Please upgrade bundled Expat to 2.6.0 (e.g. for the fix to CVE-2023-52425) · Issue #115399 · python/cpython (original) (raw)

Skip to content

Navigation Menu

• • GitHub Copilot Write better code with AI
  • GitHub Advanced Security Find and fix vulnerabilities
  • Actions Automate any workflow
  • Codespaces Instant dev environments
  • Issues Plan and track work
  • Code Review Manage code changes
  • Discussions Collaborate outside of code
  • Code Search Find more, search less
• Explore
  • Learning Pathways
  • Events & Webinars
  • Ebooks & Whitepapers
  • Customer Stories
  • Partners
  • Executive Insights
• • GitHub Sponsors Fund open source developers
  • The ReadME Project GitHub community articles
• • Enterprise platform AI-powered developer platform
• Pricing

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Sign up

Appearance settings

Description

Bug report

Bug description:

Hi! 👋

Please upgrade bundled Expat to 2.6.0 (e.g. for the fix to CVE-2023-52425).

• GitHub release: https://github.com/libexpat/libexpat/releases/tag/R_2_6_0
• Change log: https://github.com/libexpat/libexpat/blob/R_2_6_0/expat/Changes

The CPython issue for previous 2.5.0 was #98739 and the related merged pull request was #98742, in case you want to have a look. In particular comment #98742 (review) could be of help.

Thanks in advance!

CPython versions tested on:

3.8, 3.9, 3.10, 3.11, 3.12, 3.13, CPython main branch

Operating systems tested on:

Linux, macOS, Windows, Other

Linked PRs

• gh-115399: Upgrade bundled libexpat to 2.6.0 #115431
• [3.11] Upgrade bundled libexpat to 2.6.0 (GH-115399) #115468
• [3.12] gh-115399: Upgrade bundled libexpat to 2.6.0 (GH-115431) #115469
• [3.10] Upgrade bundled libexpat to 2.6.0 (GH-115399) (GH-115468) #115473
• [3.9] Upgrade bundled libexpat to 2.6.0 (GH-115399) #115474
• [3.8] Upgrade bundled libexpat to 2.6.0 (GH-115399) #115475
• gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" #115400
• [3.12] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) #115760
• [3.11] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) #115761
• [3.10] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) #115762
• [3.9] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) #115763
• [3.8] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) #115764

Metadata

Metadata

Labels

Development

No branches or pull requests

Issue actions