XML.orgXML.org
FOCUS AREAS |XML-DEV |XML.org DAILY NEWSLINK |REGISTRY |RESOURCES |ABOUT
OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index]
Expat 2.5.0 released, includes security fixes

Hello everyone!


(A *longer* blog-post version of this e-mail is available online at
 https://blog.hartwork.org/posts/expat-2-5-0-released/ .)

Expat 2.5.0 [1] has been released earlier today.  Most importantly, this
release fixes CVE-2022-43680: a heap use-after-free vulnerability with
expected impact of denial of service or potentially arbitrary code
execution.  For more details, please check out the change log [2].

If you maintain Expat packaging or a bundled copy of Expat or a pinned
version of Expat somewhere, please update to 2.5.0.  Thank you!

Best



Sebastian Pipping


[1] https://github.com/libexpat/libexpat/releases/tag/R_2_5_0
[2] https://github.com/libexpat/libexpat/blob/R_2_5_0/expat/Changes


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index]


News | XML in Industry | Calendar | XML Registry
Marketplace | Resources | MyXML.org | Sponsors | Privacy Statement

Copyright 1993-2007 XML.org. This site is hosted by OASIS