Expat 2.4.0 (and 2.4.1) with security fixes released

[Sebastian Pipping <sebastian%pipping.org@localhost>]

Hello everyone!


Expat 2.4.0 (and 2.4.1) most importantly brings protection against
Billion Laughs Attacks (CVE-2013-0340).  There is a blog post [1] and
the change log with more details.

If you have patches for Expat that are still required with version
2.4.1, please send them my way.  Thank you!

Best



Sebastian


[1]
https://blog.hartwork.org/posts/cve-2013-0340-billion-laughs-fixed-in-expat-2-4-0/
[2] https://github.com/libexpat/libexpat/blob/R_2_4_1/expat/Changes