From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Thu, 24 Sep 2026 19:50:54 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1x9naw-005rbK-1O for lore@lore.pengutronix.de; Thu, 24 Sep 2026 19:50:54 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1x9nav-00009w-RK; Thu, 24 Sep 2026 19:50:53 +0200 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1x9nad-00009o-UE for ptxdist@pengutronix.de; Thu, 24 Sep 2026 19:50:36 +0200 Received: from AM0PR02CU008.outbound.protection.outlook.com (mail-westeuropeazlp170130006.outbound.protection.outlook.com [IPv6:2a01:111:f403:c201::6]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id 841A420075E for ; Thu, 24 Sep 2026 19:50:31 +0200 (CEST) Authentication-Results: mx1.white.stw.pengutronix.de; dkim=pass header.d=t2datacom.onmicrosoft.com header.s=selector1-t2datacom-onmicrosoft-com header.b="QhUen85/"; spf=pass (mx1.white.stw.pengutronix.de: domain of christian.melki@t2data.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=christian.melki@t2data.com; dmarc=pass (policy=none) header.from=t2data.com; arc=pass ("microsoft.com:s=arcselector10001:i=1") ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1790272231; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding:dkim-signature; bh=rqAVmSWuvu7/iE/mz06V50e9zc7nEfuJqUYqxM2mvHM=; b=AfJWzjROznI8uu4ELFwQfH0wmMqdXeXB7GInGLEYKsRO7pOI41yFJbYLZuxIftZTVJABAu AEjyxeL2Y1R2Pfmt3DnTTsoF+QED9mN2w/Sc2nE/zvrM0A+MDiUTuJlWDuc5guny+fYodo 2+8ByhaWtELETmXiT8jkcbaDO/jk4P8ukgm23PoXg9PVwpWoS+fCDPU+nqIvOmqiaE1fIB 1sf8NYZsq6XnmHuC0T+DouZ3AKVl8QbleZ+Qf4dAXar0+3Vkfrrxde2hU0GuiFLLoPec5W qA0/vTOSpYKVoAbMWPbZlnOZla2CgYVsBcA3LE5Nq6C1Z0m5nX392/w67K9GQw== ARC-Seal: i=2; s=20260414; d=pengutronix.de; t=1790272231; a=rsa-sha256; cv=pass; b=eMuAbEb1K2egi6b6FkhjvcL267dgN6yNvZuTSWKegvA4GT5Z4oU45ZFTt2c/YusYeGMX9x pC9bWA1jQ9AcMBq8g1rd7ate/w1O/KIKjIDoR85ncj/2SwLJ46Vi/kFJSkn4TCXVxlg6lM ljsVqNIfTl5jtrqRjRRv2y7LIBRxiPy0fga4gOTq1i6iL9GkRapeQgBDk7Sb6Jk1qAhQQF 7bI30d5gGgS9Zxe2Vg8Gq3yGlxy7U061z77yiv+5Dvmu+0oX8p/HQ71fSL+H6rUFbLJ5Vq yNVVKvJ8hibXDyWub8R3fglKJTINaByE0LFlo6kAmdMb/FC3kcQtyJTbryHMmg== ARC-Authentication-Results: i=2; mx1.white.stw.pengutronix.de; dkim=pass header.d=t2datacom.onmicrosoft.com header.s=selector1-t2datacom-onmicrosoft-com header.b="QhUen85/"; spf=pass (mx1.white.stw.pengutronix.de: domain of christian.melki@t2data.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=christian.melki@t2data.com; dmarc=pass (policy=none) header.from=t2data.com; arc=pass ("microsoft.com:s=arcselector10001:i=1") ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=FBD6xL6N6UrLvwY+c5vq1V1WaUVDOqNj9T4x0kx75GHrn4egRvD+O3h7BQ8c74HvvHECLPEeJyRoXLlCtfDAklMsewl561ahcUYNP8uH79Ko4MwwldFB3C/1QwlKtqQrAkFiKYmrqspLbz9tt8ojKi0YqXl7/k00hHRX08EKo9wD8CXG1il2Gp0MbPno1fJF4eykzoJ0MzroeqLb2IqEOZpKysIGNMeetoeukLgfOOOKMZ7GybJmh7XOM6BRrItgyqhBRDcEy9DeOVxp3X0HgrVTI7g68boLmcIhujWXDtPRis/r5ilTJEZ4L1APMPqMpAmmw142uqLqvnDbpr948Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=rqAVmSWuvu7/iE/mz06V50e9zc7nEfuJqUYqxM2mvHM=; b=sB9gTC6HlgJGAV4YoczHuGftAkTXc+QxyTichY51Cuf8Iqtp416LVTtOwK0BzEUWPzkXzLOxWpQxsNSZvT8JFaaM+Xrn1or8VmprXWGAo68mKMHW/SmW+aFmCrdkcg9nz3KowCNiAXFLubke+kNsU+vokHKl0gbK+GpCbL5ZQ6C+7deb4C7BUd0HOobpzjc36bVfDFIBMmrKa+5n8L0w3AbuJSjzF46WQuw3LtRIA1j5Zc/wWDRNE0aywL9pH/kfxXKIROd/bm9HvynXb5vXuK5QhOohuIyl5LPEP+6O7xo39IKCmCeydzhb08WYmyRw9+Qki+a6zIhl24KaCCl2aA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rqAVmSWuvu7/iE/mz06V50e9zc7nEfuJqUYqxM2mvHM=; b=QhUen85/Nj884BmLksEgS7hnuhRfVb7Zpvglmpv1u8bggO0zjqoO5JdNuzCm0zgkX7H1eU0/drvZ2oOgLPDlhF5yU4BxRWxSkulbehjcDbIMVdNL0npjGe6nRcn6k0sTC51pJvi0m+r6reYkAvHet9KuRthP7v5WEpJlQi+pcxY= Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by PAXP251MB0543.EURP251.PROD.OUTLOOK.COM (2603:10a6:102:28a::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.14; Thu, 24 Sep 2026 17:50:28 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%3]) with mapi id 15.21.0451.012; Thu, 24 Sep 2026 17:50:28 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Thu, 24 Sep 2026 19:49:40 +0200 Message-ID: <20260924174940.1929559-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: MM0P280CA0028.SWEP280.PROD.OUTLOOK.COM (2603:10a6:190:a::8) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|PAXP251MB0543:EE_ X-MS-Office365-Filtering-Correlation-Id: 2df1c620-c3c8-434a-5a8e-08df1a6451ab X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|1800799024|52116014|376014|366016|23010399003|10067099003|56012099006|18002099003|38350700014; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(1800799024)(52116014)(376014)(366016)(23010399003)(10067099003)(56012099006)(18002099003)(38350700014); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?xMxYgAxurdAyfBDzHscrOHRjVUXfdjsRyi+fkLtRUGvxDisLYmyZseAWKV1E?= =?us-ascii?Q?XvMqMJNPx+Gf3yxKkO1M5dsSSt+fgGXT6Tj0GwvkmyItHpzSguburnXoqX83?= =?us-ascii?Q?s1J5y2wdHN6zIeHcLWSGx+DggS9SHOAZCT/GDEzJq7L2ZG4hMA/LrVT/KLjr?= =?us-ascii?Q?eedNo3VnqmDcLaoU7Tzdytw32QsvAde1ygRaopGelqUEGRpDx3DRqq2iYB6u?= =?us-ascii?Q?o5TeylafQFwCCqcLPkLXUMzvneC9obuby76Z2QTFj8jWP3r5+xw6G5P+JVHV?= =?us-ascii?Q?w4xlW/R2/AEsKbh5FV5puDyUjEzI96Bxp/QY1/zMWRF6rg5gV+vEDXeUjr3l?= =?us-ascii?Q?T3rmq90zRVMYONozk+N/9yvfv1K7OQIVd+M+e2j1E43DErpfkvbnsVPwny9h?= =?us-ascii?Q?yTiitWfTO0xP921qnGe+HV0BV/10yRG5BjbSsoWPNCc55BADzfJzHLHIY+mc?= =?us-ascii?Q?SivdK684H8Djw3BJnu1Rzz5mf8HfPl3jI2gBQqzhJnEmvSIBRmWZR9VQyA+6?= =?us-ascii?Q?4GC5lRXKuW4GLL2DF72ZL5g6srFKK8ntiQ32paqHpIwWlUUGis6nU2jEnym1?= =?us-ascii?Q?3FV2dAc0TaNrjt+xQFkDcRrhV1wAk2lz78xOqi6DJRhUNYeDQCogruiW/w6u?= =?us-ascii?Q?bfjeKQ0J1VYIB2Dcm/vbIhj41lll9xoTo4DTXrelFT2BQbnJPa1b1EHeAxjH?= =?us-ascii?Q?Iefg5/fAi1ojDExlrqp+/gYoqmiexQFiKlZm8iigLuLFAp2t12FeqFwgaSJD?= =?us-ascii?Q?d8v73+KBjyY0LhJpaIDgEVpP9FEf3+47Gfy1DUpj+yjhLyed7RX3qCcrpqs/?= =?us-ascii?Q?JZ4vJOOoHCVgvxtiL0okErAMkS1NTflfwJkqK9VZwTZHZtmsjGw9whpgMwds?= =?us-ascii?Q?o0lL+WGqh0UkMq2nsz3xvhjSnJTOJm8k1kjQ3cW8w3R5mExPl/hNtxvQWl7M?= =?us-ascii?Q?VD/3p8alS6MXT8Hnut8ul1jrDTeHBWk3VXOvxFBYlMUXgbGG0a/caCm+JAY+?= =?us-ascii?Q?XT4yKj+Vwf/676LdGUimaTcwdYEUgvf3n2n3HVqkmtM9O3PJmecIew20aHvx?= =?us-ascii?Q?wC2xtPs4dU2RFO74n9X/RPuSU9F9wD9veXfGkacNlG1I+k+ouAbwOxVIGPxi?= =?us-ascii?Q?LcXZpTa7Xvo/uVlhn0GkYJdL17meUQvoW23Gf6nhUS7M0KBMFGLgukl+kF/B?= =?us-ascii?Q?SYElWl1CRE61trp0DDT6N470U2spDObG+5nhFyvwDc+p9KacSerag78272vH?= =?us-ascii?Q?1OKgJqMizWYBuYFd0jXxBwyt4fD362KOAsqufD5MAqFLFkMI0FcBI0ZIrZNY?= =?us-ascii?Q?gqHMWbmrLetiy/xCFexl6XOPW7iJsujIpBYY7D56TyCwcvAx4O5NDRUarDj/?= =?us-ascii?Q?d7ktbFANw5tE2YRjHgIIT8/K/Qa7vpwmfTWN2ZiHChlExxN1OH0eNQaY9nwi?= =?us-ascii?Q?hOLM73qoxT1rUZEYBhhTjPBO/YOg8dbETi8AJ6VTbqYQvLZSsmDJOUitedYj?= =?us-ascii?Q?pEtgIYfYCqqPlNw/aoD1VyOFD88Zwj0d/f9QtoS4RcKhJEaoKI1znMhLMCHf?= =?us-ascii?Q?Ox86lLYFx0fc3aHGyMnHTOHclVQuYTag0WxWIrgP1GtmWXwWgbCF5nxJWzNQ?= =?us-ascii?Q?i6znyTWtVj69eRhOn3/w6upgEorewaidEXNF/6ntaMGfx3RC3yS5YU3yqAfK?= =?us-ascii?Q?tQoTsUVw5Q/nICz5VQsfrVdWHhQv0QLsEsfXugBQoOksP2c/5kInj/xbdWSz?= =?us-ascii?Q?cKksI5ZfJOggehUWO5pZIph27DQhdBY=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2df1c620-c3c8-434a-5a8e-08df1a6451ab X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Sep 2026 17:50:28.3000 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: B+KofEFlZWOEsRokxzoe2m153I59ifGxNE7KB1OREZTHF6tVtKCTgCeFQu1w7rvqelwOT4PfVAwvb1afpk9Y8c21cOacXx6xHvnpjki8L4g= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAXP251MB0543 X-Spamd-Result: default: False [-3.50 / 15.00]; BAYES_HAM(-3.00)[99.99%]; MID_CONTAINS_FROM(1.00)[]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector10001:i=1]; R_MISSING_CHARSET(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[t2data.com,none]; R_DKIM_ALLOW(-0.20)[t2datacom.onmicrosoft.com:s=selector1-t2datacom-onmicrosoft-com]; R_SPF_ALLOW(-0.20)[+ip6:2a01:111:f403:c000::/51]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; NEURAL_HAM(-0.00)[-1.000]; RCPT_COUNT_ONE(0.00)[1]; ARC_SIGNED(0.00)[pengutronix.de:s=20260414:i=2]; MIME_TRACE(0.00)[0:+]; TO_MATCH_ENVRCPT_ALL(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2a01:111:f403:c201::6:from]; TO_DN_NONE(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; ASN(0.00)[asn:8075, ipnet:2a01:111:f000::/36, country:US]; DKIM_TRACE(0.00)[t2datacom.onmicrosoft.com:+]; FROM_HAS_DN(0.00)[] X-Rspamd-Action: no action X-Rspamd-Server: mx1 X-Rspamd-Queue-Id: 841A420075E X-Stat-Signature: ft5hq3we6y5hzkwcjg1ehewiofzrkahq X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-1.5 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,FORGED_SPF_HELO,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS autolearn=no autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] expat: Version bump. 2.8.4 -> 2.8.5 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Various fixes mostly. https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/Changes Plugs CVE (high): CVE-2026-93990: Reject high surrogates not followed by a low surrogate. Signed-off-by: Christian Melki --- rules/expat.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/expat.make b/rules/expat.make index 3629398d9..6c9707da4 100644 --- a/rules/expat.make +++ b/rules/expat.make @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_EXPAT) += expat # # Paths and names # -EXPAT_VERSION := 2.8.4 -EXPAT_SHA256 := 963250a823c16a498582b4ad82ad0f88926be0769675d3b6956be4d769a1cd8f +EXPAT_VERSION := 2.8.5 +EXPAT_SHA256 := 952c03c33a6b337f12dae7a9b0f9dee86f867550d35c994d6bdaaddd37dc8454 EXPAT := expat-$(EXPAT_VERSION) EXPAT_SUFFIX := tar.bz2 EXPAT_RELEASE := R_$(subst .,_,$(EXPAT_VERSION)) -- 2.43.0