René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Upgrade bundled Expat to 2.8.2 (e.g. for the fix to CVE-2026-56132 and 12 others)","articleBody":"Please see blog post https://blog.hartwork.org/posts/expat-2-8-2-released/ for an overview and the change log at https://github.com/libexpat/libexpat/blob/R_2_8_2/expat/Changes for details. Affects all alive branches of Python. Thank you!\n\nPS: Note that this release comes with three new files files to be bundled:\n- `lib/fallthrough.h`\n- `lib/memory_sanitizer.h`\n- `lib/xcsinc.c`\n\nRelated: #149698 (predecessor for Expat 2.8.1)\n\nCC @StanFromIreland \n\n----\n\n- CVE-2026-50219\n- CVE-2026-56131\n- CVE-2026-56132\n- CVE-2026-56403\n- CVE-2026-56404\n- CVE-2026-56405\n- CVE-2026-56406\n- CVE-2026-56407\n- CVE-2026-56408\n- CVE-2026-56409\n- CVE-2026-56410\n- CVE-2026-56411\n- CVE-2026-56412\n\n\n\u003c!-- gh-linked-prs --\u003e\n### Linked PRs\n* gh-152234\n* gh-153524\n* gh-153525\n\u003c!-- /gh-linked-prs --\u003e\n","author":{"url":"https://github.com/hartwork","@type":"Person","name":"hartwork"},"datePublished":"2026-06-25T16:30:17.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":2},"url":"https://github.com/152216/cpython/issues/152216"}