From 67380a32f78ca09b4e302a92307de585b9ee18d7 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Tue, 22 Sep 2026 23:41:43 +0200 Subject: [PATCH] package/expat: security bump version to 2.8.5 https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/Changes https://blog.hartwork.org/posts/expat-2-8-5-released/ Fixes CVE-2026-93990. Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain --- package/expat/expat.hash | 4 ++-- package/expat/expat.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/expat/expat.hash b/package/expat/expat.hash index d8b4eef2f9..262ad4bf0d 100644 --- a/package/expat/expat.hash +++ b/package/expat/expat.hash @@ -1,4 +1,4 @@ -# From https://github.com/libexpat/libexpat/releases/tag/R_2_8_4 -sha256 656ae1cc8da3b4ea513bb4e254f33e6243938084c0ec6239da873376b09985a7 expat-2.8.4.tar.xz +# From https://github.com/libexpat/libexpat/releases/tag/R_2_8_5 +sha256 1e727b8933ec51a77a9a9d9afcf8e688bce45d907c13e36ab7393fe36e703182 expat-2.8.5.tar.xz # Locally calculated sha256 31b15de82aa19a845156169a17a5488bf597e561b2c318d159ed583139b25e87 COPYING diff --git a/package/expat/expat.mk b/package/expat/expat.mk index 1e5b738463..be4180992f 100644 --- a/package/expat/expat.mk +++ b/package/expat/expat.mk @@ -4,7 +4,7 @@ # ################################################################################ -EXPAT_VERSION = 2.8.4 +EXPAT_VERSION = 2.8.5 EXPAT_SITE = https://github.com/libexpat/libexpat/releases/download/R_$(subst .,_,$(EXPAT_VERSION)) EXPAT_SOURCE = expat-$(EXPAT_VERSION).tar.xz EXPAT_INSTALL_STAGING = YES