There is a problem with the latest version of GSAS-II and Python 3.11. Reinstalling completely addresses that, but I hope to have this working as an update very soon. For now, if you are running with Python 3.11 (see startup messages in console if you are not sure), please hold off on updating from inside GSAS-II.
From: GSAS-II <[email protected]> on behalf of Toby, Brian H. via GSAS-II <[email protected]> Date: Sunday, November 1, 2026 at 3:25 PM To: [email protected] <[email protected]> Subject: [GSAS-II] GSAS-II security alert Hi everyone, I’d like to pass on that a long-term security vulnerability in GSAS-II was fixed as of GSAS-II version v5.10.0 (we are now at v5.10.2, #5847). I am recommending that you update immediately, but if you are unable to do that, please only open GSAS-II project (.gpx) files that you have created or that you received from people you trust which will also avoid this vulnerability. More about this can be found in a GitHub Discussions Announcement, https://urldefense.us/v3/__https://github.com/AdvancedPhotonSource/GSAS-II/discussions/377__;!!G_uCfscf7eWS!cLM9nQDYau8ouL6Iiobm_0vmQqSD3lgHxmS_PGfPESl_YEtU9G_IVFuKe2jr-k57y7azARP0eL0ikog$ <https://urldefense.us/v3/__https://gcc02.safelinks.protection.outlook.com/?url=https*3A*2F*2Furldefense.us*2Fv3*2F__https*3A*2F*2Fgcc02.safelinks.protection.outlook.com*2F*3Furl*3Dhttps*3A*2F*2Fgithub.com*2FAdvancedPhotonSource*2FGSAS-II*2Fdiscussions*2F377*26data*3D05*7C02*7Cgsas-ii*40aps.anl.gov*7Ccb58af42a7a8400c720c08df385ea3dc*7C0cfca18525f749e38ae7704d5326e285*7C0*7C0*7C639291651296896413*7CUnknown*7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ*3D*3D*7C0*7C*7C*7C*26sdata*3DLsCjIbpbdaV6S3CN38WvaNQf4*2FQei1b6Bdy*2FabPAVks*3D*26reserved*3D0__*3BJSUlJSUlJSUlJSUlJSUlJSUlJSUlJSUlJSU!!G_uCfscf7eWS!YeJJtF0Gk7wU_5GkAKrpb5ziAEj8Q62H08AcrYV6ZX1vWr9UuEEcLAjzA4xnUmFvs-Ui0RJvmSq-pfM*24&data=05*7C02*7Cgsas-ii*40aps.anl.gov*7C5b328f6221a44e90c9b008df38f6f4f2*7C0cfca18525f749e38ae7704d5326e285*7C0*7C0*7C639292305480475153*7CUnknown*7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ*3D*3D*7C0*7C*7C*7C&sdata=ttdK3V1MkcXQG3brrI1Uky*2FgbXyGff*2ByiQleu9KODFs*3D&reserved=0__;JSUlJSUlJSUlJSUqKioqKioqJSUqKioqKioqKioqKioqKioqJSUqKiolJSUlJSUlJSUlJSUlJSUlJSUlJSUlJQ!!G_uCfscf7eWS!cLM9nQDYau8ouL6Iiobm_0vmQqSD3lgHxmS_PGfPESl_YEtU9G_IVFuKe2jr-k57y7azARP0QbOQe1A$ >. The changes have been tested, but it is possible that they will break something. Please report bugs to me, Bob or create an issue on the GitHub repo (https://urldefense.us/v3/__https://github.com/AdvancedPhotonSource/GSAS-II/issues__;!!G_uCfscf7eWS!cLM9nQDYau8ouL6Iiobm_0vmQqSD3lgHxmS_PGfPESl_YEtU9G_IVFuKe2jr-k57y7azARP0mnKOXcI$ <https://urldefense.us/v3/__https://gcc02.safelinks.protection.outlook.com/?url=https*3A*2F*2Furldefense.us*2Fv3*2F__https*3A*2F*2Fgcc02.safelinks.protection.outlook.com*2F*3Furl*3Dhttps*3A*2F*2Fgithub.com*2FAdvancedPhotonSource*2FGSAS-II*2Fissues*26data*3D05*7C02*7Cgsas-ii*40aps.anl.gov*7Ccb58af42a7a8400c720c08df385ea3dc*7C0cfca18525f749e38ae7704d5326e285*7C0*7C0*7C639291651296908931*7CUnknown*7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ*3D*3D*7C0*7C*7C*7C*26sdata*3DNNieEoU7wIp7VGWkBaCoaHKPN6lZBsYVKmWNbBMO*2Bd8*3D*26reserved*3D0__*3BJSUlJSUlJSUlJSUlJSUlJSUlJSUlJSUl!!G_uCfscf7eWS!YeJJtF0Gk7wU_5GkAKrpb5ziAEj8Q62H08AcrYV6ZX1vWr9UuEEcLAjzA4xnUmFvs-Ui0RJvscMzY8c*24&data=05*7C02*7Cgsas-ii*40aps.anl.gov*7C5b328f6221a44e90c9b008df38f6f4f2*7C0cfca18525f749e38ae7704d5326e285*7C0*7C0*7C639292305480717532*7CUnknown*7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ*3D*3D*7C0*7C*7C*7C&sdata=LGvENIKaGRshOvROaFm4ftVnYW3bK0g1qJU5MIjN*2Fak*3D&reserved=0__;JSUlJSUlJSUlJSUqKioqKiolJSoqKioqKioqKioqKioqKiolJSoqJSUlJSUlJSUlJSUlJSUlJSUlJSUlJQ!!G_uCfscf7eWS!cLM9nQDYau8ouL6Iiobm_0vmQqSD3lgHxmS_PGfPESl_YEtU9G_IVFuKe2jr-k57y7azARP0KQjGbaQ$ >) so it can be fixed. As noted in the GitHub Discussions Announcement, Dilanka Kaushal Hewage (GitHub: r3vpwnx), an expert on computer security, merits a lot of gratitude from the GSAS-II community for his help in this. Brian
_______________________________________________ GSAS-II mailing list [email protected] https://mailman.aps.anl.gov/mailman/listinfo/gsas-ii
