Repository navigation

[3.12] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234) - #139527

Merged

Yhg1s merged 9 commits into

python:3.12from

hartwork:backport-f04bea4-3.12

Dec 17, 2025

Commits on Oct 2, 2025
- [3.12] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234)
  
  picnixz
  authored and
  hartwork
  committed
  aeefb63
- gh-90949: amend GH-139234 in prevision of future mitigation API (#139366)
  
  picnixz
  authored and
  hartwork
  committed
  a5d026a
- Make use of macro _Py_ID possible to pyexpat
  hartwork
  committed
  2ab3e1d
- Add a temporary workaround for issue 139400
  hartwork
  committed
  ce64f57
Commits on Oct 3, 2025
- Add an empty commit to see how temporary the RTD CI fail is
  hartwork
  committed
  56896ae
- Revert introduction of stddef.h import
  hartwork
  committed
  6e97592
Commits on Oct 7, 2025
- Merge remote-tracking branch 'upstream/3.12' into backport-f04bea4-3.12
  hartwork
  committed
  bcab187
- Drop workaround for 139400 as no-longer-needed
  hartwork
  committed
  932d28d
Commits on Nov 2, 2025
- Merge remote-tracking branch 'upstream/3.12' into backport-f04bea4-3.12
  hartwork
  committed
  e49766f