Skip to content

Commit d390759

Browse files
miss-islingtonStanFromIreland
miss-islington
and
StanFromIreland
authored
[3.15] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) (#155612)
Co-authored-by: Stan Ulbrych <stan@python.org>
1 parent 0f175f3 commit d390759

25 files changed

Lines changed: 170 additions & 96 deletions

‎Misc/NEWS.d/next/Security/2026-08-11-15-24-21.gh-issue-155558.yDsXZC.rst‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
Update bundled `libexpat <https://libexpat.github.io/>`_ to version 2.8.3
2+
for the fix to :cve:`2026-72522`.

‎Misc/sbom.spdx.json‎

Lines changed: 48 additions & 48 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎Modules/expat/ascii.h‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,8 @@
3131
DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
3232
OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
3333
USE OR OTHER DEALINGS IN THE SOFTWARE.
34+
35+
SPDX-License-Identifier: MIT
3436
*/
3537

3638
#define ASCII_A 0x41

‎Modules/expat/asciitab.h‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -30,6 +30,8 @@
3030
DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
3131
OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
3232
USE OR OTHER DEALINGS IN THE SOFTWARE.
33+
34+
SPDX-License-Identifier: MIT
3335
*/
3436

3537
/* 0x00 */ BT_NONXML, BT_NONXML, BT_NONXML, BT_NONXML,

‎Modules/expat/expat.h‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,8 @@
4040
DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
4141
OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
4242
USE OR OTHER DEALINGS IN THE SOFTWARE.
43+
44+
SPDX-License-Identifier: MIT
4345
*/
4446

4547
#ifndef Expat_INCLUDED
@@ -1094,7 +1096,7 @@ XML_SetReparseDeferralEnabled(XML_Parser parser, XML_Bool enabled);
10941096
*/
10951097
# define XML_MAJOR_VERSION 2
10961098
# define XML_MINOR_VERSION 8
1097-
# define XML_MICRO_VERSION 2
1099+
# define XML_MICRO_VERSION 3
10981100

10991101
# ifdef __cplusplus
11001102
}

‎Modules/expat/expat_external.h‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -36,6 +36,8 @@
3636
DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
3737
OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
3838
USE OR OTHER DEALINGS IN THE SOFTWARE.
39+
40+
SPDX-License-Identifier: MIT
3941
*/
4042

4143
#ifndef Expat_External_INCLUDED

‎Modules/expat/fallthrough.h‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,8 @@
2727
DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
2828
OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
2929
USE OR OTHER DEALINGS IN THE SOFTWARE.
30+
31+
SPDX-License-Identifier: MIT
3032
*/
3133

3234
#ifndef FALLTHROUGH_H

0 commit comments

Comments
 (0)