expat-2.6.2

[Bruce Dubbs]

New point version.

[Bruce Dubbs]

Release 2.6.2 Wed March 13 2024 Security fixes:

• CVE-2024-28757. Prevent billion laughs attacks with isolated use of external parsers.

Bug fixes:

• Reject direct parameter entity recursion and avoid the related undefined behavior

Other changes:

• Autotools: Fix build for DOCBOOK_TO_MAN containing spaces
• Add missing commits to 2.6.1 change log
• Version info bumped from 10:1:9 (libexpat*.so.1.9.1) to 10:2:9 (libexpat*.so.1.9.2)

[Bruce Dubbs]

Fixed at commit dcf5543233a7.

    Update to wheel-0.43.0.
    Update to setuptools-69.2.0 (Python module).
    Update to meson-1.4.0.
    Update to expat-2.6.2 (Security fix).
    Update to iana-etc-20240305.
    Update to vim-9.1.0161.
    Update to xz-5.6.1.
    Update to shadow-4.15.0.
    Update to psmisc-23.7.
    Update to kmod-32.
    Update to elfutils-0.191.

[Douglas R. Reno]

SA-12.1-010 issued.