diff options
| author | Victor Stinner <victor.stinner@gmail.com> | 2017-09-25 00:58:32 (GMT) |
|---|---|---|
| committer | larryhastings <larry@hastings.org> | 2017-09-25 00:58:32 (GMT) |
| commit | f2492bb6aae061aea47e21fc7e56b7ab9bfdf543 (patch) | |
| tree | ffbb235ead682c886abdd9b63ba7360988b25998 /Misc/NEWS.d/next | |
| parent | 70c630a7316f9f6063557786442e3c56502fe8ea (diff) | |
| download | cpython-f2492bb6aae061aea47e21fc7e56b7ab9bfdf543.zip cpython-f2492bb6aae061aea47e21fc7e56b7ab9bfdf543.tar.gz cpython-f2492bb6aae061aea47e21fc7e56b7ab9bfdf543.tar.bz2 | |
[3.5][Security] bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4 (#3354)
* bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4
* Upgrade libexpat embedded copy from version 2.2.1 to 2.2.3 to get security
fixes.
* Update libexpat from 2.2.3 to 2.2.4. Fix copying of partial
characters for UTF-8 input (libexpat bug 115):
https://github.com/libexpat/libexpat/issues/115
* Define XML_POOR_ENTROPY when compiling expat
Diffstat (limited to 'Misc/NEWS.d/next')
| -rw-r--r-- | Misc/NEWS.d/next/Library/2017-09-05-20-35-21.bpo-31170.QGmJ1t.rst | 3 | ||||
| -rw-r--r-- | Misc/NEWS.d/next/Security/2017-09-05-20-34-44.bpo-30947.iNMmm4.rst | 2 |
2 files changed, 5 insertions, 0 deletions
diff --git a/Misc/NEWS.d/next/Library/2017-09-05-20-35-21.bpo-31170.QGmJ1t.rst b/Misc/NEWS.d/next/Library/2017-09-05-20-35-21.bpo-31170.QGmJ1t.rst new file mode 100644 index 0000000..2505007 --- /dev/null +++ b/Misc/NEWS.d/next/Library/2017-09-05-20-35-21.bpo-31170.QGmJ1t.rst @@ -0,0 +1,3 @@ +expat: Update libexpat from 2.2.3 to 2.2.4. Fix copying of partial +characters for UTF-8 input (libexpat bug 115): +https://github.com/libexpat/libexpat/issues/115 diff --git a/Misc/NEWS.d/next/Security/2017-09-05-20-34-44.bpo-30947.iNMmm4.rst b/Misc/NEWS.d/next/Security/2017-09-05-20-34-44.bpo-30947.iNMmm4.rst new file mode 100644 index 0000000..3caca9a7 --- /dev/null +++ b/Misc/NEWS.d/next/Security/2017-09-05-20-34-44.bpo-30947.iNMmm4.rst @@ -0,0 +1,2 @@ +Upgrade libexpat embedded copy from version 2.2.1 to 2.2.3 to get security +fixes. |