Please upgrade bundled Expat to 2.6.0 (e.g. for the fix to CVE-2023-52425)

[hartwork]

Bug report

Bug description:

Hi! 👋

Please upgrade bundled Expat to 2.6.0 (e.g. for the fix to CVE-2023-52425).

• GitHub release: https://github.com/libexpat/libexpat/releases/tag/R_2_6_0
• Change log: https://github.com/libexpat/libexpat/blob/R_2_6_0/expat/Changes

The CPython issue for previous 2.5.0 was #98739 and the related merged pull request was #98742, in case you want to have a look. In particular comment #98742 (review) could be of help.

Thanks in advance!

CPython versions tested on:

3.8, 3.9, 3.10, 3.11, 3.12, 3.13, CPython main branch

Operating systems tested on:

Linux, macOS, Windows, Other

Linked PRs

• gh-115399: Upgrade bundled libexpat to 2.6.0 #115431
• [3.11] Upgrade bundled libexpat to 2.6.0 (GH-115399) #115468
• [3.12] gh-115399: Upgrade bundled libexpat to 2.6.0 (GH-115431) #115469
• [3.10] Upgrade bundled libexpat to 2.6.0 (GH-115399) (GH-115468) #115473
• [3.9] Upgrade bundled libexpat to 2.6.0 (GH-115399) #115474
• [3.8] Upgrade bundled libexpat to 2.6.0 (GH-115399) #115475
• gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" #115400
• [3.12] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) #115760
• [3.11] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) #115761
• [3.10] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) #115762
• [3.9] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) #115763
• [3.8] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) #115764

[ambv]

Thanks for letting us know. We'll be addressing this.

[bedevere-app]

GH-115468 is a backport of this pull request to the 3.11 branch.