TL;DR
libexpat, a widely used XML parser, is now funded by the City of Munich for six months, allowing dedicated maintenance and improvement efforts. Key priorities include fixing known vulnerabilities and enhancing project robustness.
✦ Why It Matters
Consider contributing to or using libexpat to benefit from its upcoming improvements and enhanced security.
Key Takeaways
Full Summary
libexpat is a fast streaming XML parser written in C99, known for its efficiency and cross-platform capabilities. Starting August 1, 2026, the City of Munich will fund a six-month project to maintain and improve libexpat under their Open Source Sabbatical program.
This funding allows the maintainer to focus on critical tasks, including fixing five known vulnerabilities and adding support for XML 1.0r5. The maintainer, now employed by digital@M, will work remotely and prioritize enhancing the project's robustness and maintainability.
Recent efforts have already begun with addressing a vulnerability identified by Mozilla. This dedicated support is expected to expedite the resolution of issues and improve the overall quality of the libexpat project.
Related