From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Mon, 17 Aug 2026 22:53:22 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1ww4Kf-004G79-0a for lore@lore.pengutronix.de; Mon, 17 Aug 2026 22:53:21 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1ww4Kd-00017y-7G; Mon, 17 Aug 2026 22:53:19 +0200 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1ww4KU-00017d-G0 for ptxdist@pengutronix.de; Mon, 17 Aug 2026 22:53:10 +0200 Received: from DB3PR0202CU003.outbound.protection.outlook.com (mail-northeuropeazlp170100001.outbound.protection.outlook.com [IPv6:2a01:111:f403:c200::1]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id 39715200C95 for ; Mon, 17 Aug 2026 22:53:06 +0200 (CEST) Authentication-Results: mx1.white.stw.pengutronix.de; dkim=pass header.d=t2datacom.onmicrosoft.com header.s=selector1-t2datacom-onmicrosoft-com header.b=AcXJ3AID; dmarc=pass (policy=none) header.from=t2data.com; spf=pass (mx1.white.stw.pengutronix.de: domain of christian.melki@t2data.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=christian.melki@t2data.com; arc=pass ("microsoft.com:s=arcselector10001:i=1") ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=XVtuctNXIaF3I8qtZLeVwkKVDez1t8vLcbn1Dfth11xCFNPVRSOyU/hcySvCs6Ap7KAGfWxtgGRRcVJn2FN97NKZE4zsu+xUAHq0ixllpJ4YW1ibBzmwOVDbSoeulu4sKHmHvj5cfbkrZF6w9urhcQGKtU2Z2uptEKtbiLwAW+OZb/ze7ezQNMVe2NlwIKzGU8KNg5edpzU+inJCEMnbHc5D43HCQcvb0zOmhDt6jImY+v32dXtaRzyte6/ScRhHZ2cuBDHib4b4+c7hAlhO8aZ178xG8hmKny6DUlmjCzV9iJ7s8RH33xMxQBKNwEBgpqVIU6Sk7sSSi3Tr7fBHew== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=X+hXTlXRgvNsx3vzDj+hI18bnlmgJqqfOCKaPXANsAw=; b=QHIktybUdeuw/pn2c7iZ0KOGlg7VPnV7AZgngwK+7u6kw7vpmP9/DJyNIqEhA5VRXc4t9vPr/UfQF5/HJrq0znaOAaqtWxOlYkMkGlFsAyXMKRq2sbWrpgwIvSHz7C0BTJBss8/w5yhGn5ibjyAlDe1lCdAxCSr0BKw2OiQeBP3rGmfbJcuf730JlzcpbqdJ9MsgFQ7bI4UIRNgTiq15PRXzMdzKm+4gpr8Ml79OHLRnDS2uE6187y9Pe8T40o4BlMnntEGbDxJ+PhsLJYOkXMZ9i/hHiOjczz0RYT8fqIDeHtZv71UFRld2Cr4xaen0vgrlE2/tRIZ+PsUtlidzfQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=X+hXTlXRgvNsx3vzDj+hI18bnlmgJqqfOCKaPXANsAw=; b=AcXJ3AIDqjs1M7aMhu92PsrMUF6oWbjTG80QAtY+/JUYivk6C35EOTqG8VGT5PBXSSTQkNwg8O4q+G1sIDVn9qS6CMi76mX9NKJo7y++pwvMucXW0klcc7oCcIJwK75aG8LkWxLUyPSwVgXpQeT+AD0eE3U9sEG73qlaHoek4fI= Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by GVXP251MB1055.EURP251.PROD.OUTLOOK.COM (2603:10a6:150:1b3::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.17; Mon, 17 Aug 2026 20:53:02 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%3]) with mapi id 15.21.0315.016; Mon, 17 Aug 2026 20:53:02 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Mon, 17 Aug 2026 22:52:56 +0200 Message-ID: <20260817205256.1105168-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GV3P280CA0007.SWEP280.PROD.OUTLOOK.COM (2603:10a6:150:b::10) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|GVXP251MB1055:EE_ X-MS-Office365-Filtering-Correlation-Id: 4d820ed4-661e-4c67-cda0-08defca18770 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|52116014|376014|1800799024|366016|23010399003|38350700014|10067099003|56012099006|18002099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(52116014)(376014)(1800799024)(366016)(23010399003)(38350700014)(10067099003)(56012099006)(18002099003); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?coRELjYc+uLroXq4OsDDdtdPqlGDOs/U7togOU+oVJWFsUbCczObOk7OZBnv?= =?us-ascii?Q?kXhJqNkZK7pVjzCyaRSR8QOpCJjEL9CRgRJL/mE1Y0zD3wvu3JozgEwH/kLw?= =?us-ascii?Q?C0ctN8A2UvEKV1gW5cpXyQvfaTt7usSbpEkxaLSeq/jM5Y0RPs/p77WxqonL?= =?us-ascii?Q?yz5NW7MInbG6M+0qtEyX1BurS+WqAcQUbM7OPDdBQkbJ5Ary7ORDH6BKR+cv?= =?us-ascii?Q?loagu2WPXf2ZDkgFVq5NRPDqYauW3MLPFF8MHF8Owaf677JRRjQtvnXsCClB?= =?us-ascii?Q?n6DctvtUV11Ggvx3S8FqkkSelSI4s797Pa/eo34XvWtVLeJ/eg/eu4xIHXaZ?= =?us-ascii?Q?bdO/tEJcZZtKoysKdEaGkhuCDtfW4usWnwyUIhTtPZfGT6Tqn23ubVKDkYDp?= =?us-ascii?Q?sI4Y9XTPRRBPu9tZ3K3wzCbDVR1FVHwz1f2Ja+3Ez0+It/D8o4BKiP28FJtc?= =?us-ascii?Q?ijoNDXFAhXzxxoQnzVY34umge/+Vi3lpSRhvL0/m0mGkThqJlLzpq+bN3/E8?= =?us-ascii?Q?s1sVWsIZClKeyfRszJpWKZY2tWTP7NCJBKjrg4G3QBSDpnnC6ARBz93ZM2iq?= =?us-ascii?Q?nZ/EMyYo7tiofKdB/LKi9R6tTPpoWTAufJbsFqlhvKe3txj9/jScED2ZXCeO?= =?us-ascii?Q?jzPgFVLoNjgCljhiAzxIB0OtmO2KVvVLd8YN7K6WaZO9fZhLHuem1o8WlsOx?= =?us-ascii?Q?yF6m1RblvdsT/Fp02plYuAaPUjVdJs/r1aPH7vIyQ4K5YZ7FNlQAeCvNGByD?= =?us-ascii?Q?DbZgKQHkKE/v0EOTcOPkF61ljrEAAOCLHAmEBotxaPq8Rde8NnAA0iEPDLO2?= =?us-ascii?Q?5pEBDHMbj0nnkJ9e+8pnI8mE+i3DM21pGMVlLZzeYatGFhlNOJ9Wh1XsLF0X?= =?us-ascii?Q?H98FXxqxHUbA4EXtjo8VNdmRFOTpFvjac79IecBdQASmiy1h30x7XnpqhtJk?= =?us-ascii?Q?w0zBqfm9FDYsWIB78CF5Fvuo5EFuVw18UoxjQte668TCOG7zinklbi0fvvXX?= =?us-ascii?Q?2A1o/RCz95BMHL8oYL4TfRSItuHt+oeAmYBNcCxvp4OgcebNN5kEF6Oy0+PX?= =?us-ascii?Q?FSlkHUindWSAebJHLqM5wF9IpbCJwwpgOvIlqxE3O6j9ck5OpO7HIsiMNCXi?= =?us-ascii?Q?QGMfpn04byE45UCblmVBunWd/4dGcZWGvyXQmf5Ih8rvmkaybkKWa0A+eqqL?= =?us-ascii?Q?cgMMMOQnCzwaR8a5vxu9ztMtI4ggpk3Lpp+1gEnwmi+vIrO5OWQKjLWm2P2W?= =?us-ascii?Q?3SehlunjoVQoNVLiC/Wjuj/D8fzfQ+kvnhIglVJn/z0wGvp0JYxiUjhrLbH6?= =?us-ascii?Q?vd/aY4pjTEDUA1wPMCz+eDsVr94WQzH5dcx5L4+jOG+8wWU/VVzTtqkpnNM8?= =?us-ascii?Q?uh8QqeTuwn41o4V/jmH2+YaYmdDOFqKVLDrMVEexlOK4b9bPZMUxIyGlkp/F?= =?us-ascii?Q?jMlxhs6PiJdain91k++eOZuNYGZXB7KA64Bo5MTprb+IuTVLaZ/Wn0mWIEFI?= =?us-ascii?Q?9OKuZCENUf+md7jBM7gVCZk2+vHGENJsNsznpqWw0oOziPKPzcV2XCj/cLVd?= =?us-ascii?Q?kGFiI4oTpan3VGoPoxOgYXlJ6hTvqm2tr7b4HtMMaO01T/GKZTMclz259q1v?= =?us-ascii?Q?5Ap2JKoSKdPoNm1ejYWtwAqGAVV1oxLIvUVKcf5Wyjz4HiqjE6I9C7jpOwod?= =?us-ascii?Q?Pq1MniLaWvn985tD7XxmtKKH5ZXokpiJIm/MsrjkZKG/cw5ZjVogPxbKOoN8?= =?us-ascii?Q?aDd8gqkU4NRpflefIUzTG2k5AiIm+3Q=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4d820ed4-661e-4c67-cda0-08defca18770 X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Aug 2026 20:53:02.7250 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: D2weLTeoNmvI81rVcYlN70g+Hup/fGzXuiSib0Dtl3ISisBc23UBzldZvQBstAG1kRfjRuqIItdzlzChtR+eNai56wNaSvs46S/0Lf5jzcw= X-MS-Exchange-Transport-CrossTenantHeadersStamped: GVXP251MB1055 X-Rspamd-Action: no action X-Rspamd-Server: mx1 X-Stat-Signature: gekq1ebjj3megt4gje8wpfu7sdyph168 X-Spamd-Result: default: False [-3.50 / 15.00]; BAYES_HAM(-3.00)[100.00%]; MID_CONTAINS_FROM(1.00)[]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector10001:i=1]; R_MISSING_CHARSET(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[t2data.com,none]; R_SPF_ALLOW(-0.20)[+ip6:2a01:111:f403:c000::/51]; R_DKIM_ALLOW(-0.20)[t2datacom.onmicrosoft.com:s=selector1-t2datacom-onmicrosoft-com]; MIME_GOOD(-0.10)[text/plain]; TO_MATCH_ENVRCPT_ALL(0.00)[]; ASN(0.00)[asn:8075, ipnet:2a01:111:f000::/36, country:US]; RCPT_COUNT_ONE(0.00)[1]; MIME_TRACE(0.00)[0:+]; FROM_HAS_DN(0.00)[]; RCVD_TLS_LAST(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; NEURAL_HAM(-0.00)[-1.000]; RCVD_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[2a01:111:f403:c200::1:from]; TO_DN_NONE(0.00)[]; DKIM_TRACE(0.00)[t2datacom.onmicrosoft.com:+] X-Rspamd-Queue-Id: 39715200C95 Subject: [ptxdist] [PATCH] expat: Version bump. 2.8.2 -> 2.8.3 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Minor fixes, including security. https://github.com/libexpat/libexpat/blob/R_2_8_3/expat/Changes Plugs CVE: CVE-2026-72522: Fix an out-of-bounds read. Signed-off-by: Christian Melki --- rules/expat.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/expat.make b/rules/expat.make index acf88b4d8..767da98b9 100644 --- a/rules/expat.make +++ b/rules/expat.make @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_EXPAT) += expat # # Paths and names # -EXPAT_VERSION := 2.8.2 -EXPAT_SHA256 := 69e7f52417d85b1c2b7fe855e176eec55d0b2d7d92d691372d833a1c7df7923b +EXPAT_VERSION := 2.8.3 +EXPAT_SHA256 := b4cc2483927d5e90bf8c40b44a6b95b368b42a8a96e25883fce188b48a92b670 EXPAT := expat-$(EXPAT_VERSION) EXPAT_SUFFIX := tar.bz2 EXPAT_RELEASE := R_$(subst .,_,$(EXPAT_VERSION)) -- 2.43.0