Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Please update bundled libexpat to 2.4.7 with an important fix #91088

Closed
hartwork mannequin opened this issue Mar 5, 2022 · 7 comments
Closed

Please update bundled libexpat to 2.4.7 with an important fix #91088

hartwork mannequin opened this issue Mar 5, 2022 · 7 comments
Assignees
Labels
3.7 (EOL) end of life 3.8 only security fixes 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes release-blocker topic-XML type-bug An unexpected behavior, bug, or error

Comments

@hartwork
Copy link
Mannequin

hartwork mannequin commented Mar 5, 2022

BPO 46932
Nosy @ned-deily, @ambv, @zooba, @hartwork, @corona10, @pablogsal, @miss-islington
PRs
  • bpo-46932: Update bundled libexpat to 2.4.7 #31736
  • [3.10] bpo-46932: Update bundled libexpat to 2.4.7 (GH-31736) #31738
  • [3.9] bpo-46932: Update bundled libexpat to 2.4.7 (GH-31736) #31739
  • [3.8] bpo-46932: Update bundled libexpat to 2.4.7 (GH-31736) #31740
  • [3.7] bpo-46932: Update bundled libexpat to 2.4.7 (GH-31736) #31741
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/zooba'
    closed_at = <Date 2022-03-08.13:30:31.313>
    created_at = <Date 2022-03-05.18:03:18.212>
    labels = ['type-bug', '3.8', '3.9', '3.10', '3.11', 'expert-XML', '3.7', 'release-blocker']
    title = 'Please update bundled libexpat to 2.4.7 with an important fix'
    updated_at = <Date 2022-03-08.13:30:31.312>
    user = 'https://github.com/hartwork'

    bugs.python.org fields:

    activity = <Date 2022-03-08.13:30:31.312>
    actor = 'steve.dower'
    assignee = 'steve.dower'
    closed = True
    closed_date = <Date 2022-03-08.13:30:31.313>
    closer = 'steve.dower'
    components = ['XML']
    creation = <Date 2022-03-05.18:03:18.212>
    creator = 'sping'
    dependencies = []
    files = []
    hgrepos = []
    issue_num = 46932
    keywords = ['patch']
    message_count = 7.0
    messages = ['414591', '414692', '414700', '414702', '414703', '414707', '414732']
    nosy_count = 7.0
    nosy_names = ['ned.deily', 'lukasz.langa', 'steve.dower', 'sping', 'corona10', 'pablogsal', 'miss-islington']
    pr_nums = ['31736', '31738', '31739', '31740', '31741']
    priority = 'release blocker'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'behavior'
    url = 'https://bugs.python.org/issue46932'
    versions = ['Python 3.7', 'Python 3.8', 'Python 3.9', 'Python 3.10', 'Python 3.11']

    @hartwork
    Copy link
    Mannequin Author

    hartwork mannequin commented Mar 5, 2022

    Hi!

    I believe the fix documented at https://github.com/libexpat/libexpat/blob/27d5b8ba1771f916d9cfea2aac6bdac72071dc66/expat/Changes#L7-L11 is important to users of CPython. Please update bundled libexpat to 2.4.7. Thank you!

    Best, Sebastian

    @hartwork hartwork mannequin added 3.7 (EOL) end of life 3.8 only security fixes 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes topic-XML type-bug An unexpected behavior, bug, or error labels Mar 5, 2022
    @ned-deily
    Copy link
    Member

    We haven't released 2.4.6 yet for maintenance/security branches so we probably should update to 2.4.7 first.

    @zooba
    Copy link
    Member

    zooba commented Mar 7, 2022

    New changeset 176835c by Steve Dower in branch 'main':
    bpo-46932: Update bundled libexpat to 2.4.7 (GH-31736)
    176835c

    @miss-islington
    Copy link
    Contributor

    New changeset 1e52e78 by Miss Islington (bot) in branch '3.10':
    bpo-46932: Update bundled libexpat to 2.4.7 (GH-31736)
    1e52e78

    @miss-islington
    Copy link
    Contributor

    New changeset f46a044 by Miss Islington (bot) in branch '3.9':
    bpo-46932: Update bundled libexpat to 2.4.7 (GH-31736)
    f46a044

    @ned-deily
    Copy link
    Member

    New changeset f656bc1 by Miss Islington (bot) in branch '3.7':
    bpo-46932: Update bundled libexpat to 2.4.7 (GH-31736) (GH-31741)
    f656bc1

    @ambv
    Copy link
    Contributor

    ambv commented Mar 8, 2022

    New changeset c3ec5bc by Miss Islington (bot) in branch '3.8':
    bpo-46932: Update bundled libexpat to 2.4.7 (GH-31736) (GH-31740)
    c3ec5bc

    @zooba zooba closed this as completed Mar 8, 2022
    @zooba zooba self-assigned this Mar 8, 2022
    @zooba zooba closed this as completed Mar 8, 2022
    @zooba zooba self-assigned this Mar 8, 2022
    @ezio-melotti ezio-melotti transferred this issue from another repository Apr 10, 2022
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
    Labels
    3.7 (EOL) end of life 3.8 only security fixes 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes release-blocker topic-XML type-bug An unexpected behavior, bug, or error
    Projects
    None yet
    Development

    No branches or pull requests

    4 participants