GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Upgrade bundled Expat to 2.8.3 (e.g. for the fix to CVE-2026-72522) · Issue #155558 · python/cpython

Upgrade bundled Expat to 2.8.3 (e.g. for the fix to CVE-2026-72522) #155558

New issue
Copy link
New issue
Copy link
Closed
Closed
Upgrade bundled Expat to 2.8.3 (e.g. for the fix to CVE-2026-72522)#155558
Copy link
Assignees
StanFromIreland
Labels
3.10 (EOL)end of lifeend of life3.11only security fixesonly security fixes3.12only security fixesonly security fixes3.13only security fixesonly security fixes3.14bugs and security fixesbugs and security fixes3.15bugs and security fixesbugs and security fixes3.16new features, bugs and security fixesnew features, bugs and security fixesextension-modulesC modules in the Modules dirC modules in the Modules dirtopic-XMLtype-securityA security issueA security issue

Description

@hartwork
hartwork
opened on Aug 11, 2026
Issue body actions

Please see blog post https://blog.hartwork.org/posts/expat-2-8-3-released/ for an overview and the change log at https://github.com/libexpat/libexpat/blob/R_2_8_3/expat/Changes for details. Affects all alive branches of Python. Thank you!

Related: #152216 (predecessor for Expat 2.8.2)

CC @StanFromIreland


  • CVE-2026-72522

Linked PRs

  • gh-155558: Update bundled Expat to 2.8.3 #155560
  • [3.15] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) #155612
  • [3.14] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) #155613
  • [3.13] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) #155614
  • [3.12] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) #155615
  • [3.11] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) #155616
  • [3.10] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) #155618
Reacted by Stan Ulbrych

Activity

  1. StanFromIreland
    self-assigned this
    on Aug 11, 2026
  2. StanFromIreland
    added
    type-securityA security issueA security issue
    extension-modulesC modules in the Modules dirC modules in the Modules dir
    topic-XML
    3.11only security fixesonly security fixes
    3.10 (EOL)end of lifeend of life
    3.12only security fixesonly security fixes
    3.13only security fixesonly security fixes
    3.14bugs and security fixesbugs and security fixes
    3.15bugs and security fixesbugs and security fixes
    3.16new features, bugs and security fixesnew features, bugs and security fixes
    on Aug 11, 2026
  3. hartwork
    changed the title [-][security] Upgrade bundled Expat to 2.8.3 (e.g. for the fix to CVE-2026-72522)[/-] [+]Upgrade bundled Expat to 2.8.3 (e.g. for the fix to CVE-2026-72522)[/+] on Aug 11, 2026
  4. StanFromIreland commented on Aug 11, 2026

    @StanFromIreland
    StanFromIreland
    on Aug 11, 2026
    Member
    More actions

    @hartwork Thanks for letting us know! JFYI for the future, you don't need to add [security] to the title here, we have labels to distinguish such things.

  5. StanFromIreland
    marked this as blocked on Aug 11, 2026
    • Upgrade bundled Expat to 2.8.2 (e.g. for the fix to CVE-2026-56132 and 12 others) #152216
  6. encukou
    added a commit that references this issue on Aug 12, 2026

    gh-155558: Update bundled Expat to 2.8.3 (GH-155560)

    3d6a505
  7. Yhg1s
    added a commit that references this issue on Aug 12, 2026

    [3.12] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) (#155615)

    c546712
  8. StanFromIreland
    added 2 commits that reference this issue on Aug 12, 2026

    [3.13] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) (#155614)

    35c8011

    [3.14] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) (#155613)

    b842ab8
  9. hugovk
    added a commit that references this issue on Aug 12, 2026

    [3.15] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) (#155612)

    d390759
  10. pablogsal
    added 2 commits that reference this issue on Aug 12, 2026

    [3.11] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) (#155616)

    87536d5

    [3.10] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) (#155618)

    451ece9
  11. encukou
    closed this as completedon Aug 13, 2026
  12. mbeijen
    added a commit that references this issue on Aug 14, 2026

    pythongh-155558: Update bundled Expat to 2.8.3 (pythonGH-155560)

    6e89ff5
  13. icanhasmath
    added a commit that references this issue on Oct 28, 2026

    [3.10] pythongh-155558: Update bundled Expat to 2.8.3 (pythonGH-155560)…

    7c49f9a
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

  • @StanFromIreland
    StanFromIreland

Labels

3.10 (EOL)end of lifeend of life3.11only security fixesonly security fixes3.12only security fixesonly security fixes3.13only security fixesonly security fixes3.14bugs and security fixesbugs and security fixes3.15bugs and security fixesbugs and security fixes3.16new features, bugs and security fixesnew features, bugs and security fixesextension-modulesC modules in the Modules dirC modules in the Modules dirtopic-XMLtype-securityA security issueA security issue

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

    You are visitor 01402503 — GeezerVison does not store the pages you look up.
    Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.