On Mon, Mar 16, 2026 at 11:30:09PM +0000, Stuart Henderson wrote:
> On 2026/03/16 23:23, Stuart Henderson wrote:
> > This updates to February's release, and cherry-picks two recent CVE
> > fixes (med/high). I expect another release will be on the way at some
> > point but seems worth bringing them in already.
> > 
> > Diff to follow for 7.8-stable.
> 
> There's no commit on the 3.12 branch for those CVEs yet; probably
> doesn't need a lot of work but for now here's the 3.12.13 update with
> the required bits to cope with our expat build.

Also looks good, ok tb.

For the cherry-picks we can probably just take the diffs from the PRs:

https://github.com/python/cpython/pull/145999
https://github.com/python/cpython/pull/146025