Upgrade bundled Expat to 2.8.3 (e.g. for the fix to CVE-2026-72522) #155558

Activity

1. StanFromIreland

   self-assigned this

   on Aug 11, 2026
2. StanFromIreland

   added

   type-securityA security issueA security issue

   extension-modulesC modules in the Modules dirC modules in the Modules dir

   topic-XML

   3.11only security fixesonly security fixes

   3.10 (EOL)end of lifeend of life

   3.12only security fixesonly security fixes

   3.13only security fixesonly security fixes

   3.14bugs and security fixesbugs and security fixes

   3.15pre-release feature fixes, bugs and security fixespre-release feature fixes, bugs and security fixes

   3.16new features, bugs and security fixesnew features, bugs and security fixes

   on Aug 11, 2026
3. hartwork

   changed the title [-][security] Upgrade bundled Expat to 2.8.3 (e.g. for the fix to CVE-2026-72522)[/-] [+]Upgrade bundled Expat to 2.8.3 (e.g. for the fix to CVE-2026-72522)[/+] on Aug 11, 2026
4. StanFromIreland commented on Aug 11, 2026

   

   StanFromIreland

   on Aug 11, 2026

   Member

   More actions

   @hartwork Thanks for letting us know! JFYI for the future, you don't need to add [security] to the title here, we have labels to distinguish such things.
5. StanFromIreland

   marked this as blocked on Aug 11, 2026

   • Upgrade bundled Expat to 2.8.2 (e.g. for the fix to CVE-2026-56132 and 12 others) #152216
6. encukou

   added a commit that references this issue on Aug 12, 2026

   gh-155558: Update bundled Expat to 2.8.3 (GH-155560)

   3d6a505
7. Yhg1s

   added a commit that references this issue on Aug 12, 2026

   [3.12] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) (#155615)

   ...

   c546712
8. StanFromIreland

   added 2 commits that reference this issue on Aug 12, 2026

   [3.13] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) (#155614)

   ...

   35c8011

   [3.14] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) (#155613)

   ...

   b842ab8
9. hugovk

   added a commit that references this issue on Aug 12, 2026

   [3.15] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) (#155612)

   ...

   d390759
10. pablogsal

    added 2 commits that reference this issue on Aug 12, 2026

    [3.11] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) (#155616)

    ...

    87536d5

    [3.10] gh-155558: Update bundled Expat to 2.8.3 (GH-155560) (#155618)

    ...

    451ece9
11. encukou

    closed this as completedon Aug 13, 2026
12. mbeijen

    added a commit that references this issue on Aug 14, 2026

    pythongh-155558: Update bundled Expat to 2.8.3 (pythonGH-155560)

    6e89ff5