Expat 2.8.5 released, fixes CVE-2026-93990

[Sebastian Pipping <sebastian%pipping.org@localhost>]

Hello everyone!


(I know that some of you have already updated — thanks!)

Expat 2.8.4 has been released yesterday, and it fixes
vulnerability CVE-2026-93990.

As usual, the change log has more information and is available at
https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/Changes .

There is also a blog-post version of this from as slightly different
angle: https://blog.hartwork.org/posts/expat-2-8-5-released/ .

If you have patches for Expat that are still required with version
2.8.5 on a supported platform, please send them my way so we can get
them included with a future release. Thank you!

Best



Sebastian