The latest version of GSAS-II (v5.10.3, #5848) now works on Python 3.11 so if you have not updated, please do.
If you have tried to update previously and are now in “no-mans-land” where GSAS-II will not start, you need to do something more complex. These instructions may help: https://urldefense.us/v3/__https://advancedphotonsource.github.io/GSAS-II-tutorials/help.html*help-gsas-ii-will-not-start__;Iw!!G_uCfscf7eWS!dIvAiCGo_lBT5b3uOqP25d7kXvWck5pWiQE1LkIGb-xpT5m4J9PrN2nmB7fQ2X1G2nC2hmlLxoNgSug$ <https://urldefense.us/v3/__https://gcc02.safelinks.protection.outlook.com/?url=https*3A*2F*2Fadvancedphotonsource.github.io*2FGSAS-II-tutorials*2Fhelp.html*23help-gsas-ii-will-not-start&data=05*7C02*7Cgsas-ii*40aps.anl.gov*7Cede66dc25b224d1ce2ba08df38fd1613*7C0cfca18525f749e38ae7704d5326e285*7C0*7C0*7C639292331772821193*7CUnknown*7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ*3D*3D*7C0*7C*7C*7C&sdata=ONHCXpHWoR8W0XShsqXW9xLRWigFZiE5Q7TNEFKf4rI*3D&reserved=0__;JSUlJSUlJSUlJSUlJSUlJSUlJSUlJSU!!G_uCfscf7eWS!dIvAiCGo_lBT5b3uOqP25d7kXvWck5pWiQE1LkIGb-xpT5m4J9PrN2nmB7fQ2X1G2nC2hmlLLL8TkPI$ >, but in some older installations may predate the creation of the referenced “rescue” file. Reinstalling from the latest distribution is then a good solution and will get you the latest version of Python, but I can also walk you through the process of updating without doing a full reinstallation. Please e-mail me directly and include the contents of the GSAS-II console window so I have the full path for your installation. Brian From: Toby, Brian H. <[email protected]> Date: Monday, November 2, 2026 at 9:35 AM To: [email protected] <[email protected]> Subject: Re: GSAS-II security alert There is a problem with the latest version of GSAS-II and Python 3.11. Reinstalling completely addresses that, but I hope to have this working as an update very soon. For now, if you are running with Python 3.11 (see startup messages in console if you are not sure), please hold off on updating from inside GSAS-II. From: GSAS-II <[email protected]> on behalf of Toby, Brian H. via GSAS-II <[email protected]> Date: Sunday, November 1, 2026 at 3:25 PM To: [email protected] <[email protected]> Subject: [GSAS-II] GSAS-II security alert Hi everyone, I’d like to pass on that a long-term security vulnerability in GSAS-II was fixed as of GSAS-II version v5.10.0 (we are now at v5.10.2, #5847). I am recommending that you update immediately, but if you are unable to do that, please only open GSAS-II project (.gpx) files that you have created or that you received from people you trust which will also avoid this vulnerability. More about this can be found in a GitHub Discussions Announcement, https://urldefense.us/v3/__https://github.com/AdvancedPhotonSource/GSAS-II/discussions/377__;!!G_uCfscf7eWS!dIvAiCGo_lBT5b3uOqP25d7kXvWck5pWiQE1LkIGb-xpT5m4J9PrN2nmB7fQ2X1G2nC2hmlLCPE3Osc$ <https://urldefense.us/v3/__https://gcc02.safelinks.protection.outlook.com/?url=https*3A*2F*2Furldefense.us*2Fv3*2F__https*3A*2F*2Fgcc02.safelinks.protection.outlook.com*2F*3Furl*3Dhttps*3A*2F*2Fgithub.com*2FAdvancedPhotonSource*2FGSAS-II*2Fdiscussions*2F377*26data*3D05*7C02*7Cgsas-ii*40aps.anl.gov*7Ccb58af42a7a8400c720c08df385ea3dc*7C0cfca18525f749e38ae7704d5326e285*7C0*7C0*7C639291651296896413*7CUnknown*7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ*3D*3D*7C0*7C*7C*7C*26sdata*3DLsCjIbpbdaV6S3CN38WvaNQf4*2FQei1b6Bdy*2FabPAVks*3D*26reserved*3D0__*3BJSUlJSUlJSUlJSUlJSUlJSUlJSUlJSUlJSU!!G_uCfscf7eWS!YeJJtF0Gk7wU_5GkAKrpb5ziAEj8Q62H08AcrYV6ZX1vWr9UuEEcLAjzA4xnUmFvs-Ui0RJvmSq-pfM*24&data=05*7C02*7Cgsas-ii*40aps.anl.gov*7Cede66dc25b224d1ce2ba08df38fd1613*7C0cfca18525f749e38ae7704d5326e285*7C0*7C0*7C639292331772850196*7CUnknown*7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ*3D*3D*7C0*7C*7C*7C&sdata=sTHJGNBZsRoFmxr9nPsLnEvNRznW5t8C*2FwjMJ61mJ7c*3D&reserved=0__;JSUlJSUlJSUlJSUqKioqKioqJSUqKioqKioqKioqKioqKioqJSUqKiolJSUlJSUlJSUlJSUlJSUlJSUlJSUl!!G_uCfscf7eWS!dIvAiCGo_lBT5b3uOqP25d7kXvWck5pWiQE1LkIGb-xpT5m4J9PrN2nmB7fQ2X1G2nC2hmlLrkkLipY$ >. The changes have been tested, but it is possible that they will break something. Please report bugs to me, Bob or create an issue on the GitHub repo (https://urldefense.us/v3/__https://github.com/AdvancedPhotonSource/GSAS-II/issues__;!!G_uCfscf7eWS!dIvAiCGo_lBT5b3uOqP25d7kXvWck5pWiQE1LkIGb-xpT5m4J9PrN2nmB7fQ2X1G2nC2hmlLcARhVL4$ <https://urldefense.us/v3/__https://gcc02.safelinks.protection.outlook.com/?url=https*3A*2F*2Furldefense.us*2Fv3*2F__https*3A*2F*2Fgcc02.safelinks.protection.outlook.com*2F*3Furl*3Dhttps*3A*2F*2Fgithub.com*2FAdvancedPhotonSource*2FGSAS-II*2Fissues*26data*3D05*7C02*7Cgsas-ii*40aps.anl.gov*7Ccb58af42a7a8400c720c08df385ea3dc*7C0cfca18525f749e38ae7704d5326e285*7C0*7C0*7C639291651296908931*7CUnknown*7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ*3D*3D*7C0*7C*7C*7C*26sdata*3DNNieEoU7wIp7VGWkBaCoaHKPN6lZBsYVKmWNbBMO*2Bd8*3D*26reserved*3D0__*3BJSUlJSUlJSUlJSUlJSUlJSUlJSUlJSUl!!G_uCfscf7eWS!YeJJtF0Gk7wU_5GkAKrpb5ziAEj8Q62H08AcrYV6ZX1vWr9UuEEcLAjzA4xnUmFvs-Ui0RJvscMzY8c*24&data=05*7C02*7Cgsas-ii*40aps.anl.gov*7Cede66dc25b224d1ce2ba08df38fd1613*7C0cfca18525f749e38ae7704d5326e285*7C0*7C0*7C639292331772871425*7CUnknown*7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ*3D*3D*7C0*7C*7C*7C&sdata=9hZOq0ARTJRnO6WL5xf5HtK*2BdNXBuORgcPk2Ip0V5kQ*3D&reserved=0__;JSUlJSUlJSUlJSUqKioqKiolJSoqKioqKioqKioqKioqKiolJSoqJSUlJSUlJSUlJSUlJSUlJSUlJSUlJQ!!G_uCfscf7eWS!dIvAiCGo_lBT5b3uOqP25d7kXvWck5pWiQE1LkIGb-xpT5m4J9PrN2nmB7fQ2X1G2nC2hmlL9tbx5D0$ >) so it can be fixed. As noted in the GitHub Discussions Announcement, Dilanka Kaushal Hewage (GitHub: r3vpwnx), an expert on computer security, merits a lot of gratitude from the GSAS-II community for his help in this. Brian
_______________________________________________ GSAS-II mailing list [email protected] https://mailman.aps.anl.gov/mailman/listinfo/gsas-ii
