Skip to content

[3.10] gh-131261: Update libexpat to 2.7.0 (CVE-2024-8176) (GH-131272) #131363

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Apr 1, 2025
Merged

[3.10] gh-131261: Update libexpat to 2.7.0 (CVE-2024-8176) (GH-131272) #131363

merged 1 commit into from
Apr 1, 2025

Conversation

sethmlarson
Copy link
Contributor

@sethmlarson sethmlarson commented Mar 17, 2025 •
edited by bedevere-app bot
Loading

(cherry picked from commit bb0268f) (cherry picked from commit 6af54d2)

@encukou @gpshead @sethmlarson
[3.10] [3.13] pythongh-131261: Update libexpat to 2.7.0 (CVE-2024-8176)
7c1681b 
(cherry picked from commit bb0268f)
(cherry picked from commit 6af54d2)

Co-authored-by: Petr Viktorin <encukou@gmail.com>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
@bedevere-app bedevere-app bot mentioned this pull request Mar 17, 2025
Closed
@sethmlarson sethmlarson requested a review from pablogsal March 17, 2025 14:52
@sethmlarson sethmlarson changed the title [3.10] gh-131261: Update libexpat to 2.7.0 (CVE-2024-8176) [3.10] gh-131261: Update libexpat to 2.7.0 (CVE-2024-8176) (GH-131272) Mar 17, 2025
@bedevere-app bedevere-app bot mentioned this pull request Mar 17, 2025
Merged
@llindsaya
Copy link

Is there anything blocking this from being merged?

@pablogsal pablogsal merged commit b22e607 into python:3.10 Apr 1, 2025
15 checks passed
@pablogsal
Copy link
Member

Just the RM reviewing :)

@llindsaya
Copy link

Just the RM reviewing :)

Thanks @pablogsal! Looks like another change is coming in due to an issue with the fix. Hopefully merging this update will be seamless.
#131809

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@encukou encukou encukou approved these changes

@pablogsal pablogsal Awaiting requested review from pablogsal

Assignees
No one assigned
Labels
release-blocker type-security A security issue
Projects
Release and Deferred blockers 🚫
Status: Done
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@sethmlarson @llindsaya @pablogsal @encukou