RSSAmplifier

Blog

Hartwork Blog

Free Software, Music, Chinese Chess

blog.hartwork.orgRSS feed ↗10 posts

Latest posts

Expat 2.8.3 released, fixes vulnerability CVE-2026-72522

For readers new to Expat: libexpat is a fast streaming XML parser. Alongside libxml2, Expat is one of the most widely used software libre XML parsers written in C, specifically C99. It is cross-platform and licensed under the MIT license . Expat 2.8.3 was released yesterday. The key motivation for cutting a release and doing so now was getting… the fix to vulnerability CVE-2026-72522 as well as…

libexpat now funded by the City of Munich for up to 6 months

For readers new to Expat: libexpat is a fast streaming XML parser. Alongside libxml2, Expat is one of the most widely used software libre XML parsers written in C, specifically C99. It is cross-platform and licensed under the MIT license . Starting 2026-08-01, the "security vacation" of the project has ended and(!) I will be be paid to work on maintaining libexpat for up to 6 months thanks to the…

Expat 2.8.2 released, fixes 13 vulnerabilities

For readers new to Expat: libexpat is a fast streaming XML parser. Alongside libxml2, Expat is one of the most widely used software libre XML parsers written in C, specifically C99. It is cross-platform and licensed under the MIT license . Expat 2.8.2 was released today. The key motivation for cutting a release and doing so now was getting security and non-security bugfixes out to users. On the…

Expat 2.8.1 released, CVE-2026-45186 and CVSS unreliability

For readers new to Expat: libexpat is a fast streaming XML parser. Alongside libxml2, Expat is one of the most widely used software libre XML parsers written in C, specifically C99. It is cross-platform and licensed under the MIT license . Expat 2.8.1 was released yesterday. The key motivation for cutting a release and doing so now was: Fixing vulnerability CVE-2026-45186 that allows easy denial…

Steven, please fix the 1% loss/gain graph!

Back in December 2023, I got curious about Steven Bartlett's then-new book The Diary of a CEO: The 33 laws of business and life and ordered a copy for myself. I dived right in. On page 184 this graph hit me: It is meant to be about how 100 USD develop over time with either constant 1% loss or 1% gain per day. It puzzles and amazes me to this day how this graph — with all the things wrong about it,…

Fwd: Karen Hao interview at DOAC

Original title: "AI Whistleblower: We Are Being Gaslit By AI Companies, They’re Hiding The Truth! - Karen Hao" Related: Karen Hao's book "Empire of AI" Karen Hao's website

Expat 2.8.0 released, includes security fixes

For readers new to Expat: libexpat is a fast streaming XML parser. Alongside libxml2, Expat is one of the most widely used software libre XML parsers written in C, specifically C99. It is cross-platform and licensed under the MIT license . Expat 2.8.0 was released two days ago. The key motivation for cutting a release and doing so now was: Addressing security issue CVE-2026-41080 — insufficient…

Expat 2.7.5 released, includes security fixes

For readers new to Expat: libexpat is a fast streaming XML parser. Alongside libxml2, Expat is one of the most widely used software libre XML parsers written in C, specifically C99. It is cross-platform and licensed under the MIT license . Expat 2.7.5 was released earlier today. The key motivation for cutting a release and doing so now is three security fixes: CVE-2026-3277 6 — NULL pointer…

Learn from me!

Not too long ago, someone literally asked me what they "could learn from me", and that question has stuck with me since. One thing it made me do was label about 30 earlier blog posts in a new blog topic "Learn from me" that contains posts I consider to be teaching something, be at least somewhat timeless, and be somewhat unique to this blog of mine — posts like: My Approach to Code Review and How…

Expat 2.7.4 released, includes security fixes

For readers new to Expat: libexpat is a fast streaming XML parser. Alongside libxml2, Expat is one of the most widely used software libre XML parsers written in C, specifically C99. It is cross-platform and licensed under the MIT license . Expat 2.7.4 was released earlier today. The key motivation for cutting a release and doing so now is two security fixes: CVE-2026-24515 — NULL pointer…