Description

StanFromIreland

opened on Mar 17, 2026

Issue body actions

See https://blog.hartwork.org/posts/expat-2-7-5-released/ for more information on the release.

Linked PRs

• gh-146083: Upgrade bundled Expat to 2.7.5 #146085
• [3.14] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) #146603
• [3.13] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) #146604
• [3.12] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) #146605
• [3.11] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) #146607
• [3.10] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) #146608

Reacted by Sebastian Pipping

Activity

1. StanFromIreland

   self-assigned this

   on Mar 17, 2026
2. StanFromIreland

   added

   type-securityA security issueA security issue

   extension-modulesC modules in the Modules dirC modules in the Modules dir

   topic-XML

   3.11only security fixesonly security fixes

   3.10 (EOL)end of lifeend of life

   3.12only security fixesonly security fixes

   3.13only security fixesonly security fixes

   3.14bugs and security fixesbugs and security fixes

   3.15bugs and security fixesbugs and security fixes

   on Mar 17, 2026
3. StanFromIreland

   changed the title [-]Upgrade bundled Expat to 2.7.5 (e.g. for the fixes to CVE-2026-3277{6,7,8})[/-] [+]Upgrade bundled Expat to 2.7.5 (e.g. for the fixes to `CVE-2026-3277{6,7,8}`)[/+] on Mar 17, 2026
4. StanFromIreland

   added a commit that references this issue on Mar 29, 2026

   gh-146083: Upgrade bundled Expat to 2.7.5 (#146085)

   e39d84a
5. miss-islington

   added 3 commits that reference this issue on Mar 29, 2026

   pythongh-146083: Upgrade bundled Expat to 2.7.5 (pythonGH-146085)

   364d864

   pythongh-146083: Upgrade bundled Expat to 2.7.5 (pythonGH-146085)

   e6c5ab2

   pythongh-146083: Upgrade bundled Expat to 2.7.5 (pythonGH-146085)

   dbf3098
6. 3 remaining items
7. StanFromIreland

   removed

   3.14bugs and security fixesbugs and security fixes

   3.15bugs and security fixesbugs and security fixes

   on Mar 29, 2026
8. StanFromIreland

   added 2 commits that reference this issue on Mar 29, 2026

   [3.11] pythongh-146083: Upgrade bundled Expat to 2.7.5 (pythonGH-146085)

   feee09d

   [3.10] pythongh-146083: Upgrade bundled Expat to 2.7.5 (pythonGH-146085)

   21543e0
9. maurycy

   added a commit that references this issue on Mar 30, 2026

   Merge remote-tracking branch 'upstream/main' into tachyon-ndjson-kole…

   6a0ea81
10. pablogsal

    added 2 commits that reference this issue on Apr 8, 2026

    [3.11] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) (#146607)

    0d046de

    [3.10] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) (#146608)

    3d7091e
11. StanFromIreland

    removed

    3.11only security fixesonly security fixes

    3.10 (EOL)end of lifeend of life

    on Apr 8, 2026
12. clin1234

    added a commit that references this issue on Apr 16, 2026

    pythongh-146083: Upgrade bundled Expat to 2.7.5 (python#146085)

    ce074c6
13. ljfp

    added a commit that references this issue on Apr 25, 2026

    pythongh-146083: Upgrade bundled Expat to 2.7.5 (python#146085)

    d9c429b
14. StanFromIreland

    marked this as blocking on Apr 26, 2026

    • Upgrade bundled Expat to 2.8.0 (e.g. for the fix to CVE-2026-41080) #149017
15. Yhg1s

    added a commit that references this issue on May 18, 2026

    [3.12] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) (#146605)

    6cad028
16. StanFromIreland

    closed this as completedon May 18, 2026
17. icanhasmath

    added a commit that references this issue on Oct 28, 2026

    [3.10] pythongh-146083: Upgrade bundled Expat to 2.7.5 (pythonGH-146085…

    cf17670

Issue actions