From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Sun, 01 Feb 2026 20:27:17 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vmd6M-007ndC-13 for lore@lore.pengutronix.de; Sun, 01 Feb 2026 20:27:17 +0100 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1vmd6L-0006zC-Os; Sun, 01 Feb 2026 20:27:17 +0100 Received: from mail-northeuropeazon11021143.outbound.protection.outlook.com ([52.101.65.143] helo=DU2PR03CU002.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1vmd6F-0006z3-4y for ptxdist@pengutronix.de; Sun, 01 Feb 2026 20:27:11 +0100 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=uNOMEsDVYhyyRG56RC7t7+bAjDtdrJ69sLdq+jy8VfUimsJO4kXw92EX58a+ptJA/q5lDyMAgxVsSw8Hy3HK4NWmih2T5dxh8qs65IyehmtN34kOiya9cetLtciKL7im0sq8V/dtHvzvorkFdsSC2S4TAUl9PLI+zVIEe9h8U45P3l5091yNMxFnzwIBKAb9GE14NyoHmaOj6T78tG7y3qUyJbSFilOtskIk2A8H/0hjHbG0gAXed2kMQTa19brcGOLQz/RdE4olit2pqMZo5xAc0IaYF0/NspXzXscQNLb43AWEvn1MxBJYeLGopDWzZadAUxvrM208Om+7Y/UFtw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=ZnZvUKBQ5CevlNi5tgRapkxy0d0VvSK7bhpsE5n92T8=; b=kHexD/e2S4SQibQ4+DPWCe3ai560b6AZHJn1hhdNNBILZ70L7GKnKHtYWRC5cZwvU4jc2ftZdYFpCNZDWJoJA4zb7Gx+xRQqOWlXFSF1E7TaxgngOMKOmR8AUNiukSfIe4Q4zb/U5Nj50dKRa1ONt21AvMhsy/kgK75tZTM9XfZnxjmZFr4x6snYKgP7mXNlzpR1hwDfQ+9TTOY2MmRlDdQJ/02brbm9qfNZfQ97Ky602Xgepjg09aeEiqPlRbttg27znKJiLngIPQsVCuzTyjLFVOxP/FVxvb3BNuHAk3Qqpvb25DaPvRlawWofsCaKth+6ZGwwk+ArqZz+IjzNdA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ZnZvUKBQ5CevlNi5tgRapkxy0d0VvSK7bhpsE5n92T8=; b=IRBDTqr1r6Oe0+uKy+Fa71j3R8gSdIN04zuYk8J1XENvN0muv+31C7YRwVV3lhwcPYwsd0aa2wHhjTh7c89RLGVhxbAA8V+Q8eqlQYZx9KP38syLFnW0dSn3BwHkF9XvCQm7uE/1pNAcOALeUd83f2pwUZc2477SoJXOp9fEFgo= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by AS1P251MB0408.EURP251.PROD.OUTLOOK.COM (2603:10a6:20b:4aa::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9564.15; Sun, 1 Feb 2026 19:27:08 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%6]) with mapi id 15.20.9564.016; Sun, 1 Feb 2026 19:27:08 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Sun, 1 Feb 2026 20:27:00 +0100 Message-ID: <20260201192700.3584186-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GVZP280CA0049.SWEP280.PROD.OUTLOOK.COM (2603:10a6:150:271::7) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|AS1P251MB0408:EE_ X-MS-Office365-Filtering-Correlation-Id: 38a9a520-24d5-4e8e-169e-08de61c7e37d X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|366016|52116014|376014|1800799024|38350700014; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?Xu6rDjnl6j6VHeZ0qFE4JGdkias5+tuSa4UIiMZP1fdVV7QzINRFBnN9grvx?= =?us-ascii?Q?uAm3fPVyjI1GtKhv2aGtsZ6w6oBAvFRWqzpYvPbFThbf/eSEacpoC+xOSZ/G?= =?us-ascii?Q?tnWj1SCLFiKiZa7Ew52M9g8zeRmGJh5gGNJPHz7QuNrl3HuBltmchf8ThBmp?= =?us-ascii?Q?mS+W2eISQ2syWAL+TxJh4NuAmfBmyD2dtCiEbnFx/hm4LOh2gyamM1j6K9pA?= =?us-ascii?Q?UQDFV7nzbBCeDR/nEM/oYCNQyQB2cLkNu2aoi/Kqf4eHgGG1rYQiKKwSwPSf?= =?us-ascii?Q?8IjTJHAVvQk30g/ApKBH3g3DCxGnMh1wYzlSrnFuxT8w6WyLGpUIin33EsFz?= =?us-ascii?Q?+zeyMGnUV+qw2dQWoV07oVu6OzrNwWLaze/fHXgbIDIEDJ6rPpqrqKVKMw+j?= =?us-ascii?Q?0NGB3eDU8eyn5Imgb8uFM1Iv0TdIlr02meSJZ4HcGo4cdExQuZBZmIc7+hSf?= =?us-ascii?Q?E8Pi3d6Vx5YWKyWJQuqFKYiHyhabVBP+R1zn1vtk3aEO4tmNp+U32+jxy6Y3?= =?us-ascii?Q?H4V7Che5wP6kPGByfpsuLYDwx6OcRNULvHp9kqj0jb2Y7gyN0cSE7V9zwC2Q?= =?us-ascii?Q?Sms1HCMGH35pk1gOf2/AEQdwh175v8PkmeOOUqtk+juWi+0600YLiiRdcZQF?= =?us-ascii?Q?doTINaCRyG73J3dFDe98Dv+zPqTiQsWlve9fDBcxfoXnBkxx2GglO8zlHkRO?= =?us-ascii?Q?LP8pNzzpnhFrJhuL28TV6aUQVtMQhuU52oQPZbkUREFBnaN+PUBH5jd0v6Lk?= =?us-ascii?Q?raOKqOoqS3t99PnP6hspXCJje9T5BLG2OLLVthFad1w8EGBJtXfVuls1Mtlg?= =?us-ascii?Q?xfFjB8dfaARmNdakjDveq4CeKaX1bQakpa3L5XoFCjzAQY2I24Dwkfp9vDJ0?= =?us-ascii?Q?dSSXgeztaAIXfjcnB+jgX+xcjz3vGRoJ6fMruA27pS9sDNXFatwBXrdAPHH5?= =?us-ascii?Q?JV78bn1pAS9uq2ogIj1WQppXd954GwaNY+a9geta5y/sVIa54KYk2sxxGEv1?= =?us-ascii?Q?qcZiaj4STIVM0N2KXmx1cpzUaOYyqZ0epUys3BUbT3G4oQYkxvfTMmkGPzkD?= =?us-ascii?Q?W1/hWGr92aTAWBIUEkKRcAr3veeVUdEQLXnDAYEE3uww/2DYllPySUOrvlN/?= =?us-ascii?Q?eavl4G9eAGrXL2C95VOqMfWEPTqOmtV+npuzYbtZzX0kPpHf1SwKSRn3WbYu?= =?us-ascii?Q?vvb99Pic+/n9cVbXbcNmOAricw9vNFrxqDlXAyCIWD5xh9HS7dcwwoD2Cnxi?= =?us-ascii?Q?FVNZKojRHNyufByuUzEiR5MS8bVhJrcrSytWdykqzfrHrl3kTGT1pqreSbBA?= =?us-ascii?Q?yY3FxYVyaL7bz2gwUGmrAOEPS3x1RUTbfhw20wkDrJ4lZQ3ukfJ4yVtNDMWY?= =?us-ascii?Q?eF3MnOtTEVA5RfABQC0CDrLldSagnabqLWBKqqManVWV8wsVjI6bBMR1S+uv?= =?us-ascii?Q?aGuoYjd7CpFMfSOaopgKhA12okHtx4/EBPA0apakT0+dkcfz8sCPYnyahhwp?= =?us-ascii?Q?H6pcFILdpBNSlW2Ht79Mt9fqc7E3rIsteXN/+UlzBmpghihmGnO7uDTDPJHj?= =?us-ascii?Q?Ldi3TeXu0v3pvmFEE8J4ycVoyUh/Bq+bnAgfnO6W4CrMGk9b4GEvXiWp3Nw9?= =?us-ascii?Q?2iW/zT+U31Z2+r4bP5P6y3Y=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(366016)(52116014)(376014)(1800799024)(38350700014); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?VcthkVLp1GPp+f8MD6uVoMJB1hfjUycS/mx7NiT+/nqJhjjXowxJgjdV4hiC?= =?us-ascii?Q?7D5yj23QFPTN3IHXMDfUKTVZBPruaFd81/Tq7JHD1AxMk6QTNIZr0owXIVlW?= =?us-ascii?Q?5ydjAnXc5B1l3yPMeCKSx8eqmOG1Dgh6i/gNQ5QpUlbuSok2zLksvMxt7+w1?= =?us-ascii?Q?E8z+knHmH4inBD0l/WktW6ALAmlmWt6SE0blzNsGPW9iZTNQD6367lOf+pqE?= =?us-ascii?Q?6ikjRt7fyom1lYMfwp7z81qPpnGsJgky0irkDCpoRTkpJQk/uEE0jrPY/5gr?= =?us-ascii?Q?Q7GvuMJYSsnJiwh01J6vbDtvZ9OhedlB800JZfma0ogvRd7PY2oajxNuer4A?= =?us-ascii?Q?8by6JMe5CSxkZfZPBYCV78zsEPb+r/sjAxPIFHMGHY3sXtNIxLp9TdlMH3TJ?= =?us-ascii?Q?r0XUSX9iiNbZ7wHmIciN9oXLjIc9mVtu1gtOB5iHxPSk/I57whVhY7KQg21Z?= =?us-ascii?Q?7I4h7+iErDtOyaDCNrC/0wflNs7HoyJhvUmYQ0K2nM7OM96xpvAaV4L5xbml?= =?us-ascii?Q?YRp8p0OTAR5IpUVsv1k/Ba4310WV8rbTdStijP4jerUQWeZgobJF3pv2t52Q?= =?us-ascii?Q?15OdDFBVcyXESZRqFMedffbAQu27ekLL9+ez5mMb+xY1zgT7Axwd2sdJ6n2V?= =?us-ascii?Q?gYqwIHtim9VDWWTnsb7M9pa7R4Ot1Rbnimvea5l6bU8HxfsDVBPZPkAsZOv0?= =?us-ascii?Q?FMvNJ/JAPgqx3/0M702U670onQq66bQtzSUK0qF28JPf1wWJi3NJtRuJjlH9?= =?us-ascii?Q?jLZ4PgwndkrDpYZA+00Nvvv/9gmZH8mjnteWmCSLN6FBi3hB+f8ZtnCd3F4Q?= =?us-ascii?Q?XG42O9M26NZgYCgaZNS/np6OVnRt/mLak0Ak/sTzZ316GjQwMv7WRH4FSwSJ?= =?us-ascii?Q?l/g92qW9Cwsbys8OsfRD+Z60wYbIt2VjqHse6kXAV6TOr3t66S0hOMNK9p3w?= =?us-ascii?Q?6Nix1x01Hxot2BVuChHwIoJDFUW7hWRY/ls4OZ1SuhbE5/xZNfrn77TRNefa?= =?us-ascii?Q?ddXqyMXSL51aoo4+L1u4qsO+gt8FeY98kNHsAKX9Q9GQIveBrGWC13OyNwBr?= =?us-ascii?Q?kmoiJuGxiAnI7QC+TR/ssVuBJEj/I+P9W/B5+h/YSmvyOpmCdkBoRJW6jrNy?= =?us-ascii?Q?BFCIYZr1XpAETodqFF8HaNN3droqfBY9wP9PvR3sOu+Y+zJehukXPBpKH8eL?= =?us-ascii?Q?UQp37eU1udTpHfIZSWyYTVNIT0hkY9Ux/JGgIcd6X6coNc4uSRLzHERxTaQa?= =?us-ascii?Q?WrQEMHQdF/L71kzYgbdVw+ELTkBCZlvrl/Qd0aVc3tCuUI1RY8u/IWgEw8DT?= =?us-ascii?Q?sQ/KwW5F4iW7boFeYshA0Ofng6EU8QPF9nLCbBNvvOojDcDcbYBMbGV7xcgD?= =?us-ascii?Q?YunmVu7+rIAnWhsG0QzTw2Drlh5wna/ek99OzLgjCXHYxy/Seq/4l2l0iEC5?= =?us-ascii?Q?Q0S8B39E0Pp+e1Ncoztp8j1wQEH8vBl57fkjJlSvvkNe8A/lknJHWyA9qZRO?= =?us-ascii?Q?IzDchUhQUyEWonZM6jAHevxUdwYO2vaduAmlju94SBvA5DH/vOhuIsVmDKf2?= =?us-ascii?Q?oFZVYr9PSOXfQDjWqeKmB/N0d+WGaoaOT27AvtGFU4fFh7C5A29wFUQdJTsQ?= =?us-ascii?Q?ECvpfaC+ShfTKa/oUeEBb6r1HeLETEcwIEWqc84vTdC/fwe5iadH86h0GQVl?= =?us-ascii?Q?J/txyr1kYeiiqZlSZeACci5cVHnGK6mSgXgt3jFYE9MNpYoIMYl9v6t+8/hm?= =?us-ascii?Q?Nd3zKe2+LC3GLg0gdKu3s5OEWjTP+M8=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 38a9a520-24d5-4e8e-169e-08de61c7e37d X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Feb 2026 19:27:08.3115 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: DT7Y6F5Jgt9Ky6qVtExkpwuCyBnzonxCC9+rTiLf8/cB8bdopwiIys9BIEOD5mueit+Zkr3kKH+/wDuVs0SLFgobSJSTcHBHDe8JGY6ylbU= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS1P251MB0408 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2, RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED, SPF_HELO_PASS,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] expat: Version bump. 2.7.3 -> 2.7.4 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false https://github.com/libexpat/libexpat/blob/R_2_7_4/expat/Changes Plugs CVEs: CVE-2026-24515: NULL dereference in XML_SetUnknownEncodingHandler CVE-2026-25210: Integer overflow in function doContent * Fix options, libbsd support was removed. Signed-off-by: Christian Melki --- rules/expat.make | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/rules/expat.make b/rules/expat.make index 3f5979155..1043bb232 100644 --- a/rules/expat.make +++ b/rules/expat.make @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_EXPAT) += expat # # Paths and names # -EXPAT_VERSION := 2.7.3 -EXPAT_MD5 := 3f1a65112ae997f8350de931b1e73df0 +EXPAT_VERSION := 2.7.4 +EXPAT_MD5 := d8c3327b7e10e75582873a0d97e7a538 EXPAT := expat-$(EXPAT_VERSION) EXPAT_SUFFIX := tar.bz2 EXPAT_RELEASE := R_$(subst .,_,$(EXPAT_VERSION)) @@ -45,7 +45,6 @@ EXPAT_CONF_OPT := \ --without-xmlwf \ --without-examples \ --without-tests \ - --without-libbsd \ --with-getrandom \ --without-sys-getrandom \ --without-docbook -- 2.43.0