bot
Loading

Copy link
Copy Markdown
Contributor

Feeding the parser by too small chunks defers parsing to prevent CVE-2023-52425. Future versions of Expat may be more reactive. (cherry picked from commit 4a08e7b)

…ythonGH-115164)

Feeding the parser by too small chunks defers parsing to prevent
CVE-2023-52425. Future versions of Expat may be more reactive.
(cherry picked from commit 4a08e7b)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

Copy link
Copy Markdown
Contributor Author

Marked as release blocker as it blocks #115475

ambv merged commit 366f315 into python:3.8 Feb 21, 2024
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

release-blocker tests Tests in the Lib/test dir

Development

Successfully merging this pull request may close these issues.

3 participants


Back | FazBrowse Home | New Git URL