James Hilliard
72e8471b5c
Fixes the following security issues: - CVE-2022-40674: bundled libexpat was upgraded from 2.4.7 to 2.4.9 which fixes a heap use-after-free vulnerability in function doContent - gh-97616: a fix for a possible buffer overflow in list *= int - gh-97612: a fix for possible shell injection in the example script get-remote-certificate.py(this issue originally had a CVE assigned to it, which its author withdrew) - gh-96577: a fix for a potential buffer overrun in msilib License hash changed due to links in license text being changed from http to https: https://github.com/python/cpython/commit/96f8d3619d839266491b722b943de65892bb0e81 Signed-off-by: James Hilliard <james.hilliard1@gmail.com> [Peter: mark as security bump] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>