[issue17239] XML vulnerabilities in Python

Wed Sep 19 02:10:00 EDT 2018

Benjamin Peterson <benjamin at python.org> added the comment:

On Tue, Sep 18, 2018, at 06:39, STINNER Victor wrote:
> 
> STINNER Victor <vstinner at redhat.com> added the comment:
> 
> > Who normally updates the vendored libexpat?
> 
> I made the 3 latest libexpat updates, and each of them was painful :-)

Oh? I've updated it twice (4e21100fa7bf66e0b32146d3f46ae16afc73fee1 and 5033aa77aacaa5505636f150e8d54baac5bdca9c), and it didn't seem so bad. I just copied the upstream files in. Did I do it wrong?

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue17239>
_______________________________________