Document new CVE-2023-52425 Expat API

python · Feb 18, 2024 · 8c26bbe · 8c26bbe
1 parent 4fe05d3
commit 8c26bbe
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/Misc/NEWS.d/next/Security/2024-02-18-03-14-40.gh-issue-115398.tzvxH8.rst b/Misc/NEWS.d/next/Security/2024-02-18-03-14-40.gh-issue-115398.tzvxH8.rst
@@ -0,0 +1,7 @@
+Allow controlling Expat >=2.6.0 reparse deferral (CVE-2023-52425) by adding
+four new methods:
+
+* ``pyexpat.xmlparser.SetReparseDeferralEnabled``
+* ``xml.etree.ElementTree.XMLParser.flush``
+* ``xml.etree.ElementTree.XMLPullParser.flush``
+* ``xml.sax.expatreader.ExpatParser.flush``