8000 [3.13] gh-131261: Update libexpat to 2.7.0 (CVE-2024-8176) (GH-131272) by encukou · Pull Request #131360 · python/cpython · GitHub
[go: up one dir, main page]
Skip to content

[3.13] gh-131261: Update libexpat to 2.7.0 (CVE-2024-8176) (GH-131272) #131360

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Mar 17, 2025
Merged

[3.13] gh-131261: Update libexpat to 2.7.0 (CVE-2024-8176) (GH-131272) #131360

merged 1 commit into from
Mar 17, 2025

Conversation

encukou
Copy link
Member
@encukou encukou commented Mar 17, 2025 •
edited by bedevere-app bot
Loading

@gpshead @encukou
[3.13] pythongh-131261: Update libexpat to 2.7.0 (CVE-2024-8176) (pyt…
4b0d55d 
…honGH-131272)

(cherry picked from commit bb0268f)

Co-authored-by: Gregory P. Smith <greg@krypto.org>
@encukou encukou requested a review from sethmlarson as a code owner March 17, 2025 14:09
@bedevere-app bedevere-app bot added the type-security A security issue label Mar 17, 2025
@bedevere-app bedevere-app bot mentioned this pull request Mar 17, 2025
Merged
@bedevere-app bedevere-app bot mentioned this pull request Mar 17, 2025
Closed
@encukou encukou added needs backport to 3.9 only security fixes needs backport to 3.10 only security fixes needs backport to 3.11 only security fixes needs backport to 3.12 only security fixes labels Mar 17, 2025
@sethmlarson sethmlarson merged commit 6af54d2 into python:3.13 Mar 17, 2025
44 checks passed
@miss-islington-app
Copy link

Thanks @encukou for the PR, and @sethmlarson for merging it 🌮🎉.. I'm working now to backport this PR to: 3.9, 3.10, 3.11, 3.12.
🐍🍒⛏🤖

@miss-islington-app
Copy link

Sorry, @encukou and @sethmlarson, I could not cleanly backport this to 3.11 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 6af54d298d5135302037cdda7a1f5535e48cb1b6 3.11

@miss-islington-app
Copy link

Sorry, @encukou and @sethmlarson, I could not cleanly backport this to 3.10 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 6af54d298d5135302037cdda7a1f5535e48cb1b6 3.10

@miss-islington-app
Copy link

Sorry, @encukou and @sethmlarson, I could not cleanly backport this to 3.9 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 6af54d298d5135302037cdda7a1f5535e48cb1b6 3.9

< 8000 a class="d-inline-block" data-test-selector="pr-timeline-events-actor-avatar" data-hovercard-type="user" data-hovercard-url="/users/encukou/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="/encukou">@encukou encukou deleted the backport-bb0268f-3.13 branch March 17, 2025 14:55
@hugovk
Copy link
Member
hugovk commented Apr 8, 2025

(Backports have been merged, removing labels)

@hugovk hugovk removed needs backport to 3.9 only security fixes needs backport to 3.10 only security fixes needs backport to 3.11 only security fixes needs backport to 3.12 only security fixes labels Apr 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@sethmlarson sethmlarson sethmlarson approved these changes

Assignees

@sethmlarson sethmlarson

Labels
skip news type-security A security issue
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@encukou @hugovk @sethmlarson @gpshead
0