* Expat 2.4.0 (and 2.4.1) with security fixes released
@ 2021-05-23 23:01 Sebastian Pipping
2021-06-02 12:39 ` Sebastian Pipping
0 siblings, 1 reply; 2+ messages in thread
From: Sebastian Pipping @ 2021-05-23 23:01 UTC (permalink / raw)
To: sebastian
Hello everyone!
Expat 2.4.0 (and 2.4.1) most importantly brings protection against
Billion Laughs Attacks (CVE-2013-0340). There is a blog post [1] and
the change log with more details.
If you have patches for Expat that are still required with version
2.4.1, please send them my way. Thank you!
Best
Sebastian
[1]
https://blog.hartwork.org/posts/cve-2013-0340-billion-laughs-fixed-in-expat-2-4-0/
[2] https://github.com/libexpat/libexpat/blob/R_2_4_1/expat/Changes
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Expat 2.4.0 (and 2.4.1) with security fixes released
2021-05-23 23:01 Expat 2.4.0 (and 2.4.1) with security fixes released Sebastian Pipping
@ 2021-06-02 12:39 ` Sebastian Pipping
0 siblings, 0 replies; 2+ messages in thread
From: Sebastian Pipping @ 2021-06-02 12:39 UTC (permalink / raw)
To: sebastian
Hi everyone,
more than half of you have updated to 2.4.1 already [1], very nice.
Please let me know if you need any help with updating or backporting or
something like that.
Thanks and best
Sebastian
[1] https://repology.org/project/expat/information
On 24.05.21 01:01, Sebastian Pipping wrote:
> Hello everyone!
>
>
> Expat 2.4.0 (and 2.4.1) most importantly brings protection against
> Billion Laughs Attacks (CVE-2013-0340). There is a blog post [1] and
> the change log with more details.
>
> If you have patches for Expat that are still required with version
> 2.4.1, please send them my way. Thank you!
>
> Best
>
>
>
> Sebastian
>
>
> [1]
> https://blog.hartwork.org/posts/cve-2013-0340-billion-laughs-fixed-in-expat-2-4-0/
> [2] https://github.com/libexpat/libexpat/blob/R_2_4_1/expat/Changes
>
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2021-06-02 13:44 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-05-23 23:01 Expat 2.4.0 (and 2.4.1) with security fixes released Sebastian Pipping
2021-06-02 12:39 ` Sebastian Pipping
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/guix.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).