GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Please upgrade bundled Expat to 2.7.3 (e.g. for two key bugfixes) · Issue #139312 · python/cpython

Please upgrade bundled Expat to 2.7.3 (e.g. for two key bugfixes) #139312

New issue
Copy link
New issue
Copy link
Closed
Closed
Please upgrade bundled Expat to 2.7.3 (e.g. for two key bugfixes)#139312
Copy link
Labels
extension-modulesC modules in the Modules dirC modules in the Modules dirtopic-XMLtype-securityA security issueA security issue

Description

@hartwork
hartwork
opened on Sep 24, 2025
Issue body actions

Bug report

Bug description:

Hello! 👋

(Once the upgrade to Expat 2.7.2 is complete at #138998) please upgrade bundled Expat to 2.7.3 (e.g. for two key bugfixes).

  • GitHub release: https://github.com/libexpat/libexpat/releases/tag/R_2_7_3
  • Change log: https://github.com/libexpat/libexpat/blob/R_2_7_3/expat/Changes

The CPython issue for previous 2.7.2 was #138998 and the related merged main pull request was #138999, in case you want to have a look. (The Dockerfile from comment #123689 (review) could be of help with raising confidence in a bump pull request when going forward.)

Thanks in advance!

CC @gpshead @StanFromIreland

CPython versions tested on:

3.9, 3.10, 3.11, 3.12, 3.13, 3.14, 3.15, CPython main branch

Operating systems tested on:

Linux, macOS, Windows, Other

Linked PRs

  • gh-139312: Update bundled libexpat to 2.7.3 #139319
  • [3.14] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) #139376
  • [3.12] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) #139662
  • [3.13] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) #139377
  • [3.11] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) #139378
  • [3.10] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) #139379
  • [3.9] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) #139697
Reacted by Hedley

Activity

Next
  1. emmatyping
    added
    extension-modulesC modules in the Modules dirC modules in the Modules dir
    topic-XML
    3.13only security fixesonly security fixes
    3.14bugs and security fixesbugs and security fixes
    3.15bugs and security fixesbugs and security fixes
    on Sep 25, 2025
  2. picnixz
    added
    type-securityA security issueA security issue
    3.11only security fixesonly security fixes
    3.10 (EOL)end of lifeend of life
    3.12only security fixesonly security fixes
    on Sep 25, 2025

  3. picnixz commented on Sep 25, 2025

    @picnixz
    picnixz
    on Sep 25, 2025
    Member
    More actions

    I'm not adding the 3.9 tag because I don't think we'll backport 2.7.2 to 3.9 considering it's EOL in October.

    Reacted by Sebastian Pipping and Gregory P. Smith
  4. picnixz
    added
    release-blocker
    on Sep 25, 2025
  5. github-project-automation
    added this to Release and Deferred blockers 🚫on Sep 25, 2025
  6. github-project-automation
    moved this to Todo in Release and Deferred blockers 🚫on Sep 25, 2025

  7. StanFromIreland commented on Sep 25, 2025

    @StanFromIreland
    StanFromIreland
    on Sep 25, 2025
    Member
    More actions

    Makes sense IMO.

    Reacted by Sebastian Pipping and Gregory P. Smith
  8. gpshead
    added a commit that references this issue on Sep 27, 2025

    gh-139312: Update bundled libexpat to 2.7.3 (GH-139319)

    48d0d0d

  9. 27 remaining items

  10. picnixz
    added
    release-blocker
    3.9 (EOL)end of lifeend of life
    and removed
    release-blocker
    on Oct 7, 2025

  11. picnixz commented on Oct 7, 2025

    @picnixz
    picnixz
    on Oct 7, 2025
    Member
    More actions

    Once 2.7.2 is backported, please backport 2.7.3. Thank you for that and sorry for changing the decision at the end.

  12. hartwork commented on Oct 7, 2025

    @hartwork
    hartwork
    on Oct 7, 2025
    ContributorAuthor
    More actions

    Once 2.7.2 is backported, please backport 2.7.3. Thank you for that and sorry for changing the decision at the end.

    @StanFromIreland I'm good with you or me doing it. I can get to it some time later today in the evening if it's not been done already by then, as you like 🤝

    Reacted by Stan Ulbrych

  13. StanFromIreland commented on Oct 7, 2025

    @StanFromIreland
    StanFromIreland
    on Oct 7, 2025
    Member
    More actions

    SGTM

  14. miss-islington
    added a commit that references this issue on Oct 7, 2025

    [3.10] pythongh-139312: Update bundled libexpat to 2.7.3 (pythonGH-13…

    c3f6eec

  15. StanFromIreland commented on Oct 7, 2025

    @StanFromIreland
    StanFromIreland
    on Oct 7, 2025
    Member
    More actions

    I got Bedevere to do it instead:-)

    Reacted by Sebastian Pipping
  16. ambv
    added a commit that references this issue on Oct 7, 2025

    [3.9] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) (GH-139697

    e26ba93

  17. hartwork commented on Oct 7, 2025

    @hartwork
    hartwork
    on Oct 7, 2025
    ContributorAuthor
    More actions

    @StanFromIreland perfect, thanks! 👍

    @picnixz could you drop label 3.9 for me? I'll go ahead and close as done…

  18. hartwork
    closed this as completedon Oct 7, 2025
  19. github-project-automation
    moved this from In Progress to Done in Release and Deferred blockers 🚫on Oct 7, 2025
  20. StanFromIreland
    removed
    3.9 (EOL)end of lifeend of life
    on Oct 7, 2025

  21. StanFromIreland commented on Oct 7, 2025

    @StanFromIreland
    StanFromIreland
    on Oct 7, 2025
    Member
    More actions

    could you drop label 3.9 for me? I'll go ahead and close as done…

    FYI I removed it, but once it's closed we don't need to worry about such labels.

  22. hartwork commented on Oct 7, 2025

    @hartwork
    hartwork
    on Oct 7, 2025
    ContributorAuthor
    More actions

    @StanFromIreland thanks, now even future visitors with OCD will feel at home again 😃

    Reacted by Stan Ulbrych
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    extension-modulesC modules in the Modules dirC modules in the Modules dirtopic-XMLtype-securityA security issueA security issue

    Projects

    • Release and Deferred blockers 🚫
      Status
      Done
      Show more project fields

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions
    You are visitor 01402503 — GeezerVison does not store the pages you look up.
    Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.