Upgrade bundled Expat to 2.8.0 (e.g. for the fix to CVE-2026-41080) #149017

New issue

Copy link

New issue

Copy link

Closed

Closed

Upgrade bundled Expat to 2.8.0 (e.g. for the fix to CVE-2026-41080)#149017

Copy link

Assignees

Labels

3.10 (EOL)end of lifeend of life3.11only security fixesonly security fixesextension-modulesC modules in the Modules dirC modules in the Modules dirrelease-blockertopic-XMLtype-securityA security issueA security issue

Description

hartwork

opened on Apr 26, 2026

Issue body actions

Please see blog post https://blog.hartwork.org/posts/expat-2-8-0-released/ for an overview and the change log at https://github.com/libexpat/libexpat/blob/R_2_8_0/expat/Changes for details. Affects all alive branches of Python. Thank you!

Related: #146083 (predecessor for Expat 2.7.5)

Linked PRs

• gh-149017: Upgrade bundled Expat to 2.8.0 #149020
• [3.14] gh-149017: Upgrade bundled Expat to 2.8.0 (GH-149020) #149073
• [3.13] gh-149017: Upgrade bundled Expat to 2.8.0 (GH-149020) (GH-149073) #149099
• [3.12] gh-149017: Upgrade bundled Expat to 2.8.0 (GH-149020) (GH-149073) #150007
• [3.11] gh-149017: Upgrade bundled Expat to 2.8.0 (GH-149020) #149074
• [3.10] gh-149017: Upgrade bundled Expat to 2.8.0 (#149020) #149075

Reactions are currently unavailable

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

• 
  StanFromIreland

Labels

3.10 (EOL)end of lifeend of life3.11only security fixesonly security fixesextension-modulesC modules in the Modules dirC modules in the Modules dirrelease-blockertopic-XMLtype-securityA security issueA security issue

Projects

• Release and Deferred blockers 🚫

  Status

  Done

  Show more project fields

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions

• Open in GitHub Copilot app