Upgrade bundled Expat to 2.7.5 (e.g. for the fixes to CVE-2026-3277{6,7,8}) #146083

Activity

1. StanFromIreland

   added 2 commits that reference this issue on Mar 29, 2026

   [3.14] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) (#146603)

   ...

   36c22d0

   [3.13] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) (#146604)

   ...

   472f1af
2. StanFromIreland

   removed

   3.13only security fixesonly security fixes

   3.14bugs and security fixesbugs and security fixes

   3.15bugs and security fixesbugs and security fixes

   on Mar 29, 2026
3. StanFromIreland

   added 2 commits that reference this issue on Mar 29, 2026

   [3.11] pythongh-146083: Upgrade bundled Expat to 2.7.5 (pythonGH-146085)

   ...

   feee09d

   [3.10] pythongh-146083: Upgrade bundled Expat to 2.7.5 (pythonGH-146085)

   ...

   21543e0
4. maurycy

   added a commit that references this issue on Mar 30, 2026

   Merge remote-tracking branch 'upstream/main' into tachyon-ndjson-kole…

   ...

   6a0ea81
5. pablogsal

   added 2 commits that reference this issue on Apr 8, 2026

   [3.11] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) (#146607)

   ...

   0d046de

   [3.10] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) (#146608)

   ...

   3d7091e
6. StanFromIreland

   removed

   3.11only security fixesonly security fixes

   3.10 (EOL)end of lifeend of life

   on Apr 8, 2026
7. clin1234

   added a commit that references this issue on Apr 16, 2026

   pythongh-146083: Upgrade bundled Expat to 2.7.5 (python#146085)

   ce074c6
8. ljfp

   added a commit that references this issue on Apr 25, 2026

   pythongh-146083: Upgrade bundled Expat to 2.7.5 (python#146085)

   d9c429b
9. StanFromIreland

   marked this as blocking on Apr 26, 2026

   • Upgrade bundled Expat to 2.8.0 (e.g. for the fix to CVE-2026-41080) #149017
10. Yhg1s

    added a commit that references this issue on May 18, 2026

    [3.12] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) (#146605)

    ...

    6cad028
11. StanFromIreland

    closed this as completedon May 18, 2026
12. icanhasmath

    added a commit that references this issue on Oct 28, 2026

    [3.10] pythongh-146083: Upgrade bundled Expat to 2.7.5 (pythonGH-146085…

    ...

    cf17670