FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

[3.5][Security] bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4 by vstinner · Pull Request #3354 · python/cpython · GitHub

Repository navigation

[3.5][Security] bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4 - #3354

Merged
larryhastings merged 4 commits into
python:3.5from
vstinner:expat224_35
Sep 25, 2017
Merged

larryhastings merged 4 commits into
python:3.5from
vstinner:expat224_35

Conversation

vstinner commented Sep 5, 2017 •
edited by bedevere-bot
Loading

Copy link
Copy Markdown
Member

https://bugs.python.org/issue30947

* Upgrade libexpat embedded copy from version 2.2.1 to 2.2.3 to get security
  fixes.

* Update libexpat from 2.2.3 to 2.2.4. Fix copying of partial
  characters for UTF-8 input (libexpat bug 115):
  libexpat/libexpat#115
vstinner changed the title [3.5] bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4 [3.5][Security] bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4 Sep 8, 2017
vstinner requested review from gpshead and tiran September 13, 2017 00:57

Copy link
Copy Markdown
Member Author

This PR fixes the following security vulnerabilities on Windows and macOS: http://python-security.readthedocs.io/vuln/expat_2.2.3.html

gpshead left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

just glanced over it, looks like a valid expat update. I'm not reviewing the expat internal changes themselves. :)

larryhastings merged commit f2492bb into python:3.5 Sep 25, 2017
vstinner deleted the expat224_35 branch September 27, 2017 09:19
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type-security A security issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants


Back | FazBrowse Home | New Git URL