[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <19c81304-ee21-4ee1-9e24-8c601ec182ff@pipping.org>
Date: Mon, 11 May 2026 21:05:24 +0200
From: Sebastian Pipping <sebastian@...ping.org>
To: oss-security@...ts.openwall.com
Subject: Re: [CVE-2026-7210] Cpython: The expat and elementtree
parsers use insufficient entropy for XML hash-flooding protection
On 5/11/26 19:20, Alan Coopersmith wrote:
> Fully mitigating this vulnerability requires both updating libexpat to
> 2.8.0 or later and applying this patch.
This sentence ^^ deserves additional highlight. I confirm.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
