geometer / FBReaderJ

Official FBReaderJ project repository
http://www.fbreader.org/FBReaderJ/
1.83k stars 801 forks source link

Bundling Expat 2.0.1 #415

Open hartwork opened 8 years ago

hartwork commented 8 years ago

Hi there!

It seems you have Expat 2.0.1 bundled in directory jni/expat-2.0.1. Is that used in any way still? If so: Are you aware that Expat 2.0.1 is rather old and contains security issues that have been fixed in later releases upstream?

Thanks and best, Sebastian

geometer commented 7 years ago

Very interesting, I did not know. Thank you. Yes, we still use it for parsing books. Do not think security issues are applicable in our case, but it should be updated of course.

hartwork commented 7 years ago

Why would security issues not apply?

hartwork commented 6 years ago

Any news?