Due to an XXE reported in the XML parsers we have released what should be the last of the 42.2.x versions. More details on the XXE can be found here. See changelog for the complete changelog. Thanks to David Dworken for reporting it and Sehrope Sarkuni for working through the fixes.