GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Upgrade bundled Expat to 2.8.5 (e.g. for fix to vulnerability CVE-2026-93990) · Issue #157953 · python/cpython

Upgrade bundled Expat to 2.8.5 (e.g. for fix to vulnerability CVE-2026-93990) #157953

New issue
Copy link
New issue
Copy link
Closed
Closed
Upgrade bundled Expat to 2.8.5 (e.g. for fix to vulnerability CVE-2026-93990)#157953
Copy link
Assignees
StanFromIreland
Labels
3.10 (EOL)end of lifeend of life3.11only security fixesonly security fixes3.12only security fixesonly security fixesextension-modulesC modules in the Modules dirC modules in the Modules dirrelease-blockertopic-XMLtype-securityA security issueA security issue

Description

@hartwork
hartwork
opened on Sep 22, 2026
Issue body actions

Please see blog post https://blog.hartwork.org/posts/expat-2-8-5-released/ for an overview and the change log at https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/Changes for details. Affects all alive branches of Python. Thank you!

Related: #156723 (predecessor for Expat 2.8.4)

CC @StanFromIreland


  • CVE-2026-93990
  • gh-157953: Update bundled Expat to 2.8.5 #157957
  • [3.15] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) #157998
  • [3.14] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) #157996
  • [3.13] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) #157997
  • [3.12] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) #157999
  • [3.11] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) #158343
  • [3.10] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) #158327

Activity

  1. StanFromIreland
    self-assigned this
    on Sep 22, 2026
  2. StanFromIreland
    added
    type-securityA security issueA security issue
    extension-modulesC modules in the Modules dirC modules in the Modules dir
    topic-XML
    3.11only security fixesonly security fixes
    3.10 (EOL)end of lifeend of life
    3.12only security fixesonly security fixes
    3.13only security fixesonly security fixes
    3.14bugs and security fixesbugs and security fixes
    3.15bugs and security fixesbugs and security fixes
    3.16new features, bugs and security fixesnew features, bugs and security fixes
    on Sep 22, 2026
  3. StanFromIreland
    marked this as blocked on Sep 22, 2026
    • Upgrade bundled Expat to 2.8.4 (e.g. for 4 security fixes) #156723
  4. StanFromIreland
    added
    release-blocker
    on Sep 22, 2026
  5. github-project-automation
    added this to Release and Deferred blockers 🚫on Sep 22, 2026
  6. github-project-automation
    moved this to Todo in Release and Deferred blockers 🚫on Sep 22, 2026
  7. hugovk
    changed the title [-]Please upgrade bundled Expat to 2.8.5 (e.g. for fix to vulnerability CVE-2026-93990)[/-] [+]Upgrade bundled Expat to 2.8.5 (e.g. for fix to vulnerability CVE-2026-93990)[/+] on Sep 22, 2026
  8. StanFromIreland
    added a commit that references this issue on Sep 23, 2026

    gh-157953: Update bundled Expat to 2.8.5 (#157957)

    5f1f218
  9. hugovk
    added a commit that references this issue on Sep 23, 2026

    [3.13] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) (#157997)

    388a06c
  10. hugovk
    removed
    3.13only security fixesonly security fixes
    3.16new features, bugs and security fixesnew features, bugs and security fixes
    on Sep 23, 2026
  11. hugovk
    added a commit that references this issue on Sep 23, 2026

    [3.14] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) (#157996)

    5659aee
  12. hugovk
    removed
    3.14bugs and security fixesbugs and security fixes
    on Sep 23, 2026
  13. hugovk
    added a commit that references this issue on Sep 23, 2026

    [3.15] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) (#157998)

    ffbbdad
  14. hugovk
    removed
    3.15bugs and security fixesbugs and security fixes
    on Sep 23, 2026
  15. Yhg1s
    added a commit that references this issue on Sep 30, 2026

    [3.12] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) (#157999)

    308b715
  16. pablogsal
    added 2 commits that reference this issue on Oct 1, 2026

    [3.10] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) (#158327)

    4fda068

    [3.11] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) (#158343)

    f60b7eb
  17. hugovk
    closed this as completedon Oct 1, 2026
  18. github-project-automation
    moved this from Todo to Done in Release and Deferred blockers 🚫on Oct 1, 2026
  19. icanhasmath
    added a commit that references this issue on Oct 28, 2026

    [3.10] pythongh-157953: Update bundled Expat to 2.8.5 (pythonGH-157957)…

    7203c6a
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

  • @StanFromIreland
    StanFromIreland

Labels

3.10 (EOL)end of lifeend of life3.11only security fixesonly security fixes3.12only security fixesonly security fixesextension-modulesC modules in the Modules dirC modules in the Modules dirrelease-blockertopic-XMLtype-securityA security issueA security issue

Projects

  • Release and Deferred blockers 🚫
    Status
    Done
    Show more project fields

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.