So, a) there's a libexpat security release: https://github.com/libexpat/libexpat/releases/tag/R_2_7_0
and b) the writeup on the security issue and how the resources to fix it were gathered is *really* good!
https://blog.hartwork.org/posts/expat-2-7-0-released/
Follow
@Bubu A very nice write up, I like the approach. I think the key is that he simply asked them for support. Lots of FOSS devs don't want to ask, I know that from myself. Asking for donations, or even nagging, is well know to work. Like Wikipedia. I wonder if it would be possible to eliminate the friction to donating so much that FOSS devs could make a living without having to learn how to run fundraising campaigns? Maybe it just isn't possible.
