GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — [3.12] gh-138998: Upgrade vendored expat to 2.7.2 (GH-138999) by miss-islington · Pull Request #139026 · python/cpython

Conversation

@miss-islington

@miss-islington miss-islington commented Sep 17, 2025 •
edited by bedevere-app Bot
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Contributor

(cherry picked from commit 64c876d)

Co-authored-by: Stan Ulbrych [email protected]

  • Issue: Upgrade bundled Expat to 2.7.2 (e.g. for the fix to CVE-2025-59375) #138998

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
mowmanminer reacted with hooray emoji
All reactions
  • 🎉 1 reaction
@StanFromIreland @miss-islington
pythongh-138998: Upgrade vendored expat to 2.7.2 (pythonGH-138999)
1db9417 
(cherry picked from commit 64c876d)

Co-authored-by: Stan Ulbrych <[email protected]>
@miss-islington
miss-islington requested a review from sethmlarson as a code owner September 17, 2025 10:47
@bedevere-app bedevere-app Bot added the awaiting review label Sep 17, 2025
This was referenced Sep 17, 2025
Upgrade bundled Expat to 2.7.2 (e.g. for the fix to CVE-2025-59375) #138998
Closed
gh-138998: Upgrade vendored expat to 2.7.2 #138999
Merged
gpshead
gpshead approved these changes Sep 17, 2025
View reviewed changes
@bedevere-app bedevere-app Bot added awaiting merge and removed awaiting review labels Sep 17, 2025
@gpshead gpshead added the release-blocker label Sep 17, 2025
@github-project-automation github-project-automation Bot added this to Release and Deferred blockers 🚫 Sep 17, 2025
@github-project-automation github-project-automation Bot moved this to Todo in Release and Deferred blockers 🚫 Sep 17, 2025
@gpshead
make regen-sbom
8095d91
@StanFromIreland StanFromIreland mentioned this pull request Sep 25, 2025
[3.12] gh-139330: Check expat version/checksum in SBOM with refresh.sh #139339
Merged
StanFromIreland and others added 2 commits September 26, 2025 18:27
@StanFromIreland
Merge branch '3.12' into backport-64c876d-3.12
fdca906
@StanFromIreland
Update sbom.spdx.json
fdec3fc
@StanFromIreland

StanFromIreland commented Sep 26, 2025

Copy link
Copy Markdown
Member

CC @sethmlarson Updated the package details.
sethmlarson reacted with heart emoji
All reactions
  • ❤️ 1 reaction

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
sethmlarson
sethmlarson approved these changes Sep 26, 2025
View reviewed changes
@sethmlarson sethmlarson assigned Yhg1s Sep 26, 2025
@StanFromIreland StanFromIreland mentioned this pull request Sep 27, 2025
gh-139312: Update bundled libexpat to 2.7.3 #139319
Merged
gpshead
gpshead approved these changes Sep 27, 2025
View reviewed changes
@hartwork

hartwork commented Sep 29, 2025

Copy link
Copy Markdown
Contributor

@Yhg1s any chance this could be merged?
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@hartwork

hartwork commented Oct 4, 2025

Copy link
Copy Markdown
Contributor

@Yhg1s any chance this could be merged? I'm asking because it fixes security issues, because it is blocking the follow-up backport of #139312 and because 3.12 is the last backport missing to complete #138998 (and also #139312). Thanks in advance!

CC @picnixz
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@picnixz picnixz mentioned this pull request Oct 6, 2025
Please upgrade bundled Expat to 2.7.3 (e.g. for two key bugfixes) #139312
Closed
@Yhg1s
Yhg1s merged commit bfb9e2f into python:3.12 Oct 6, 2025
5 checks passed

Uh oh!

There was an error while loading. Please reload this page.
@github-project-automation github-project-automation Bot moved this from Todo to Done in Release and Deferred blockers 🚫 Oct 6, 2025
@bedevere-app bedevere-app Bot removed the awaiting merge label Oct 6, 2025
@hartwork

hartwork commented Oct 6, 2025

Copy link
Copy Markdown
Contributor

@Yhg1s thank you! Backport for 2.7.3 upcoming…
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@miss-islington
miss-islington deleted the backport-64c876d-3.12 branch January 2, 2026 17:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@gpshead gpshead gpshead approved these changes
@sethmlarson sethmlarson sethmlarson approved these changes

Uh oh!

There was an error while loading. Please reload this page.

Assignees

@Yhg1s Yhg1s

Labels

release-blocker

Projects

Release and Deferred blockers 🚫
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

6 participants

@miss-islington @StanFromIreland @hartwork @gpshead @sethmlarson @Yhg1s
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.