From 71f8eaa35612518fd75e675fc38751958f17aab5 Mon Sep 17 00:00:00 2001 From: "Gregory P. Smith [Google LLC]" Date: Mon, 4 Mar 2024 10:01:36 +0000 Subject: [PATCH 1/2] Increment PyExpat_CAPI_MAGIC due to SetReparseDeferralEnabled addition. This is a followup to git commit 6a95676bb526261434dd068d6c49927c44d24a9b from Github PR #115623. --- Include/pyexpat.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Include/pyexpat.h b/Include/pyexpat.h index 9824d099c3df7d..e0cff33b53227a 100644 --- a/Include/pyexpat.h +++ b/Include/pyexpat.h @@ -3,7 +3,7 @@ /* note: you must import expat.h before importing this module! */ -#define PyExpat_CAPI_MAGIC "pyexpat.expat_CAPI 1.1" +#define PyExpat_CAPI_MAGIC "pyexpat.expat_CAPI 1.2" #define PyExpat_CAPSULE_NAME "pyexpat.expat_CAPI" struct PyExpat_CAPI From 9eab96f0fc031800a8a29da5fa8f53074be67f8c Mon Sep 17 00:00:00 2001 From: "Gregory P. Smith [Google LLC]" Date: Mon, 4 Mar 2024 10:07:33 +0000 Subject: [PATCH 2/2] RESTify news API list. --- .../2024-02-18-03-14-40.gh-issue-115398.tzvxH8.rst | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/Misc/NEWS.d/next/Security/2024-02-18-03-14-40.gh-issue-115398.tzvxH8.rst b/Misc/NEWS.d/next/Security/2024-02-18-03-14-40.gh-issue-115398.tzvxH8.rst index 97b23936928d91..a40fcd35ef99ae 100644 --- a/Misc/NEWS.d/next/Security/2024-02-18-03-14-40.gh-issue-115398.tzvxH8.rst +++ b/Misc/NEWS.d/next/Security/2024-02-18-03-14-40.gh-issue-115398.tzvxH8.rst @@ -1,8 +1,8 @@ Allow controlling Expat >=2.6.0 reparse deferral (CVE-2023-52425) by adding five new methods: -* ``xml.etree.ElementTree.XMLParser.flush`` -* ``xml.etree.ElementTree.XMLPullParser.flush`` -* ``xml.parsers.expat.xmlparser.GetReparseDeferralEnabled`` -* ``xml.parsers.expat.xmlparser.SetReparseDeferralEnabled`` -* ``xml.sax.expatreader.ExpatParser.flush`` +* :meth:`xml.etree.ElementTree.XMLParser.flush` +* :meth:`xml.etree.ElementTree.XMLPullParser.flush` +* :meth:`xml.parsers.expat.xmlparser.GetReparseDeferralEnabled` +* :meth:`xml.parsers.expat.xmlparser.SetReparseDeferralEnabled` +* :meth:`xml.sax.expatreader.ExpatParser.flush`