Vulnerability in libexpat

Sylvain Beucler <[email protected]> Fri, 15 Jan 2010 20:53:18 +0100

Newsgroups	gmane.comp.version-control.arch.bugs
Message-ID	<[email protected]>

Hi,

There's a vulnerability in libexpat, which tla includes.

This Debian bug comment:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560940#57
indicates how to fix the expat code directly.

This same Debian bug includes patches from me that makes tla use the
system libexpat rather than the bundled one.

-- 
Sylvain