diff --git a/expat/Changes b/expat/Changes index 5d273ee8..c088f0cb 100644 --- a/expat/Changes +++ b/expat/Changes @@ -38,6 +38,16 @@ !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Release 2.7.1 ??? ????? ?? ???? + Bug fixes: + #980 #989 Restore event pointer behavior from Expat 2.6.4 + (that the fix to CVE-2024-8176 changed in 2.7.0); + affected API functions are: + - XML_GetCurrentByteCount + - XML_GetCurrentByteIndex + - XML_GetCurrentColumnNumber + - XML_GetCurrentLineNumber + - XML_GetInputContext + Other changes: #976 #977 Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}" with Automake that were missing from 2.7.0 release tarballs @@ -51,6 +61,11 @@ Release 2.7.1 ??? ????? ?? ???? #976 #977 CI: Protect against fuzzer files missing from future release archives + Special thanks to: + Berkay Eren Ürün + and + Perl XML::Parser + Release 2.7.0 Thu March 13 2025 Security fixes: #893 #973 CVE-2024-8176 -- Fix crash from chaining a large number