GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — gh-138998: Upgrade vendored expat to 2.7.2 by StanFromIreland · Pull Request #138999 · python/cpython

Conversation

@StanFromIreland

@StanFromIreland StanFromIreland commented Sep 16, 2025 •
edited by bedevere-app Bot
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Member
  • Issue: Upgrade bundled Expat to 2.7.2 (e.g. for the fix to CVE-2025-59375) #138998

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
hartwork reacted with thumbs up emoji
All reactions
  • 👍 1 reaction
@StanFromIreland
Commit
c353141
@StanFromIreland
StanFromIreland requested a review from sethmlarson as a code owner September 16, 2025 18:06
@bedevere-app bedevere-app Bot added the awaiting review label Sep 16, 2025
@bedevere-app bedevere-app Bot mentioned this pull request Sep 16, 2025
Upgrade bundled Expat to 2.7.2 (e.g. for the fix to CVE-2025-59375) #138998
Closed
@StanFromIreland
Commit
e9d049b
@hartwork hartwork mentioned this pull request Sep 16, 2025
Release Expat 2.7.2 (ETA 2025-09-16) libexpat/libexpat#1030
Closed
30 tasks done
StanFromIreland added 2 commits September 16, 2025 22:13
@StanFromIreland
Commit
09c9eb1
@StanFromIreland
Commit
be32472
@StanFromIreland

StanFromIreland commented Sep 16, 2025

Copy link
Copy Markdown
Member Author

Note: I had to update release.sh to account for changes in the source invalidating step 3.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@StanFromIreland
Regen sbom with namespacing include
086cdc7
gpshead
gpshead approved these changes Sep 17, 2025
View reviewed changes
@bedevere-app bedevere-app Bot added awaiting merge and removed awaiting review labels Sep 17, 2025
@hugovk
hugovk merged commit 64c876d into python:main Sep 17, 2025
@bedevere-app bedevere-app Bot removed the awaiting merge label Sep 17, 2025
@hugovk hugovk added awaiting merge needs backport to 3.9 needs backport to 3.11 only security fixes needs backport to 3.12 only security fixes needs backport to 3.13 only security fixes needs backport to 3.14 bugs and security fixes labels Sep 17, 2025
@miss-islington-app

miss-islington-app Bot commented Sep 17, 2025

Copy link
Copy Markdown

Thanks @StanFromIreland for the PR, and @hugovk for merging it 🌮🎉.. I'm working now to backport this PR to: 3.10.
🐍🍒⛏🤖
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@miss-islington-app

miss-islington-app Bot commented Sep 17, 2025

Copy link
Copy Markdown

Thanks @StanFromIreland for the PR, and @hugovk for merging it 🌮🎉.. I'm working now to backport this PR to: 3.9.
🐍🍒⛏🤖
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@miss-islington-app

miss-islington-app Bot commented Sep 17, 2025

Copy link
Copy Markdown

Thanks @StanFromIreland for the PR, and @hugovk for merging it 🌮🎉.. I'm working now to backport this PR to: 3.11.
🐍🍒⛏🤖
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@miss-islington-app

miss-islington-app Bot commented Sep 17, 2025

Copy link
Copy Markdown

Thanks @StanFromIreland for the PR, and @hugovk for merging it 🌮🎉.. I'm working now to backport this PR to: 3.14.
🐍🍒⛏🤖 I'm not a witch! I'm not a witch!
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@miss-islington-app

miss-islington-app Bot commented Sep 17, 2025

Copy link
Copy Markdown

Thanks @StanFromIreland for the PR, and @hugovk for merging it 🌮🎉.. I'm working now to backport this PR to: 3.13.
🐍🍒⛏🤖
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@miss-islington-app

miss-islington-app Bot commented Sep 17, 2025

Copy link
Copy Markdown

Thanks @StanFromIreland for the PR, and @hugovk for merging it 🌮🎉.. I'm working now to backport this PR to: 3.12.
🐍🍒⛏🤖
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@miss-islington-app

miss-islington-app Bot commented Sep 17, 2025

Copy link
Copy Markdown

Sorry, @StanFromIreland and @hugovk, I could not cleanly backport this to 3.10 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 64c876dd6812ade19cb7a0c619111d30f0b2b860 3.10
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@miss-islington-app miss-islington-app Bot assigned hugovk Sep 17, 2025
miss-islington pushed a commit to miss-islington/cpython that referenced this pull request Sep 17, 2025
@StanFromIreland @miss-islington
pythongh-138998: Upgrade vendored expat to 2.7.2 (pythonGH-138999)
0a2c48c 
(cherry picked from commit 64c876d)

Co-authored-by: Stan Ulbrych <[email protected]>
miss-islington pushed a commit to miss-islington/cpython that referenced this pull request Sep 17, 2025
@StanFromIreland @miss-islington
pythongh-138998: Upgrade vendored expat to 2.7.2 (pythonGH-138999)
3151104 
(cherry picked from commit 64c876d)

Co-authored-by: Stan Ulbrych <[email protected]>
@bedevere-app

bedevere-app Bot commented Sep 17, 2025

Copy link
Copy Markdown

GH-139024 is a backport of this pull request to the 3.14 branch.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the needs backport to 3.14 bugs and security fixes label Sep 17, 2025
miss-islington pushed a commit to miss-islington/cpython that referenced this pull request Sep 17, 2025
@StanFromIreland @miss-islington
pythongh-138998: Upgrade vendored expat to 2.7.2 (pythonGH-138999)
1db9417 
(cherry picked from commit 64c876d)

Co-authored-by: Stan Ulbrych <[email protected]>
@bedevere-app

bedevere-app Bot commented Sep 17, 2025

Copy link
Copy Markdown

GH-139025 is a backport of this pull request to the 3.13 branch.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the needs backport to 3.13 only security fixes label Sep 17, 2025
@bedevere-app

bedevere-app Bot commented Sep 17, 2025

Copy link
Copy Markdown

GH-139026 is a backport of this pull request to the 3.12 branch.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the needs backport to 3.12 only security fixes label Sep 17, 2025
@StanFromIreland
StanFromIreland deleted the libexpat branch September 17, 2025 12:32
@StanFromIreland

StanFromIreland commented Sep 17, 2025

Copy link
Copy Markdown
Member Author

I can take care of backports.
gpshead reacted with heart emoji
All reactions
  • ❤️ 1 reaction

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@StanFromIreland StanFromIreland assigned StanFromIreland and unassigned hugovk Sep 17, 2025
hugovk pushed a commit that referenced this pull request Sep 17, 2025
@miss-islington @StanFromIreland
[3.14] gh-138998: Upgrade vendored expat to 2.7.2 (GH-138999) (#139024)
97f4ac2 
Co-authored-by: Stan Ulbrych <[email protected]>
@StanFromIreland StanFromIreland mentioned this pull request Sep 17, 2025
gh-138998: expat/refresh.sh: Fail if Step 3 is not completed #139049
Merged
StanFromIreland added a commit to StanFromIreland/cpython that referenced this pull request Sep 17, 2025
@StanFromIreland
pythongh-138998: Upgrade vendored expat to 2.7.2 (python#138999)
fe33e03 
(cherry picked from commit 64c876d)
@bedevere-app

bedevere-app Bot commented Sep 17, 2025

Copy link
Copy Markdown

GH-139053 is a backport of this pull request to the 3.10 branch.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the needs backport to 3.10 label Sep 17, 2025
StanFromIreland added a commit to StanFromIreland/cpython that referenced this pull request Sep 17, 2025
@StanFromIreland
[3.9] pythongh-138998: Upgrade vendored expat to 2.7.2 (pythonGH-138999)
efe2c7d 
(cherry picked from commit 64c876d)

Co-authored-by: Stan Ulbrych <[email protected]>
@bedevere-app

bedevere-app Bot commented Sep 17, 2025

Copy link
Copy Markdown

GH-139055 is a backport of this pull request to the 3.9 branch.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the needs backport to 3.9 label Sep 17, 2025
StanFromIreland added a commit to StanFromIreland/cpython that referenced this pull request Sep 17, 2025
@StanFromIreland
pythongh-138998: Upgrade vendored expat to 2.7.2 (python#138999)
fc3c575 
(cherry picked from commit 64c876d)
@bedevere-app

bedevere-app Bot commented Sep 17, 2025

Copy link
Copy Markdown

GH-139056 is a backport of this pull request to the 3.11 branch.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the needs backport to 3.11 only security fixes label Sep 17, 2025
Yhg1s pushed a commit that referenced this pull request Sep 18, 2025
@miss-islington @StanFromIreland @gpshead
[3.13] gh-138998: Upgrade vendored expat to 2.7.2 (GH-138999) (#139025)
ccf4b3e 
(cherry picked from commit 64c876d)

Co-authored-by: Stan Ulbrych <[email protected]>
Co-authored-by: Gregory P. Smith <[email protected]>
@hartwork hartwork mentioned this pull request Sep 24, 2025
Please upgrade bundled Expat to 2.7.3 (e.g. for two key bugfixes) #139312
Closed
pablogsal pushed a commit that referenced this pull request Sep 26, 2025
@StanFromIreland
[3.11] gh-138998: Upgrade vendored expat to 2.7.2 (#138999) (#139056)
048f00d 
gh-138998: Upgrade vendored expat to 2.7.2 (#138999)

(cherry picked from commit 64c876d)
pablogsal pushed a commit that referenced this pull request Sep 26, 2025
@StanFromIreland
[3.10] gh-138998: Upgrade vendored expat to 2.7.2 (#138999) (#139053)
a99632f 
gh-138998: Upgrade vendored expat to 2.7.2 (#138999)

(cherry picked from commit 64c876d)
Yhg1s pushed a commit that referenced this pull request Oct 6, 2025
@miss-islington @StanFromIreland @gpshead
[3.12] gh-138998: Upgrade vendored expat to 2.7.2 (GH-138999) (#139026)
bfb9e2f 
(cherry picked from commit 64c876d)

Co-authored-by: Stan Ulbrych <[email protected]>
Co-authored-by: Gregory P. Smith <[email protected]>
Co-authored-by: Stan Ulbrych <[email protected]>
ambv pushed a commit that referenced this pull request Oct 7, 2025
@StanFromIreland
[3.9] gh-138998: Upgrade vendored expat to 2.7.2 (GH-138999) (GH-139055)
f3d8338 
(cherry picked from commit 64c876d)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@gpshead gpshead gpshead approved these changes
@sethmlarson sethmlarson Awaiting requested review from sethmlarson sethmlarson is a code owner

Uh oh!

There was an error while loading. Please reload this page.

Assignees

@StanFromIreland StanFromIreland

Labels

awaiting merge

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

3 participants

@StanFromIreland @gpshead @hugovk
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.