TortoiseSVN bundles vulnerable copy of Expat - please update to 2.2.3
Sebastian Pipping <[email protected]>
| Newsgroups | gmane.comp.version-control.subversion.tortoisesvn.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi! Just a quick note that Expat 2.2.3 has been released, including a fix to DLL hijacking (CVE-2017-11742 [1]). For more details, please check the change log [2]. Best Sebastian [1] https://www.cvedetails.com/cve/CVE-2017-11742/ [2] https://github.com/libexpat/libexpat/blob/master/expat/Changes ------------------------------------------------------ http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=757&dsMessageId=3280829 To unsubscribe from this discussion, e-mail: [[email protected]].