➜
This issue tracker has been migrated to GitHub,
and is currently read-only.
For more information,
see the GitHub FAQs in the Python's Developer Guide.
Created on 2022-02-08 23:45 by steve.dower, last changed 2022-04-11 14:59 by admin. This issue is now closed.
| Messages (3) | |||
|---|---|---|---|
| msg412880 - (view) | Author: Steve Dower (steve.dower) *  |
Date: 2022-02-08 23:45 | |
libexpat recently fixed a security issue relating to some arithmetic: https://github.com/libexpat/libexpat/pull/534 I assume we should take this fix, either by updating our entire bundled copy or just backporting the patch. |
|||
| msg412881 - (view) | Author: Ned Deily (ned.deily) * |
Date: 2022-02-09 00:01 | |
Duplicate of Issue46400 ? |
|||
| msg412908 - (view) | Author: Steve Dower (steve.dower) * |
Date: 2022-02-09 14:25 | |
Probably. I searched for the CVE number and didn't find it anywhere, but that issue only mentions the new release version. |
|||
| History | |||
|---|---|---|---|
| Date | User | Action | Args |
| 2022-04-11 14:59:55 | admin | set | github: 90845 |
| 2022-02-09 14:25:47 | steve.dower | set | status: open -> closed superseder: Please update bundled libexpat to 2.4.4 with security fixes (CVE-2021-45960) messages: + msg412908 resolution: duplicate stage: needs patch -> resolved |
| 2022-02-09 00:01:05 | ned.deily | set | nosy:
+ ned.deily messages: + msg412881 |
| 2022-02-08 23:45:05 | steve.dower | create | |