mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-09 07:51:59 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/expat: security bump version to 2.8.2

Browse Source 
https://github.com/libexpat/libexpat/blob/R_2_8_2/expat/Changes
https://blog.hartwork.org/posts/expat-2-8-2-released/

Fixes the following CVEs:

    CVE-2026-50219 — missing control flow integrity checks
    CVE-2026-56131 — missing control flow integrity checks
    CVE-2026-56132 — out-of-bounds write
    CVE-2026-56403 — integer overflow
    CVE-2026-56404 — integer overflow
    CVE-2026-56405 — integer overflow
    CVE-2026-56406 — integer overflow
    CVE-2026-56407 — integer overflow
    CVE-2026-56408 — integer overflow
    CVE-2026-56409 — integer overflow
    CVE-2026-56410 — integer overflow
    CVE-2026-56411 — integer overflow
    CVE-2026-56412 — missing control flow integrity checks

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
(cherry picked from commit 6b1f6f7a48)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
Bernd Kuhls
2026-06-25 23:24:06 +02:00
committed by Thomas Perale
parent c4418f2884
commit 456b26cdf4
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/expat/expat.hash
View File

@@ -1,4 +1,4 @@
# From https://github.com/libexpat/libexpat/releases/tag/R_2_8_1
sha256 10b195ee78160a908388180a8fe3603d4e9a12f4755fbf5f3816b23a9d750da0 expat-2.8.1.tar.xz
# From https://github.com/libexpat/libexpat/releases/tag/R_2_8_2
sha256 3ad89b8588e6644bd4e49981480d48b21289eebbcd4f0a1a4afb1c29f99b6ab4 expat-2.8.2.tar.xz
# Locally calculated
sha256 31b15de82aa19a845156169a17a5488bf597e561b2c318d159ed583139b25e87 COPYING

2
package/expat/expat.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
EXPAT_VERSION = 2.8.1
EXPAT_VERSION = 2.8.2
EXPAT_SITE = https://github.com/libexpat/libexpat/releases/download/R_$(subst .,_,$(EXPAT_VERSION))
EXPAT_SOURCE = expat-$(EXPAT_VERSION).tar.xz
EXPAT_INSTALL_STAGING = YES