From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Sun, 06 Sep 2026 13:18:37 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1x3AtR-000hrv-13 for lore@lore.pengutronix.de; Sun, 06 Sep 2026 13:18:37 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1x3AtQ-0002lX-Or; Sun, 06 Sep 2026 13:18:36 +0200 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1x3AtH-0001wq-5p for ptxdist@pengutronix.de; Sun, 06 Sep 2026 13:18:27 +0200 Authentication-Results: mx1.white.stw.pengutronix.de; dkim=pass header.d=t2datacom.onmicrosoft.com header.s=selector1-t2datacom-onmicrosoft-com header.b=Q59JGogo; spf=pass (mx1.white.stw.pengutronix.de: domain of christian.melki@t2data.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=christian.melki@t2data.com; dmarc=pass (policy=none) header.from=t2data.com; arc=pass ("microsoft.com:s=arcselector10001:i=1") Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com [IPv6:2a01:111:f403:c207::3]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id 7E1CD205D55 for ; Fri, 04 Sep 2026 20:20:14 +0200 (CEST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Q8hEvF17BVWwOzEUcShBXan0WMz/NUnbBfaAEvMXnlcIhdqT4IiG+TKCMXXIAD4ogJB65VECS2vayvHiRfC+zXiWmzTzMBmhxEaFbX/0jV579E7FXDgfJ/fu1VdTrLMfxlBlLFdys+WJ51Uqg0kSN2m234wuOQ51DPtpD9MrpT0y2flqx+drySgu+mVvLFZ85T8EcAxbzkVuNPDJIX+vWNeCNwlGkrmxwWcCV2yNToT1wyQh75zoUX82jfTU+OvxP1ISY3ukhMnhjIfYqbZo/Qy30iSGS8UYl5l3T7viNHboZs3GholY4sRX/jof51QdOAwrNNzfLoXzwCvS9mMMnA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=eeOh3+u2N9Av3WZ0O/5iRjNUI/lQNydEHrhZMumGIH8=; b=iPdgHz2GrQklIz9WyDYfAZKjw59jnb0XiXXXGE4f20SdUA7qa8ARXnsnSptiUGNUTStU4N0JO3mrJQnJ/r7/tiF4waij2IKseefV2cy/R8IeScCn6oMg+wnE3rhSBlj/kDbkMRno/HXx9zMAfDRDj3NpYrXrCw7U0m5JpATYZocPMyw0G4lBuGd5qjGCwmR4BQv00KjXa8+W/+JWx0wvl0suz/qkqkL7uQPEBLf7Prgn63l+F3DBj5gHLunMQ6O4H3e2nXUxYvgacYW28+hULCOV9VAU9OdGzAytXSQIW1gRNhJprICkyxvUFiUiwGsCRLMHG3Et8p6B7T9FRvRWLQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=eeOh3+u2N9Av3WZ0O/5iRjNUI/lQNydEHrhZMumGIH8=; b=Q59JGogoTVI0bLaTv6tJFrR2Cv9PyhF6BdPBrYVYPBuTHR/EqneSGcHLHP47W+UAUP3fUCH+kGvgiQBPjJYcy+/4ckXYrm73bvPIXUsnBl/45JT+xonOI72YI3TCkVYO6ctoEfVJ3rwBD9g5grBISYPs9kJMMGPubtq3Ula2kLo= Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by AS8P251MB0150.EURP251.PROD.OUTLOOK.COM (2603:10a6:20b:401::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.13; Fri, 4 Sep 2026 17:38:53 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%3]) with mapi id 15.21.0360.008; Fri, 4 Sep 2026 17:38:53 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Fri, 4 Sep 2026 19:38:47 +0200 Message-ID: <20260904173847.4107208-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: MM0P280CA0062.SWEP280.PROD.OUTLOOK.COM (2603:10a6:190:8::16) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|AS8P251MB0150:EE_ X-MS-Office365-Filtering-Correlation-Id: 44757ae9-c1e7-4f23-c61c-08df0aab635e X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|366016|52116014|376014|1800799024|23010399003|10067099003|56012099006|38350700014|18002099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(366016)(52116014)(376014)(1800799024)(23010399003)(10067099003)(56012099006)(38350700014)(18002099003); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?x8a/8QWwDeTzbpRMkFkaWX5Ki1L5b0P1aYHW+P6aF6rsUFWA1aXIu4ZLAJTO?= =?us-ascii?Q?Ye9dR9DcK6tjNZNg6p/eSQ8FCSpPme18zP4e4NHeI33eq/XFSVE3Zs8IGETJ?= =?us-ascii?Q?hX5t5FZdg73qo9IWB8SBDQu+t+C+yBvr9qn9NXyEAOL9AHofkt72pJk0KBw9?= =?us-ascii?Q?Qal7/vPrtQYQdp/F+3Wss8fzNpvmo5zRbKrRcVtyMJo0B7yzQamcu/IoMBMA?= =?us-ascii?Q?XsOkmQt+Ze+cJnnKd59O2nN3NcM1GrYYxpvqHWllsh/RA5755NQZoG1+IAIr?= =?us-ascii?Q?HV1lZMZ1wITz7dLsp2XwDZb8Nw1bPRzrralur4OT/QmWFvYbbRp6093Eu7hB?= =?us-ascii?Q?0Nf+GPJaYv0PS+bpIbhsgHiEsacqLRqLTUKZT+rasAW//QSm/gqVkOPXovWy?= =?us-ascii?Q?EDF/smoFxhk4CoYfOQFKpz1fAz5TgA4srmPHkUyVADYR/jZ2OITpF6idoexO?= =?us-ascii?Q?BpfSGIPBBti/GxpiJ7lkgw0KbaX9eapWmzoOPBCRgLVw5ZhTs2zuLPQ+Y8k/?= =?us-ascii?Q?KUvC5hbU/9JAoCWKn849qD3opxyupD2lmn2sKsv4mvQV3DffJp+nwQ0t6iS0?= =?us-ascii?Q?ZxRUcBfT5bjR0ip0QzGH+d0ex6x/Pf0N3XsUdu0nfLE7c8eweU3FQ8p4MTwV?= =?us-ascii?Q?inSAevgw8kZwORofq0GNt35lln95FpT6q3hQqzTW6pBqlpz4x1V7VSnEuuMV?= =?us-ascii?Q?ZE7WZLWtJ2NdnqCIO7UIECb6Q4wY9spb8M8IVWCtmMKvPGGVNWE/L1awfpEK?= =?us-ascii?Q?SEm+kBvwXFwYN8IhD3kC1nsfyvtkpbkbyGVi3NtoFaQogpt7Fk1/ZpWUU92f?= =?us-ascii?Q?gHHpPJzL1MCJlSXzawIgL1wkQfWnT52LO66sGt55f1D5+xOGXmRT+Wq0WrQ7?= =?us-ascii?Q?UmGl2WwJ2lypSgmet7cXnJD29r6c+t/LUEOjXe3x4wbh7jwXkl/bZYXmS26Y?= =?us-ascii?Q?Sap0vIghkt0MqkCQ65Gr3LqRe6dE6f9VbVebLiXM2zyoNYT6szYvVhUeoOE9?= =?us-ascii?Q?F+1VZMi8yBpcmwgMTUZXP1KLtNohysu3Nqm7eyOGDphsAJl3fDnXPJzCawCp?= =?us-ascii?Q?lKSjOkaoo79Z59aVIHjAeqR7uhgSqBGeBLK089AFUMtnmyop3JiBKHFyc7QR?= =?us-ascii?Q?K6HCFOPepZtRa8rlFr/9L9VrCJ0xnEud433COzQuabPpSh2Lb3M/g4XBmcuD?= =?us-ascii?Q?O1YsSCzP368RmJc6AQWLZm1LV/t9sKl237BJhqgafs9Vy15lKe6tmmcOvavX?= =?us-ascii?Q?+w5TWrq3phjGQ6Wv5i1t46L/7zdTpKo5KTI9krnWzojc5TxG6ixW8uGbes+n?= =?us-ascii?Q?phB08E6VHkmUnWKFwgyncx1UnFWSTQBzNN7HsE9HQtDZWzjAHCZ04cPMr3o+?= =?us-ascii?Q?ap1ZdBm28nZJW8M3xsss1/stjI7nX4xgk+wZWTRcoqwc1hwUkZ556Z+jDfWn?= =?us-ascii?Q?jR6gNtZk+NF3boXD+cufbn7VdAhj8VBdpwAy2dYOvOVFFzIzvRtKo4Cpairz?= =?us-ascii?Q?YhUyJIwhDhKLh9iMpU46PF+PeMotHeoaiHUYVqeAfoyqvQI0toiXUidyzvI4?= =?us-ascii?Q?5ruHa0BdB1bkBcEJ+tImg8ooJRv4dxf6pk2n2XgXUPUvpfFyJPwXlnaiGx8v?= =?us-ascii?Q?gE+TZtzKDWD9FGZF6fA8Ex4aaZATyzadvrMdbk56J8Jc3nhigZq5xDE00H7B?= =?us-ascii?Q?C5M6mHaCRWq1r/LGEM0y8dkhvoRbcHsOC67OzliyfLTnrjEaeN3C5GgEHInM?= =?us-ascii?Q?xnx3hgeGWlyrECtG8qnAK2zi4aV3PxU=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 44757ae9-c1e7-4f23-c61c-08df0aab635e X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 04 Sep 2026 17:38:53.4109 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: dhFvf+CXzFrNbX2ZN4ebsMH5Sq/Y595STHvbWvdJnSMG3c1pce5wUHvgz/BoiEY8r7ot7Uxwe/gmHcGN7FXmCS9OHcPoM/bCRBmfp1nIEus= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8P251MB0150 X-Rspamd-Server: mx1 X-Stat-Signature: gtrs9ra9mp5d51whwb5bn44sou97n6cc X-Rspamd-Queue-Id: 7E1CD205D55 X-Spamd-Result: default: False [-3.50 / 15.00]; BAYES_HAM(-3.00)[99.99%]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector10001:i=1]; MID_CONTAINS_FROM(1.00)[]; R_MISSING_CHARSET(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[t2data.com,none]; R_DKIM_ALLOW(-0.20)[t2datacom.onmicrosoft.com:s=selector1-t2datacom-onmicrosoft-com]; R_SPF_ALLOW(-0.20)[+ip6:2a01:111:f403:c000::/51]; MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_LAST(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; DKIM_TRACE(0.00)[t2datacom.onmicrosoft.com:+]; ASN(0.00)[asn:8075, ipnet:2a01:111:f000::/36, country:US]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_TWO(0.00)[2]; NEURAL_HAM(-0.00)[-0.382]; TO_DN_NONE(0.00)[]; FROM_HAS_DN(0.00)[] X-Rspamd-Action: no action Subject: [ptxdist] [PATCH] expat: Version bump. 2.8.3 -> 2.8.4 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Security fixes. https://github.com/libexpat/libexpat/blob/R_2_8_4/expat/Changes CVE-2026-66046: Fix quadratic runtime. CVE-2026-76641: Fix quadratic runtime. CVE-2026-76957: Protect custom encoding callbacks from parser re-entry. CVE-2026-76956: Fix inverted getentropy() return handling. Signed-off-by: Christian Melki --- rules/expat.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/expat.make b/rules/expat.make index 767da98b9..598f870d3 100644 --- a/rules/expat.make +++ b/rules/expat.make @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_EXPAT) += expat # # Paths and names # -EXPAT_VERSION := 2.8.3 -EXPAT_SHA256 := b4cc2483927d5e90bf8c40b44a6b95b368b42a8a96e25883fce188b48a92b670 +EXPAT_VERSION := 2.8.4 +EXPAT_SHA256 := 963250a823c16a498582b4ad82ad0f88926be0769675d3b6956be4d769a1cd8f EXPAT := expat-$(EXPAT_VERSION) EXPAT_SUFFIX := tar.bz2 EXPAT_RELEASE := R_$(subst .,_,$(EXPAT_VERSION)) -- 2.43.0