GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Upgrade bundled Expat to 2.10.0 (e.g. for fixes to four vulnerabilities) · Issue #161192 · python/cpython

Upgrade bundled Expat to 2.10.0 (e.g. for fixes to four vulnerabilities) #161192

New issue
Copy link
New issue
Copy link
Open
Open
Upgrade bundled Expat to 2.10.0 (e.g. for fixes to four vulnerabilities)#161192
Copy link
Assignees
StanFromIreland
Labels
3.11only security fixesonly security fixes3.12only security fixesonly security fixes3.13only security fixesonly security fixes3.14bugs and security fixesbugs and security fixes3.15bugs and security fixesbugs and security fixes3.16new features, bugs and security fixesnew features, bugs and security fixesextension-modulesC modules in the Modules dirC modules in the Modules dirtopic-XMLtype-securityA security issueA security issue

Description

@hartwork
hartwork
opened on Nov 2, 2026
Issue body actions

Please see blog post https://blog.hartwork.org/posts/expat-2-10-0-released/ for an overview and the change log at https://github.com/libexpat/libexpat/blob/R_2_10_0/expat/Changes for details. Affects all alive branches of Python. Thank you! 🙏

Related: #158876 (predecessor for Expat 2.9.0)

CC @StanFromIreland @picnixz @gpshead


  • CVE-2026-113351
  • CVE-2026-115506
  • CVE-2026-117610
  • CVE-2026-118370

Linked PRs

  • gh-161192: Update bundled Expat to 2.10.0 #161202
  • [3.15] gh-161192: Update bundled Expat to 2.10.0 (GH-161202) #161215
  • [3.14] gh-161192: Update bundled Expat to 2.10.0 (GH-161202) #161216
  • [3.13] gh-161192: Update bundled Expat to 2.10.0 (GH-161202) #161217
  • [3.12] gh-161192: Update bundled Expat to 2.10.0 (GH-161202) #161218
  • [3.11] gh-161192: Update bundled Expat to 2.10.0 (GH-161202) #161266

Activity

  1. NekoAsakura
    added
    type-securityA security issueA security issue
    extension-modulesC modules in the Modules dirC modules in the Modules dir
    topic-XML
    on Nov 2, 2026
  2. StanFromIreland
    self-assigned this
    on Nov 2, 2026
  3. StanFromIreland
    added
    3.11only security fixesonly security fixes
    3.12only security fixesonly security fixes
    3.13only security fixesonly security fixes
    3.14bugs and security fixesbugs and security fixes
    3.15bugs and security fixesbugs and security fixes
    3.16new features, bugs and security fixesnew features, bugs and security fixes
    on Nov 2, 2026
  4. StanFromIreland
    added 3 commits that reference this issue on Nov 2, 2026

    gh-161192: Update bundled Expat to 2.10.0 (#161202)

    a7017f2

    [3.15] gh-161192: Update bundled Expat to 2.10.0 (GH-161202) (#161215)

    fe52e40

    [3.14] gh-161192: Update bundled Expat to 2.10.0 (GH-161202) (#161216)

    79c5044
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

  • @StanFromIreland
    StanFromIreland

Labels

3.11only security fixesonly security fixes3.12only security fixesonly security fixes3.13only security fixesonly security fixes3.14bugs and security fixesbugs and security fixes3.15bugs and security fixesbugs and security fixes3.16new features, bugs and security fixesnew features, bugs and security fixesextension-modulesC modules in the Modules dirC modules in the Modules dirtopic-XMLtype-securityA security issueA security issue

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

    You are visitor 01402503 — GeezerVison does not store the pages you look up.
    Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.