[3.12] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234)#139527

Merged

Yhg1s merged 9 commits into

python:3.12from

hartwork:backport-f04bea4-3.12

Dec 17, 2025

Commits on Oct 2, 2025

[3.12] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234)
Show description for aeefb63

picnixz
authored and
hartwork
committed
aeefb63
Copy full SHA for aeefb63
gh-90949: amend GH-139234 in prevision of future mitigation API (#139366)
Show description for a5d026a

picnixz
authored and
hartwork
committed
a5d026a
Copy full SHA for a5d026a
Make use of macro _Py_ID possible to pyexpat
hartwork
committed
2ab3e1d
Copy full SHA for 2ab3e1d
Add a temporary workaround for issue 139400
hartwork
committed
ce64f57
Copy full SHA for ce64f57

Commits on Oct 3, 2025

Add an empty commit to see how temporary the RTD CI fail is
hartwork
committed
56896ae
Copy full SHA for 56896ae
Revert introduction of stddef.h import
Show description for 6e97592
hartwork
committed
6e97592
Copy full SHA for 6e97592

Commits on Oct 7, 2025

Merge remote-tracking branch 'upstream/3.12' into backport-f04bea4-3.12
hartwork
committed
bcab187
Copy full SHA for bcab187
Drop workaround for 139400 as no-longer-needed
hartwork
committed
932d28d
Copy full SHA for 932d28d

Commits on Nov 2, 2025

Merge remote-tracking branch 'upstream/3.12' into backport-f04bea4-3.12
hartwork
committed
e49766f
Copy full SHA for e49766f