From a6ff89cc79459d5414dd9680b8326d280a5dbd8e Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Wed, 7 Oct 2026 21:59:35 +0200 Subject: [PATCH] package/expat: security bump version to 2.9.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit https://github.com/libexpat/libexpat/blob/R_2_9_0/expat/Changes https://blog.hartwork.org/posts/expat-2-9-0-released/ Fixes CVE-2026-77214 & CVE-2026-102633. Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard (cherry picked from commit b6525e9cf89394d45e1c74085d0d1d039bd890d0) Signed-off-by: Raphaël Mélotte --- package/expat/expat.hash | 4 ++-- package/expat/expat.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/expat/expat.hash b/package/expat/expat.hash index 262ad4bf0d..41778fc536 100644 --- a/package/expat/expat.hash +++ b/package/expat/expat.hash @@ -1,4 +1,4 @@ -# From https://github.com/libexpat/libexpat/releases/tag/R_2_8_5 -sha256 1e727b8933ec51a77a9a9d9afcf8e688bce45d907c13e36ab7393fe36e703182 expat-2.8.5.tar.xz +# From https://github.com/libexpat/libexpat/releases/tag/R_2_9_0 +sha256 1e6371862cc31999b368c3b89b49994f0677e1bab5f1b2b85ae3741f5d803051 expat-2.9.0.tar.xz # Locally calculated sha256 31b15de82aa19a845156169a17a5488bf597e561b2c318d159ed583139b25e87 COPYING diff --git a/package/expat/expat.mk b/package/expat/expat.mk index be4180992f..be5d8ae0b8 100644 --- a/package/expat/expat.mk +++ b/package/expat/expat.mk @@ -4,7 +4,7 @@ # ################################################################################ -EXPAT_VERSION = 2.8.5 +EXPAT_VERSION = 2.9.0 EXPAT_SITE = https://github.com/libexpat/libexpat/releases/download/R_$(subst .,_,$(EXPAT_VERSION)) EXPAT_SOURCE = expat-$(EXPAT_VERSION).tar.xz EXPAT_INSTALL_STAGING = YES