DSA-6446-1 expat - security update

A flaw was discovered in the UTF-16 decoding support of expat, an XML parsing C library, where low surrogates were treated in the same way as high surrogates. Parsing crafted XML input may result in an out-of-bounds read and a resultant infinite loop, leading to denial of service. Only builds with 16 bit character support are affected, which in...