Two related issues have been discovered in Expat, a C library for parsing
XML.