Skip to content

Conversation

@miss-islington
Copy link
Contributor

@miss-islington miss-islington commented Dec 3, 2025

  • Remove quadratic behavior in node ID cache clearing

Co-authored-by: Jacob Walls [email protected]

  • Add news fragment

(cherry picked from commit 08d8e18)

Co-authored-by: Seth Michael Larson [email protected]
Co-authored-by: Jacob Walls [email protected]

…ythonGH-142146)

* Remove quadratic behavior in node ID cache clearing

Co-authored-by: Jacob Walls <[email protected]>

* Add news fragment

---------
(cherry picked from commit 08d8e18)

Co-authored-by: Seth Michael Larson <[email protected]>
Co-authored-by: Jacob Walls <[email protected]>
@hugovk
Copy link
Member

hugovk commented Dec 5, 2025

The Android failure is unrelated (some GitHub disk space issue).

But the WASI failure is in this PR's new test:

======================================================================
FAIL: testAppendChildNoQuadraticComplexity (test.test_minidom.MinidomTest.testAppendChildNoQuadraticComplexity)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/Lib/test/test_minidom.py", line 192, in testAppendChildNoQuadraticComplexity
    self.assertLess(end - start, 1)
    ~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^
AssertionError: 2.0126874446868896 not less than 1
----------------------------------------------------------------------
Ran 130 tests in 3.768s
FAILED (failures=1)
test test_minidom failed

@sethmlarson @gpshead

@gpshead gpshead merged commit ddcd2ac into python:3.13 Dec 5, 2025
73 of 75 checks passed
vivian-rook added a commit to vivian-rook/os that referenced this pull request Dec 9, 2025
Patch for python 3.13 has been merged in
python/cpython#142210 though thus far a new point
release has not been added. Cherrypicking in the commit until a new point
release including the commit is added.

chainguard-dev/CVE-Dashboard#51032

Signed-off-by: Vivian Rook <[email protected]>
vivian-rook added a commit to wolfi-dev/advisories that referenced this pull request Dec 9, 2025
github-merge-queue bot pushed a commit to wolfi-dev/advisories that referenced this pull request Dec 10, 2025
python-3.10 Upstream Fix PR: python/cpython#142213
python-3.11 Upstream Fix PR: python/cpython#142212
python-3.12 Upstream Fix PR: python/cpython#142211
python-3.13 Upstream Fix PR: python/cpython#142210
python-3.13 Local Fix PR: wolfi-dev/os#75288
python-3.14 Upstream Fix PR: python/cpython#142209
python-3.14 Local Fix PR: wolfi-dev/os#75289

Related issues:
chainguard-dev/CVE-Dashboard#50689
chainguard-dev/CVE-Dashboard#51027
chainguard-dev/CVE-Dashboard#50150
chainguard-dev/CVE-Dashboard#51032
chainguard-dev/CVE-Dashboard#50978

Signed-off-by: Vivian Rook <[email protected]>
Signed-off-by: Vivian Rook <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants