Expat 2.5.0 released, includes security fixes
Sebastian Pipping <[email protected]>
| Newsgroups | gmane.text.xml.devel |
|---|---|
| Message-ID | <[email protected]> |
Hello everyone! (A *longer* blog-post version of this e-mail is available online at https://blog.hartwork.org/posts/expat-2-5-0-released/ .) Expat 2.5.0 [1] has been released earlier today. Most importantly, this release fixes CVE-2022-43680: a heap use-after-free vulnerability with expected impact of denial of service or potentially arbitrary code execution. For more details, please check out the change log [2]. If you maintain Expat packaging or a bundled copy of Expat or a pinned version of Expat somewhere, please update to 2.5.0. Thank you! Best Sebastian Pipping [1] https://github.com/libexpat/libexpat/releases/tag/R_2_5_0 [2] https://github.com/libexpat/libexpat/blob/R_2_5_0/expat/Changes _______________________________________________________________________ XML-DEV is a publicly archived, unmoderated list hosted by OASIS to support XML implementation and development. To minimize spam in the archives, you must subscribe before posting. [Un]Subscribe/change address: http://www.oasis-open.org/mlmanage/ Or unsubscribe: [email protected] subscribe: [email protected] List archive: http://lists.xml.org/archives/xml-dev/ List Guidelines: http://www.oasis-open.org/maillists/guidelines.php