GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — [3.13] gh-144363: Update bundled libexpat to 2.7.4 (GH-144365) by miss-islington · Pull Request #144500 · python/cpython

Conversation

@miss-islington

@miss-islington miss-islington commented Feb 5, 2026 •
edited by encukou
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Contributor

(cherry picked from commit d5cb9f6)

Co-authored-by: Stan Ulbrych [email protected]
Co-authored-by: Gregory P. Smith [email protected]
Co-authored-by: Petr Viktorin [email protected]

  • Issue: [security] Please upgrade bundled Expat to 2.7.4 (e.g. for the fixes to CVE-2026-24515 and CVE-2026-25210) #144363

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@StanFromIreland @gpshead
@encukou @miss-islington
pythongh-144363: Update bundled libexpat to 2.7.4 (pythonGH-144365)
59e114f 
* Update to 2.7.4

* update expat license copyright year to match and a pedantic #define

* include COPYING update in refresh.sh

* Update checksum for copying

---------
(cherry picked from commit d5cb9f6)

Co-authored-by: Stan Ulbrych <[email protected]>
Co-authored-by: Gregory P. Smith <[email protected]>
Co-authored-by: Petr Viktorin <[email protected]>
@miss-islington
miss-islington requested a review from sethmlarson as a code owner February 5, 2026 12:58
@bedevere-app bedevere-app Bot added the awaiting review label Feb 5, 2026
This was referenced Feb 5, 2026
[security] Please upgrade bundled Expat to 2.7.4 (e.g. for the fixes to CVE-2026-24515 and CVE-2026-25210) #144363
Closed
gh-144363: Update bundled libexpat to 2.7.4 #144365
Merged
@encukou
pythongh-131261: expat/refresh.sh: Expand list of manual steps (pytho…
dc73ce3 
…nGH-131359)

This backports commit: 51d3099
@encukou encukou mentioned this pull request Feb 9, 2026
[3.13] gh-131261: generate_sbom.py: Exclude the refresh script from SBOM (GH-131359) #144625
Merged
@encukou
encukou marked this pull request as draft February 9, 2026 13:34
@bedevere-app bedevere-app Bot removed the awaiting review label Feb 9, 2026
encukou added 2 commits February 10, 2026 13:28
@encukou
Revert "pythongh-131261: expat/refresh.sh: Expand list of manual steps (
f3aaef0 
pythonGH-131359)"

This reverts commit dc73ce3.
@encukou
Merge in the '3.13' branch
985c219
@encukou

encukou commented Feb 10, 2026

Copy link
Copy Markdown
Member

With #144625 merged, this backport only touches expat.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@encukou
encukou marked this pull request as ready for review February 10, 2026 12:47
@bedevere-app bedevere-app Bot added the awaiting review label Feb 10, 2026
@encukou
encukou merged commit 7fbdec4 into python:3.13 Feb 10, 2026
45 checks passed

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the awaiting review label Feb 10, 2026
@miss-islington
miss-islington deleted the backport-d5cb9f6-3.13 branch February 10, 2026 12:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sethmlarson sethmlarson Awaiting requested review from sethmlarson sethmlarson is a code owner

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

3 participants

@miss-islington @encukou @StanFromIreland
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.