Browse Source
bpo-44394: Update libexpat copy to 2.4.1 (GH-26945)
bpo-44394: Update libexpat copy to 2.4.1 (GH-26945)
Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the fix for the CVE-2013-0340 "Billion Laughs" vulnerability. This copy is most used on Windows and macOS. Co-authored-by: Łukasz Langa <lukasz@langa.pl>pull/28044/head
committed by
GitHub
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
22 changed files with 1389 additions and 191 deletions
-
32Doc/library/xml.rst
-
3Misc/NEWS.d/next/Security/2021-06-29-02-45-53.bpo-44394.A220N1.rst
-
2Modules/expat/COPYING
-
7Modules/expat/ascii.h
-
4Modules/expat/asciitab.h
-
44Modules/expat/expat.h
-
9Modules/expat/expat_external.h
-
4Modules/expat/iasciitab.h
-
58Modules/expat/internal.h
-
4Modules/expat/latin1tab.h
-
4Modules/expat/nametab.h
-
13Modules/expat/siphash.h
-
4Modules/expat/utf8tab.h
-
19Modules/expat/winconfig.h
-
1263Modules/expat/xmlparse.c
-
19Modules/expat/xmlrole.c
-
5Modules/expat/xmlrole.h
-
48Modules/expat/xmltok.c
-
6Modules/expat/xmltok.h
-
21Modules/expat/xmltok_impl.c
-
3Modules/expat/xmltok_impl.h
-
8Modules/expat/xmltok_ns.c
@ -0,0 +1,3 @@ |
|||
Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the fix |
|||
for the CVE-2013-0340 "Billion Laughs" vulnerability. This copy is most used |
|||
on Windows and macOS. |
|||
1263
Modules/expat/xmlparse.c
File diff suppressed because it is too large
View File
File diff suppressed because it is too large
View File
Write
Preview
Loading…
Cancel
Save
Reference in new issue