GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — [3.14] gh-149017: Upgrade bundled Expat to 2.8.0 (GH-149020) by StanFromIreland · Pull Request #149073 · python/cpython

Conversation

@StanFromIreland

@StanFromIreland StanFromIreland commented Apr 27, 2026 •
edited by bedevere-app Bot
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Member

(cherry picked from commit 005555a)

  • Issue: Upgrade bundled Expat to 2.8.0 (e.g. for the fix to CVE-2026-41080) #149017

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@StanFromIreland
[3.14] pythongh-149017: Upgrade bundled Expat to 2.8.0 (pythonGH-149020)
2510031 
(cherry picked from commit 005555a)

Co-authored-by: Stan Ulbrych <[email protected]>
@StanFromIreland
StanFromIreland requested a review from sethmlarson as a code owner April 27, 2026 20:26
@bedevere-app bedevere-app Bot mentioned this pull request Apr 27, 2026
gh-149017: Upgrade bundled Expat to 2.8.0 #149020
Merged
@bedevere-app bedevere-app Bot added type-security A security issue awaiting core review labels Apr 27, 2026
@bedevere-app bedevere-app Bot mentioned this pull request Apr 27, 2026
Upgrade bundled Expat to 2.8.0 (e.g. for the fix to CVE-2026-41080) #149017
Closed
@StanFromIreland StanFromIreland added needs backport to 3.12 only security fixes needs backport to 3.13 only security fixes labels Apr 27, 2026
@hugovk
hugovk merged commit c181c5f into python:3.14 Apr 28, 2026
60 checks passed

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the awaiting core review label Apr 28, 2026
@miss-islington-app

miss-islington-app Bot commented Apr 28, 2026

Copy link
Copy Markdown

Thanks @StanFromIreland for the PR, and @hugovk for merging it 🌮🎉.. I'm working now to backport this PR to: 3.12, 3.13.
🐍🍒⛏🤖
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@miss-islington-app

miss-islington-app Bot commented Apr 28, 2026

Copy link
Copy Markdown

Sorry, @StanFromIreland and @hugovk, I could not cleanly backport this to 3.12 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker c181c5fa16273f0cc4d7ed20a016e0921f60fdfd 3.12
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app

bedevere-app Bot commented Apr 28, 2026

Copy link
Copy Markdown

GH-149099 is a backport of this pull request to the 3.13 branch.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@miss-islington-app miss-islington-app Bot assigned hugovk Apr 28, 2026
@bedevere-app bedevere-app Bot removed the needs backport to 3.13 only security fixes label Apr 28, 2026
@StanFromIreland
StanFromIreland deleted the backport-005555a-3.14 branch April 28, 2026 18:05
@StanFromIreland StanFromIreland mentioned this pull request May 2, 2026
[3.12] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) #146605
Merged
@Yhg1s Yhg1s added needs backport to 3.12 only security fixes and removed needs backport to 3.12 only security fixes labels May 18, 2026
@miss-islington-app

miss-islington-app Bot commented May 18, 2026

Copy link
Copy Markdown

Thanks @StanFromIreland for the PR, and @hugovk for merging it 🌮🎉.. I'm working now to backport this PR to: 3.12.
🐍🍒⛏🤖
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app

bedevere-app Bot commented May 18, 2026

Copy link
Copy Markdown

GH-150007 is a backport of this pull request to the 3.12 branch.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the needs backport to 3.12 only security fixes label May 18, 2026
Yhg1s pushed a commit that referenced this pull request May 18, 2026
@miss-islington @StanFromIreland
[3.12] gh-149017: Upgrade bundled Expat to 2.8.0 (GH-149020) (GH-149073…
aeb348e 
…) (#150007)

[3.14] gh-149017: Upgrade bundled Expat to 2.8.0 (GH-149020) (GH-149073)
(cherry picked from commit c181c5f)


(cherry picked from commit 005555a)

Co-authored-by: Stan Ulbrych <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sethmlarson sethmlarson Awaiting requested review from sethmlarson sethmlarson is a code owner

Uh oh!

There was an error while loading. Please reload this page.

Assignees

@hugovk hugovk

Labels

type-security A security issue

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

3 participants

@StanFromIreland @hugovk @Yhg1s
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.