Skip to content

[3.14] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234) #171849

[3.14] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234)

[3.14] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234) #171849

Triggered via pull request November 2, 2025 09:07
Status Success
Total duration 26m 23s
Artifacts 1

build.yml

on: pull_request
Change detection  /  Create context from changed files
13s
Change detection / Create context from changed files
Matrix: build-android
Matrix: Address sanitizer
Matrix: build-macos
Matrix: build-san
Matrix: Ubuntu SSL tests with OpenSSL
Matrix: build-ubuntu
Matrix: build-windows-msi
Waiting for pending jobs
Matrix: build-windows
Matrix: CIFuzz
Docs  /  Docs
1m 50s
Docs / Docs
Docs  /  Doctest
5m 9s
Docs / Doctest
Docs  /  Check EPUB
2m 1s
Docs / Check EPUB
Check if Autoconf files are up to date
23s
Check if Autoconf files are up to date
Check if generated files are up to date
5m 28s
Check if generated files are up to date
iOS
19m 48s
iOS
WASI  /  build and test
9m 42s
WASI / build and test
Hypothesis tests on Ubuntu
13m 3s
Hypothesis tests on Ubuntu
Cross build Linux
4m 1s
Cross build Linux
Check if the ABI has changed
1m 48s
Check if the ABI has changed
All required checks pass
5s
All required checks pass
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 19 warnings
Docs / Docs
Process completed with exit code 2.
Docs / Check EPUB
Process completed with exit code 1.
Docs / Docs: Doc/library/pyexpat.rst#L290
py:class reference target not found: xmlparser [ref.class]
Docs / Docs: Doc/library/pyexpat.rst#L82
py:attr reference target not found: EndElementHandler [ref.attr]
Docs / Docs: Doc/library/pyexpat.rst#L82
py:attr reference target not found: StartElementHandler [ref.attr]
macOS / build and test (macos-14)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS / build and test (macos-14)
tcl-tk@8 8.6.17 is already installed and up-to-date. To reinstall 8.6.17, run: brew reinstall tcl-tk@8
macOS / build and test (macos-14)
gdbm 1.26 is already installed and up-to-date. To reinstall 1.26, run: brew reinstall gdbm
macOS / build and test (macos-14)
xz 5.8.1 is already installed and up-to-date. To reinstall 5.8.1, run: brew reinstall xz
macOS / build and test (macos-14)
pkgconf 2.5.1 is already installed and up-to-date. To reinstall 2.5.1, run: brew reinstall pkgconf
macOS (free-threading) / build and test (macos-14)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS (free-threading) / build and test (macos-14)
tcl-tk@8 8.6.17 is already installed and up-to-date. To reinstall 8.6.17, run: brew reinstall tcl-tk@8
macOS (free-threading) / build and test (macos-14)
gdbm 1.26 is already installed and up-to-date. To reinstall 1.26, run: brew reinstall gdbm
macOS (free-threading) / build and test (macos-14)
xz 5.8.1 is already installed and up-to-date. To reinstall 5.8.1, run: brew reinstall xz
macOS (free-threading) / build and test (macos-14)
pkgconf 2.5.1 is already installed and up-to-date. To reinstall 2.5.1, run: brew reinstall pkgconf
Hypothesis tests on Ubuntu
No files were found with the provided path: /home/runner/work/cpython/cpython-builddir/.hypothesis/examples/. No artifacts will be uploaded.
macOS / build and test (macos-15-intel)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS / build and test (macos-15-intel)
tcl-tk@8 8.6.17 is already installed and up-to-date. To reinstall 8.6.17, run: brew reinstall tcl-tk@8
macOS / build and test (macos-15-intel)
gdbm 1.26 is already installed and up-to-date. To reinstall 1.26, run: brew reinstall gdbm
macOS / build and test (macos-15-intel)
xz 5.8.1 is already installed and up-to-date. To reinstall 5.8.1, run: brew reinstall xz
macOS / build and test (macos-15-intel)
pkgconf 2.5.1 is already installed and up-to-date. To reinstall 2.5.1, run: brew reinstall pkgconf

Artifacts

Produced during runtime
Name Size Digest
UBSan-logs-default
16.4 KB
sha256:bd0ec541ce0e6761f4af160075d2add0f29f9016523e72cd5658c1617f3e51b7