Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

closes bpo-38174: Update vendored expat library to 2.2.8. #16346

Merged
merged 1 commit into from Sep 26, 2019
Merged

closes bpo-38174: Update vendored expat library to 2.2.8. #16346

merged 1 commit into from Sep 26, 2019

Conversation

benjaminp
Copy link
Contributor

@benjaminp benjaminp commented Sep 24, 2019

Copy link
Member

@vstinner vstinner left a comment

Using my https://github.com/vstinner/misc/blob/master/cpython/cpython_rebuild_expat_dir.sh script (modify TAG= at the first line to put: TAG=R_2_2_8), I get a very similar result, except that my script also removed Modules/expat/loadlibrary.c. loadlibrary.c has been removed from libexpat: libexpat/libexpat@5d34a70

"replace loadlibrary.c and RtlGenRandom call with rand_s() on windows"

@bedevere-bot
Copy link

@bedevere-bot bedevere-bot commented Sep 24, 2019

When you're done making the requested changes, leave the comment: I have made the requested changes; please review again.

@benjaminp
Copy link
Contributor Author

@benjaminp benjaminp commented Sep 25, 2019

@bedevere-bot
Copy link

@bedevere-bot bedevere-bot commented Sep 25, 2019

Thanks for making the requested changes!

@vstinner: please review the changes made to this pull request.

@bedevere-bot bedevere-bot requested a review from vstinner Sep 25, 2019
Copy link
Member

@vstinner vstinner left a comment

LGTM, thanks.

@benjaminp benjaminp requested a review from as a code owner Sep 25, 2019
@benjaminp benjaminp merged commit 52b9408 into python:master Sep 26, 2019
4 checks passed
@benjaminp benjaminp deleted the up-expat branch Sep 26, 2019
@miss-islington
Copy link
Contributor

@miss-islington miss-islington commented Sep 26, 2019

Thanks @benjaminp for the PR 🌮🎉.. I'm working now to backport this PR to: 2.7, 3.6, 3.7, 3.8.
🐍🍒🤖

@miss-islington
Copy link
Contributor

@miss-islington miss-islington commented Sep 26, 2019

I'm having trouble backporting to 3.8. Reason: 'Error 110 while writing to socket. Connection timed out.'. Please retry by removing and re-adding the needs backport to 3.8 label.

@miss-islington
Copy link
Contributor

@miss-islington miss-islington commented Sep 26, 2019

Sorry, @benjaminp, I could not cleanly backport this to 3.7 due to a conflict.
Please backport using cherry_picker on command line.
cherry_picker 52b940803860e37bcc3f6096b2d24e7c20a0e807 3.7

@miss-islington
Copy link
Contributor

@miss-islington miss-islington commented Sep 26, 2019

Sorry @benjaminp, I had trouble checking out the 3.6 backport branch.
Please backport using cherry_picker on command line.
cherry_picker 52b940803860e37bcc3f6096b2d24e7c20a0e807 3.6

@miss-islington
Copy link
Contributor

@miss-islington miss-islington commented Sep 26, 2019

Sorry, @benjaminp, I could not cleanly backport this to 2.7 due to a conflict.
Please backport using cherry_picker on command line.
cherry_picker 52b940803860e37bcc3f6096b2d24e7c20a0e807 2.7

benjaminp added a commit that referenced this issue Sep 26, 2019
…6346)

Fixes CVE-2019-15903. See full changelog at https://github.com/libexpat/libexpat/blob/R_2_2_8/expat/Changes..
(cherry picked from commit 52b9408)

Co-authored-by: Benjamin Peterson <benjamin@python.org>
@bedevere-bot
Copy link

@bedevere-bot bedevere-bot commented Sep 26, 2019

GH-16407 is a backport of this pull request to the 3.7 branch.

@miss-islington
Copy link
Contributor

@miss-islington miss-islington commented Sep 26, 2019

Thanks @benjaminp for the PR 🌮🎉.. I'm working now to backport this PR to: 3.8.
🐍🍒🤖

@miss-islington
Copy link
Contributor

@miss-islington miss-islington commented Sep 26, 2019

Sorry @benjaminp, I had trouble checking out the 3.8 backport branch.
Please backport using cherry_picker on command line.
cherry_picker 52b940803860e37bcc3f6096b2d24e7c20a0e807 3.8

benjaminp added a commit that referenced this issue Sep 26, 2019
…6346)

Fixes CVE-2019-15903. See full changelog at https://github.com/libexpat/libexpat/blob/R_2_2_8/expat/Changes..
(cherry picked from commit 52b9408)

Co-authored-by: Benjamin Peterson <benjamin@python.org>
@bedevere-bot
Copy link

@bedevere-bot bedevere-bot commented Sep 26, 2019

GH-16408 is a backport of this pull request to the 2.7 branch.

benjaminp added a commit that referenced this issue Sep 26, 2019
…6346)

Fixes CVE-2019-15903. See full changelog at https://github.com/libexpat/libexpat/blob/R_2_2_8/expat/Changes.
(cherry picked from commit 52b9408)

Co-authored-by: Benjamin Peterson <benjamin@python.org>
@bedevere-bot
Copy link

@bedevere-bot bedevere-bot commented Sep 26, 2019

GH-16409 is a backport of this pull request to the 3.8 branch.

benjaminp added a commit that referenced this issue Sep 26, 2019
…6346)

Fixes CVE-2019-15903. See full changelog at https://github.com/libexpat/libexpat/blob/R_2_2_8/expat/Changes..
(cherry picked from commit 52b9408)

Co-authored-by: Benjamin Peterson <benjamin@python.org>
@bedevere-bot
Copy link

@bedevere-bot bedevere-bot commented Sep 26, 2019

GH-16410 is a backport of this pull request to the 3.6 branch.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

5 participants