René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"[security] Please upgrade bundled Expat to 2.7.4 (e.g. for the fixes to CVE-2026-24515 and CVE-2026-25210)","articleBody":"# Bug report\n\n### Bug description:\n\nHello! 👋\n\nPlease upgrade bundled Expat to 2.7.4 (e.g. for the fixes to CVE-2026-24515 and CVE-2026-25210).\n\n* Blog post: https://blog.hartwork.org/posts/expat-2-7-4-released/\n* GitHub release: https://github.com/libexpat/libexpat/releases/tag/R_2_7_4\n* Change log: https://github.com/libexpat/libexpat/blob/R_2_7_4/expat/Changes\n\nThe CPython issue for previous 2.7.3 was #139312 and the related merged main pull request was #139319, in case you want to have a look. (The `Dockerfile` from comment https://github.com/python/cpython/pull/123689#pullrequestreview-2280929950 could be of help with raising confidence in a bump pull request when going forward.)\n\nThanks in advance!\n\n### CPython versions tested on:\n\n3.9, 3.10, 3.11, 3.12, 3.13, 3.14, 3.15, CPython main branch\n\n### Operating systems tested on:\n\nLinux, macOS, Windows, Other\n\n\n\u003c!-- gh-linked-prs --\u003e\n### Linked PRs\n* gh-144365\n* gh-144499\n* gh-144500\n* gh-144501\n* gh-144514\n* gh-144515\n\u003c!-- /gh-linked-prs --\u003e\n","author":{"url":"https://github.com/hartwork","@type":"Person","name":"hartwork"},"datePublished":"2026-01-31T14:24:21.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":3},"url":"https://github.com/144363/cpython/issues/144363"}