Document new CVE-2023-52425 Expat API

hartwork · hartwork · commit f05676e0f590 · 2024-02-18T03:48:58.000+01:00
diff --git a/Misc/NEWS.d/next/Security/2024-02-18-03-14-40.gh-issue-115398.tzvxH8.rst b/Misc/NEWS.d/next/Security/2024-02-18-03-14-40.gh-issue-115398.tzvxH8.rst
@@ -0,0 +1,7 @@
+Allow controlling Expat >=2.6.0 reparse deferral (CVE-2023-52425) by adding
+four new methods:
+
+* ``pyexpat.xmlparser.SetReparseDeferralEnabled``
+* ``xml.etree.ElementTree.XMLParser.flush``
+* ``xml.etree.ElementTree.XMLPullParser.flush``
+* ``xml.sax.expatreader.ExpatParser.flush``
