Expat 2.7.3 released, includes security(-related) fixes

[Sebastian Pipping <sebastian%pipping.org@localhost>]

Hello everyone!


(I know that some of you have already updated — thanks!)

Expat 2.7.3 has been released earlier today.

There is two key bugfixes in 2.7.2 that affect earlier
security fixes. If you have backports (for CVE-2024-8176
or CVE-2025-59375) in your distribution, these backports
may need updating. If you don't, these two are regular non-security
bugfixes to you if you will, nothing to lose sleep over.

As usual, the change log with more information is at
https://github.com/libexpat/libexpat/blob/R_2_7_3/expat/Changes

There is also a blog-post version of this from as slightly different
angle: https://blog.hartwork.org/posts/expat-2-7-3-released/

If you have patches for Expat that are still required with version
2.7.2, please send them my way so we can get them included with a future
release. Thank you!

Best



Sebastian