Skip to content

[3.9] Fix tests for XMLPullParser with Expat 2.6.0 (GH-115133) - #115535

Merged
ambv merged 1 commit into
python:3.9from
sethmlarson:backport-4a08e7b-3.9
Feb 21, 2024
Merged

[3.9] Fix tests for XMLPullParser with Expat 2.6.0 (GH-115133)#115535
ambv merged 1 commit into
python:3.9from
sethmlarson:backport-4a08e7b-3.9

Conversation

@sethmlarson

@sethmlarsonsethmlarson commented Feb 15, 2024

Copy link
Copy Markdown
Contributor

Feeding the parser by too small chunks defers parsing to prevent CVE-2023-52425. Future versions of Expat may be more reactive. (cherry picked from commit 4a08e7b)

…ythonGH-115164)
Feeding the parser by too small chunks defers parsing to prevent
CVE-2023-52425. Future versions of Expat may be more reactive.
(cherry picked from commit 4a08e7b)
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
@sethmlarson

Copy link
Copy Markdown
ContributorAuthor

Marked as release-blocker as it blocks #115474

@ambv
ambv merged commit dafb4f0 into python:3.9Feb 21, 2024
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

release-blockertestsTests in the Lib/test dirtype-bugAn unexpected behavior, bug, or error

Projects

Development

Successfully merging this pull request may close these issues.

3 participants

@sethmlarson@ambv@serhiy-storchaka