libexpat 2.8.0 fixes CVE-2026-41080 (insufficient entropy)

[Sebastian Pipping <sebastian () pipping org>]

Hello oss-security,


just a quick note that libexpat 2.8.0 (or "Expat 2.8.0") released
two days ago is fixing CVE-2026-41080.

Some key links are:

- The blog post about it
  https://blog.hartwork.org/posts/expat-2-8-0-released/

- The change log of release 2.8.0
  https://github.com/libexpat/libexpat/blob/R_2_8_0/expat/Changes

- The fixing pull request
  https://github.com/libexpat/libexpat/pull/1183

- The official CVE metadata
  https://nvd.nist.gov/vuln/detail/CVE-2026-41080

Best



Sebastian