Expat (2.6.4, 2.7.0 and) 2.7.1 released, includes security fixes

[Sebastian Pipping <sebastian%pipping.org@localhost>]

Hello everyone!


Expat 2.7.1 has been released a few minutes ago.

To someone running 2.7.0 today, the most interesting part would likely 
be the fix to the regression that the fix to CVE-2024-8176 brought as a
side effect in 2.7.0.  It can be argued for or against being a
regression, I consider both views valid, personally.

So if you are in the backporting part of the ecosystem,
pull request https://github.com/libexpat/libexpat/pull/989
would be a candidate to consider backporting also wherever
you backported a fix to CVE-2024-8176 without forwarding to 2.7.0
last time.

As usual, the change log with more information is at
https://github.com/libexpat/libexpat/blob/R_2_7_1/expat/Changes

If you have patches for Expat that are still required with version
2.7.1, please send them my way so we can get them included with a future
release.  Thank you!

Best



Sebastian