unofficial mirror of guix-devel@gnu.org 
 help / color / mirror / Atom feed
From: Sebastian Pipping <sebastian@pipping.org>
To: sebastian@pipping.org
Subject: Re: Expat 2.4.0 (and 2.4.1) with security fixes released
Date: Wed, 2 Jun 2021 14:39:58 +0200	[thread overview]
Message-ID: <2c0174cb-74f1-92f1-66eb-c0ada998f501@pipping.org> (raw)
In-Reply-To: <76c46851-a65a-628a-4ae3-9b760b1c3ad0@pipping.org>

Hi everyone,


more than half of you have updated to 2.4.1 already [1], very nice.
Please let me know if you need any help with updating or backporting or
something like that.

Thanks and best



Sebastian


[1] https://repology.org/project/expat/information


On 24.05.21 01:01, Sebastian Pipping wrote:
> Hello everyone!
> 
> 
> Expat 2.4.0 (and 2.4.1) most importantly brings protection against
> Billion Laughs Attacks (CVE-2013-0340).  There is a blog post [1] and
> the change log with more details.
> 
> If you have patches for Expat that are still required with version
> 2.4.1, please send them my way.  Thank you!
> 
> Best
> 
> 
> 
> Sebastian
> 
> 
> [1]
> https://blog.hartwork.org/posts/cve-2013-0340-billion-laughs-fixed-in-expat-2-4-0/
> [2] https://github.com/libexpat/libexpat/blob/R_2_4_1/expat/Changes
> 



      reply	other threads:[~2021-06-02 13:44 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-05-23 23:01 Sebastian Pipping
2021-06-02 12:39 ` Sebastian Pipping [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

  List information: https://guix.gnu.org/

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=2c0174cb-74f1-92f1-66eb-c0ada998f501@pipping.org \
    --to=sebastian@pipping.org \
    --subject='Re: Expat 2.4.0 (and 2.4.1) with security fixes released' \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

unofficial mirror of guix-devel@gnu.org 

This inbox may be cloned and mirrored by anyone:

	git clone --mirror https://yhetil.org/guix-devel/0 guix-devel/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 guix-devel guix-devel/ https://yhetil.org/guix-devel \
		guix-devel@gnu.org
	public-inbox-index guix-devel

Example config snippet for mirrors.
Newsgroups are available over NNTP:
	nntp://news.yhetil.org/yhetil.gnu.guix.devel
	nntp://news.gmane.io/gmane.comp.gnu.guix.devel


AGPL code for this site: git clone http://ou63pmih66umazou.onion/public-inbox.git