● Covered by 1 source · 1 reportMedium impact1 positive
City of Munich Funds libexpat Maintainer for Six Months to Address Vulnerabilities
Key points
- City of Munich funds libexpat maintainer for six months.
- Funding starts August 1, 2026, under Open Source Sabbatical program.
- Priorities include fixing 5 vulnerabilities and adding XML 1.0r5 support.
- libexpat is a widely used C99 XML parser.
Munich Funds libexpat Maintenance
The City of Munich has committed to funding the lead maintainer of libexpat for up to six months, starting August 1, 2026. This initiative falls under the city's Open Source Sabbatical program, providing dedicated resources for the maintenance and improvement of the critical open-source library.
Focus on Security and Standards
During this funded period, the maintainer's primary tasks will include addressing five currently known unfixed vulnerabilities within libexpat. Additionally, work will focus on adding support for XML 1.0r5 and generally enhancing the project's robustness and maintainability. This dedicated effort aims to improve the security posture and feature set of the parser.
Impact on a Key Open-Source Component
libexpat is a fast streaming XML parser written in C99, widely used alongside libxml2 in numerous software projects. Its cross-platform nature and MIT license make it a foundational component for many applications. The dedicated funding from the City of Munich ensures that critical security and development work can proceed without competing with the maintainer's other professional obligations, benefiting the broader open-source ecosystem that relies on libexpat.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
The City of Munich is funding the lead maintainer of libexpat, a widely used XML parser, for up to six months starting August 1, 2026. This funding will allow dedicated work on fixing five known vulnerabilities, adding XML 1.0r5 support, and improving project robustness, which is significant for the many projects relying on libexpat.