• From: Sebastian Pipping <sebastian@p...>
• To: xml-dev@l...
• Date: Wed, 2 Aug 2017 21:32:14 +0200

Hi!


Just a quick note that Expat 2.2.3 has been released. For Windows users,
it fixes DLL hijacking (CVE-2017-11742 [1]). On Linux, extracting
entropy for Hash DoS protection no longer blocks, which affected D-Bus
and systems that are low on entropy early in the boot process. For more
details, please check the change log [2].

Best



Sebastian


[1] https://www.cvedetails.com/cve/CVE-2017-11742/
[2] https://github.com/libexpat/libexpat/blob/master/expat/Changes