René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Please upgrade bundled Expat to 2.7.0 (e.g. for the fix to CVE-2024-8176)","articleBody":"# Bug report\n\n### Bug description:\n\nHi! 👋\n\nPlease upgrade bundled Expat to 2.7.0 (e.g. for the fix to CVE-2024-8176).\n\n- GitHub release: https://github.com/libexpat/libexpat/releases/tag/R_2_7_0\n- Change log: https://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes\n- Bonus: Blog post [Recursion kills: The story behind CVE-2024-8176 in libexpat](https://blog.hartwork.org/posts/expat-2-7-0-released/)\n\nThe CPython issue for previous 2.6.4 was #126623 and the related merged main pull request was #126792, in case you want to have a look. The Dockerfile from comment https://github.com/python/cpython/pull/123689#pullrequestreview-2280929950 could be of help with raising confidence in a bump pull request when going forward.\n\nThanks in advance!\n\nCC @sethmlarson @gpshead \n\n### CPython versions tested on:\n\n3.9, 3.10, 3.11, 3.12, 3.13, 3.14, CPython main branch\n\n### Operating systems tested on:\n\nLinux, macOS, Windows, Other\n\n\u003c!-- gh-linked-prs --\u003e\n### Linked PRs\n* gh-131272\n* gh-131359\n* gh-131360\n* gh-131361\n* gh-131362\n* gh-131363\n* gh-131364\n* gh-144625\n* gh-144660\n\u003c!-- /gh-linked-prs --\u003e\n","author":{"url":"https://github.com/hartwork","@type":"Person","name":"hartwork"},"datePublished":"2025-03-14T21:22:13.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":3},"url":"https://github.com/131261/cpython/issues/131261"}