From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 15 May 2026 09:04:55 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wNmbP-001ukx-1u for lore@lore.pengutronix.de; Fri, 15 May 2026 09:04:55 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wNmbP-0006SF-Cu; Fri, 15 May 2026 09:04:55 +0200 Received: from mail-northeuropeazon11022134.outbound.protection.outlook.com ([52.101.66.134] helo=DUZPR83CU001.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wNmb5-0006S5-FU for ptxdist@pengutronix.de; Fri, 15 May 2026 09:04:36 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=tmeebxwJEqlZNq54JmG6/hZfjiPKX6EGTHxy/Li83gmWSGSeYpVl8D0BIpduTrXZYnP2/jii9ZJpPHZxddSOqUPag/ftzLU3vU+zD+oNRtTiij9r76ZblSmGdBWFzn5ub5nXXc5G6TnxO71RYjp6+AmNX3csu6JBD3/6edM7TowyaAdSNabOYkefehf9qvdALvnvLSAsJ3IK07wSPaddAAQg6pqeo1CBNNzZI1gw7rY7oMohhEt+GD6IG24SASnprcuXycyPWCIzcEmdfIUFzqGcjt64h84J6CNbVxvbYt+P9Q2p7ByWh1LRS8VLVGR8Bz3DHSFyNhOrGpCLpexQ7Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=L/FQB29n9AyaYoU2LTkzsznAuqvxJvm7kONuVZiI9N8=; b=td6Nk1FW0kagroOfJgQfTXegcmQ2hMpOkyLsq6WdSXzmlDA5+tZ4C0jboOIgIZSEpod10blaAu/dY81OM7At+1wxR1We+GDxxoKrzEBCO8ShEvn7wFS/nSrtOVTo22y/9zQ/O2M7vMmnirBMnxOBgClcHQ3wpfT/VQFtY95+qWME2E/L2JztpAtx0LkESa/kTlBBwQSB5C2b4M/9ucHk35hgx0NC5MU+vQEmwmyDHvEkkEMUboSX6xyArf9Y1ZzA4h+V88xOVvAP9trny9snzUpXxbKJiqtq1Smgfn9q/tZ0NScrh1vc5SJn8ZFH4D2qFKmVEnlZccC+obpzUiklfA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=L/FQB29n9AyaYoU2LTkzsznAuqvxJvm7kONuVZiI9N8=; b=Mq612o4MRtjNG+G2AZfnBjhsIKF3vbBKW+ILA+amytDIl6Zcd9rB1kvBx3oXWpLaZLtkXxlhF/Mn1TZfxAv3BLr2eD4B8IPo9IJF94uxBTN8tlpeRHnRHNo53Xq6SodMRhua58CvvpR/tK+ov0EWikPJS2aRS4ILbRfJAwtWQYw= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by GVXP251MB1083.EURP251.PROD.OUTLOOK.COM (2603:10a6:150:1e3::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9913.12; Fri, 15 May 2026 07:04:31 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%4]) with mapi id 15.20.9913.009; Fri, 15 May 2026 07:04:31 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Fri, 15 May 2026 09:04:08 +0200 Message-ID: <20260515070408.1857453-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GV2PEPF0001A325.SWEP280.PROD.OUTLOOK.COM (2603:10a6:158:401::691) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|GVXP251MB1083:EE_ X-MS-Office365-Filtering-Correlation-Id: 1c4e1ff5-4dc2-4936-1d7b-08deb25035fb X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|52116014|376014|366016|1800799024|38350700014|18002099003|56012099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(52116014)(376014)(366016)(1800799024)(38350700014)(18002099003)(56012099003); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?SxOE6LQzUpfDr/JSM4PE73ecTaX58sNSZ3xZX9+uw/Qb651T/UbmZyeJ014w?= =?us-ascii?Q?+RNxFWW8/swJIxTlciSbw7oMMx6++RaIDTWyZf5vT/kPxD0AX1FqsMau+eTB?= =?us-ascii?Q?hD/dWdlzTiUmUgL0WoYtBh8ed410BypoWw36OzAlCBJVYm4G/sTswC2/bzzc?= =?us-ascii?Q?uzvoiyO28/R2asn6I0kt5MtKWa6oIhY2MbvOyLqCE6vYMvKxmn412Eyug+JT?= =?us-ascii?Q?xw2442qOOJC3PHLBUzDkzOKa07MJD2Tj3aj90D9P+VJh8Iecza4KKMo2xnVW?= =?us-ascii?Q?QmDwzGeUied+tT76/KvNho/so7XP4rFUzy1+fjs0tVwrL1Rpipyh4ArNkcwv?= =?us-ascii?Q?PCk4d23d3H0zPfL3qqK8r00UNnjpvAPL6lVLDMQ+QZQprLAiaUUux+029EBp?= =?us-ascii?Q?s8x+jFJBG/qnkDVRUwMZkHwYvhUqnJwepqLlyyFBZpW2vuSLRdC2KvTHbzUc?= =?us-ascii?Q?dlDqwdGAxN0zVwX/N2ymgQW16Jjgl62Be04ndqCRqdIU7uOIAMgZbyS1VoRx?= =?us-ascii?Q?n/C0u7r1po9kwsTBPfZ5IhZyi27XRiJb8GoZOr9kGrpGtla+RITAoQqXNDPV?= =?us-ascii?Q?uXLnQ1KxBdzt8Y6Tej4DXdLYOcI0cp3SheUlgQXMdh6gYNt0JSYIAjhHyzG5?= =?us-ascii?Q?c32i79wEFO2pZOQHnwav5Z+JEtm58bt7OhQCvoT2KecsTz45ODkjT0UaJcy6?= =?us-ascii?Q?06FuAflsNwtT4xklih2pWsgW0J5ubNU0Q0dU6uZtWeOGzuNn4JXvbgczD/LY?= =?us-ascii?Q?rNOv4jsVxPTVLgPBZ7tNR7enYuZ1vAQPtkuiJDlSU47ADYFy4u76PXYnw9lT?= =?us-ascii?Q?1LrnRwATKAz63i2ZjPW2rJgn5lVswkn/vT1bad6XnSJDQYvFCP9SzQ50iUnK?= =?us-ascii?Q?0U2xMYZ8mB9OQz2/Aqq1G3vCNqvHnhNPRiwu19//9g2NxcCoavUz9FmMI7sW?= =?us-ascii?Q?yiBfwcYbjvaTR7O2Mjd7IMqSfXNDMGvEZIDrYxyCMiDokbD+YFLGOKLU23W/?= =?us-ascii?Q?TTpHJMheaC+EIojwIYWYTcR8+unMb53m86aZqPzhVWMORpHIXxmh31bEkJz/?= =?us-ascii?Q?nbDVTzrRI16RpBj0TCqRJHrHCgFtxXr+OqCFtgNyhfw0zq2q7iehsVOMjQT6?= =?us-ascii?Q?junYQxi7BTdXpdDx/ciwL+rqZ+H0Iiq6MM7Dn8dAl2fMhVIHnyruELzqo7ol?= =?us-ascii?Q?q/B9HAWNs9+A1BmBA1wstagNUYDB8LOa/TLV+ZYEsLjpFbR4LitwMxOzfWIS?= =?us-ascii?Q?hlJdEFQS2owYm9c25wO4DQ/MvMjKOFwSzldwCskpcek3iwKJ2H5wK1qp5Jur?= =?us-ascii?Q?xK1vI7Ak38YSlTzSL/TYWgVPazIavOkbIc3V0sob0YG+U+p+S/z7MS1GTIjQ?= =?us-ascii?Q?ykw4L2IqlJKEYctRCK0iA1/RP6lSHyYjxrKcYcYeAVWjiOHLXOvMw01V1Afr?= =?us-ascii?Q?WERuy6QyMHZkoXQRPIFMavwpOnaMoxpf5ofemg0QZke05EV9EBTva7eRnW2Z?= =?us-ascii?Q?CweauO9Dfd5TXdYyre5VPqeBMeveM0/IiWuVPi9KoTzjalEpr3bnmevSY6Wi?= =?us-ascii?Q?Xo4c7ZMM3UjU7b+5hhaWoghPXMYVdroEsUgF9c67ABmx1iV1xJBmPUvYc8Dg?= =?us-ascii?Q?gN1EUVmA8v+16Rr67QoZUuk05vPinRtlt5EjVUDaW1jxIVvH653UCIaCg1bv?= =?us-ascii?Q?3Abp3E1Uj2iQhiOQ5QxRdMA+W3kv6QADNuiqcDHAZCjpH71Wj64Nda/9CmwF?= =?us-ascii?Q?CMeHSxfIKKobL6V2a8vIXJszsbNPcj0=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1c4e1ff5-4dc2-4936-1d7b-08deb25035fb X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 May 2026 07:04:30.8807 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: JGbnnCy/YzdVjh/mezg8v/sUj8vlMr24Pa2szfOk8tKM+7IGKpcJZbCkRSiX8bRZSW4Nw+nKF3yF4y3mFaWeeEpZtzQRRAoDLkdb14RHiVY= X-MS-Exchange-Transport-CrossTenantHeadersStamped: GVXP251MB1083 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.0 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] expat: Version bump. 2.8.0 -> 2.8.1 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Minor fix release. https://github.com/libexpat/libexpat/blob/R_2_8_1/expat/Changes Plugs CVE: CVE-2026-45186: Fix quadratic runtime from attribute name collision checks that allowed denial of service attacks Signed-off-by: Christian Melki --- rules/expat.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/expat.make b/rules/expat.make index 5819279aa..411afc4eb 100644 --- a/rules/expat.make +++ b/rules/expat.make @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_EXPAT) += expat # # Paths and names # -EXPAT_VERSION := 2.8.0 -EXPAT_SHA256 := 586494499ac3ad46d87f3beda7b1f770c1c8026a9b60e151593f8b29089a52ca +EXPAT_VERSION := 2.8.1 +EXPAT_SHA256 := f5833dd2e1cd7739ec9182804a1a29c4f0cc7c2f26b633d3a2188b7766a88ecb EXPAT := expat-$(EXPAT_VERSION) EXPAT_SUFFIX := tar.bz2 EXPAT_RELEASE := R_$(subst .,_,$(EXPAT_VERSION)) -- 2.43.0