GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — [3.11] gh-131261: Update libexpat to 2.7.0 (CVE-2024-8176) (GH-131272) by sethmlarson · Pull Request #131362 · python/cpython

Conversation

@sethmlarson

@sethmlarson sethmlarson commented Mar 17, 2025 •
edited by bedevere-app Bot
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Contributor

(cherry picked from commit bb0268f) (cherry picked from commit 6af54d2)

  • Issue: Please upgrade bundled Expat to 2.7.0 (e.g. for the fix to CVE-2024-8176) #131261

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@encukou @gpshead @sethmlarson
[3.11] [3.13] pythongh-131261: Update libexpat to 2.7.0 (CVE-2024-8176)
0553425 
(cherry picked from commit bb0268f)
(cherry picked from commit 6af54d2)

Co-authored-by: Petr Viktorin <[email protected]>
Co-authored-by: Gregory P. Smith <[email protected]>
@bedevere-app bedevere-app Bot added the awaiting review label Mar 17, 2025
@bedevere-app bedevere-app Bot mentioned this pull request Mar 17, 2025
Please upgrade bundled Expat to 2.7.0 (e.g. for the fix to CVE-2024-8176) #131261
Closed
@sethmlarson sethmlarson added type-security A security issue release-blocker and removed awaiting review labels Mar 17, 2025
@github-project-automation github-project-automation Bot added this to Release and Deferred blockers 🚫 Mar 17, 2025
@github-project-automation github-project-automation Bot moved this to Todo in Release and Deferred blockers 🚫 Mar 17, 2025
@sethmlarson
sethmlarson requested a review from pablogsal March 17, 2025 14:52
@sethmlarson sethmlarson changed the title [3.11] gh-131261: Update libexpat to 2.7.0 (CVE-2024-8176) [3.11] gh-131261: Update libexpat to 2.7.0 (CVE-2024-8176) (GH-131272) Mar 17, 2025
@bedevere-app bedevere-app Bot mentioned this pull request Mar 17, 2025
gh-131261: Update libexpat to 2.7.0 (CVE-2024-8176) #131272
Merged
encukou
encukou approved these changes Mar 17, 2025
View reviewed changes
@bedevere-app bedevere-app Bot added the awaiting merge label Mar 17, 2025
gpshead
gpshead approved these changes Mar 17, 2025
View reviewed changes
@ambv
ambv merged commit ba49eab into python:3.11 Apr 3, 2025
@bedevere-app bedevere-app Bot removed the awaiting merge label Apr 3, 2025
@github-project-automation github-project-automation Bot moved this from Todo to Done in Release and Deferred blockers 🚫 Apr 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@gpshead gpshead gpshead approved these changes
@encukou encukou encukou approved these changes
@pablogsal pablogsal Awaiting requested review from pablogsal

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

release-blocker type-security A security issue

Projects

Release and Deferred blockers 🚫
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

4 participants

@sethmlarson @gpshead @encukou @ambv
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.