Expat 2.7.0 released, includes security fixes

[Sebastian Pipping <sebastian%pipping.org@localhost>]

Hello everyone!


(I know that some of you have already updated — thanks!)

Expat 2.7.0 has been released yesterday.

The most interesting part is the fix to vulnerability CVE-2024-8176:

- For the parametrized attack payload generators payload{1..3}.py
  and just the tech aspects please see
  https://github.com/libexpat/libexpat/issues/893 .

- For the longer-than-usual story please see
  https://blog.hartwork.org/posts/expat-2-7-0-released/ .

- The change log with more information is at
  https://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes

If you have patches for Expat that are still required with version
2.7.0 (besides known issue [1]), please send them my way so we can get
them included with a future release.  Thank you!

Best



Sebastian


[1] https://github.com/libexpat/libexpat/issues/976