FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Upgrade bundled Expat to 2.8.5 (e.g. for fix to vulnerability CVE-2026-93990) · Issue #157953 · python/cpython · GitHub

  1. python
  2. cpython

Repository navigation

Upgrade bundled Expat to 2.8.5 (e.g. for fix to vulnerability CVE-2026-93990) #157953

Closed
Closed
Upgrade bundled Expat to 2.8.5 (e.g. for fix to vulnerability CVE-2026-93990)#157953
Assignees
Labels
3.10 (EOL)end of life3.11only security fixes3.12only security fixesextension-modulesC modules in the Modules dirrelease-blockertopic-XMLtype-securityA security issue

Description

hartwork
opened on Sep 22, 2026

Please see blog post https://blog.hartwork.org/posts/expat-2-8-5-released/ for an overview and the change log at https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/Changes for details. Affects all alive branches of Python. Thank you!

Related: #156723 (predecessor for Expat 2.8.4)

CC @StanFromIreland

Activity

  1. StanFromIreland
    self-assigned this
    on Sep 22, 2026
  2. StanFromIreland
    added
    type-securityA security issue
    extension-modulesC modules in the Modules dir
    topic-XML
    3.11only security fixes
    3.10 (EOL)end of life
    3.12only security fixes
    3.13only security fixes
    3.14bugs and security fixes
    3.15bugs and security fixes
    3.16new features, bugs and security fixes
    on Sep 22, 2026
  3. StanFromIreland
    marked this as blocked on Sep 22, 2026
  4. StanFromIreland
    added
    release-blocker
    on Sep 22, 2026
  5. github-project-automation
    added this to Release and Deferred blockers 🚫on Sep 22, 2026
  6. github-project-automation
    moved this to Todo in Release and Deferred blockers 🚫on Sep 22, 2026
  7. hugovk
    changed the title [-]Please upgrade bundled Expat to 2.8.5 (e.g. for fix to vulnerability CVE-2026-93990)[/-] [+]Upgrade bundled Expat to 2.8.5 (e.g. for fix to vulnerability CVE-2026-93990)[/+] on Sep 22, 2026
  8. StanFromIreland
    added a commit that references this issue on Sep 23, 2026

    gh-157953: Update bundled Expat to 2.8.5 (#157957)

    5f1f218
  9. hugovk
    added a commit that references this issue on Sep 23, 2026

    [3.13] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) (#157997)

    388a06c
  10. hugovk
    removed
    3.13only security fixes
    3.16new features, bugs and security fixes
    on Sep 23, 2026
  11. hugovk
    added a commit that references this issue on Sep 23, 2026

    [3.14] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) (#157996)

    5659aee
  12. hugovk
    removed
    3.14bugs and security fixes
    on Sep 23, 2026
  13. hugovk
    added a commit that references this issue on Sep 23, 2026

    [3.15] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) (#157998)

    ffbbdad
  14. hugovk
    removed
    3.15bugs and security fixes
    on Sep 23, 2026
  15. Yhg1s
    added a commit that references this issue on Sep 30, 2026

    [3.12] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) (#157999)

    308b715
  16. pablogsal
    added 2 commits that reference this issue on Oct 1, 2026

    [3.10] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) (#158327)

    4fda068

    [3.11] gh-157953: Update bundled Expat to 2.8.5 (GH-157957) (#158343)

    f60b7eb
  17. hugovk
    closed this as completedon Oct 1, 2026
  18. github-project-automation
    moved this from Todo to Done in Release and Deferred blockers 🚫on Oct 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

3.10 (EOL)end of life3.11only security fixes3.12only security fixesextension-modulesC modules in the Modules dirrelease-blockertopic-XMLtype-securityA security issue

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions

Back | FazBrowse Home | New Git URL