[issue29591] expat 2.2.0: Various security vulnerabilities in bundled expat (CVE-2016-0718 and CVE-2016-4472)

Larry Hastings report at bugs.python.org
Tue Jul 11 16:06:42 EDT 2017


Larry Hastings added the comment:

Please instead choose to use bpo-30694 for the upgrades of 3.3 and 3.4 to expat 2.2.1.  I guess there are historical reasons why the PRs are here, but bpo stands as a historical record; let's not confuse posterity by upgrading to 2.2.1 using a bpo issue talking about--and upgrading four branches to--2.2.0.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue29591>
_______________________________________


More information about the Python-bugs-list mailing list