Efraim Flashner <efr...@flashner.co.il> skribis: > FWIW debian's expat-2.1.1(-3) still has the cve-2015-1283 applied. Also, > there's 2 new cves, cve-2012-6702 and cve-2016-5300 > https://www.debian.org/security/2016/dsa-3597 > https://sources.debian.net/src/expat/2.1.1-3/debian/patches/
Oh, good catch. Ludo’.
