GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — gh-161192: Update bundled Expat to 2.10.0 by StanFromIreland · Pull Request #161202 · python/cpython

Conversation

@StanFromIreland

@StanFromIreland StanFromIreland commented Nov 2, 2026 •
edited by bedevere-app Bot
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Member
  • Issue: Upgrade bundled Expat to 2.10.0 (e.g. for fixes to four vulnerabilities) #161192

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@StanFromIreland
Update bundled Expat to 2.10.0
a55300e
@StanFromIreland
StanFromIreland requested review from encukou and gpshead November 2, 2026 18:33
@StanFromIreland StanFromIreland added type-security A security issue release-blocker needs backport to 3.11 only security fixes needs backport to 3.12 only security fixes needs backport to 3.13 only security fixes labels Nov 2, 2026
@github-project-automation github-project-automation Bot added this to Release and Deferred blockers 🚫 Nov 2, 2026
@StanFromIreland
StanFromIreland requested a review from a team as a code owner November 2, 2026 18:33
@StanFromIreland StanFromIreland added needs backport to 3.14 bugs and security fixes needs backport to 3.15 bugs and security fixes labels Nov 2, 2026
@StanFromIreland
StanFromIreland requested review from erlend-aasland and sethmlarson as code owners November 2, 2026 18:33
@bedevere-app bedevere-app Bot added the awaiting core review label Nov 2, 2026
@github-project-automation github-project-automation Bot moved this to Todo in Release and Deferred blockers 🚫 Nov 2, 2026
@StanFromIreland
StanFromIreland requested review from AA-Turner, emmatyping and itamaro as code owners November 2, 2026 18:33
@bedevere-app bedevere-app Bot mentioned this pull request Nov 2, 2026
Upgrade bundled Expat to 2.10.0 (e.g. for fixes to four vulnerabilities) #161192
Open
@gpshead
Merge branch 'main' into expat-2.10.0
94d89b7
gpshead
gpshead approved these changes Nov 2, 2026
View reviewed changes
@bedevere-app bedevere-app Bot added awaiting merge and removed awaiting core review labels Nov 2, 2026
@StanFromIreland
StanFromIreland enabled auto-merge (squash) November 2, 2026 21:30
@StanFromIreland
StanFromIreland merged commit a7017f2 into python:main Nov 2, 2026
109 of 111 checks passed

Uh oh!

There was an error while loading. Please reload this page.
@StanFromIreland
StanFromIreland deleted the expat-2.10.0 branch November 2, 2026 22:31
@github-project-automation github-project-automation Bot moved this from Todo to Done in Release and Deferred blockers 🚫 Nov 2, 2026
@miss-islington-app

miss-islington-app Bot commented Nov 2, 2026

Copy link
Copy Markdown

Thanks @StanFromIreland for the PR 🌮🎉.. I'm working now to backport this PR to: 3.11, 3.12, 3.13, 3.14, 3.15.
🐍🍒⛏🤖
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the awaiting merge label Nov 2, 2026
@bedevere-app

bedevere-app Bot commented Nov 2, 2026

Copy link
Copy Markdown

GH-161215 is a backport of this pull request to the 3.15 branch.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the needs backport to 3.15 bugs and security fixes label Nov 2, 2026
@bedevere-app

bedevere-app Bot commented Nov 2, 2026

Copy link
Copy Markdown

GH-161216 is a backport of this pull request to the 3.14 branch.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the needs backport to 3.14 bugs and security fixes label Nov 2, 2026
@miss-islington-app

miss-islington-app Bot commented Nov 2, 2026

Copy link
Copy Markdown

Sorry, @StanFromIreland, I could not cleanly backport this to 3.11 due to a conflict.

Please backport manually with cherry_picker, see the devguide for more information.

cherry_picker a7017f2ca9844893a404be68363b08fdc9973f20 3.11
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@miss-islington-app miss-islington-app Bot assigned StanFromIreland Nov 2, 2026
@bedevere-app

bedevere-app Bot commented Nov 2, 2026

Copy link
Copy Markdown

GH-161217 is a backport of this pull request to the 3.13 branch.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the needs backport to 3.13 only security fixes label Nov 2, 2026
@bedevere-app

bedevere-app Bot commented Nov 2, 2026

Copy link
Copy Markdown

GH-161218 is a backport of this pull request to the 3.12 branch.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the needs backport to 3.12 only security fixes label Nov 2, 2026
StanFromIreland added a commit that referenced this pull request Nov 3, 2026
@miss-islington @StanFromIreland @gpshead
[3.15] gh-161192: Update bundled Expat to 2.10.0 (GH-161202) (#161215)
fe52e40 
(cherry picked from commit a7017f2)

Co-authored-by: Stan Ulbrych <[email protected]>
Co-authored-by: Gregory P. Smith <[email protected]>
StanFromIreland added a commit that referenced this pull request Nov 3, 2026
@miss-islington @StanFromIreland @gpshead
[3.14] gh-161192: Update bundled Expat to 2.10.0 (GH-161202) (#161216)
79c5044 
(cherry picked from commit a7017f2)

Co-authored-by: Stan Ulbrych <[email protected]>
Co-authored-by: Gregory P. Smith <[email protected]>
@bedevere-app

bedevere-app Bot commented Nov 3, 2026

Copy link
Copy Markdown

GH-161266 is a backport of this pull request to the 3.11 branch.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the needs backport to 3.11 only security fixes label Nov 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@gpshead gpshead gpshead approved these changes
@encukou encukou Awaiting requested review from encukou
@sethmlarson sethmlarson Awaiting requested review from sethmlarson sethmlarson is a code owner
@erlend-aasland erlend-aasland Awaiting requested review from erlend-aasland erlend-aasland is a code owner
@AA-Turner AA-Turner Awaiting requested review from AA-Turner AA-Turner is a code owner
@emmatyping emmatyping Awaiting requested review from emmatyping emmatyping is a code owner
@itamaro itamaro Awaiting requested review from itamaro itamaro is a code owner

Uh oh!

There was an error while loading. Please reload this page.

Assignees

@StanFromIreland StanFromIreland

Labels

release-blocker type-security A security issue

Projects

Release and Deferred blockers 🚫
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

2 participants

@StanFromIreland @gpshead
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.