From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 06 Oct 2026 09:02:03 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xDzBb-00AOwQ-0Z for lore@lore.pengutronix.de; Tue, 06 Oct 2026 09:02:03 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xDzBZ-0002JA-94; Tue, 06 Oct 2026 09:02:01 +0200 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xDzB2-0000Sw-ER for ptxdist@pengutronix.de; Tue, 06 Oct 2026 09:01:28 +0200 Received: from dude05.red.stw.pengutronix.de (dude05.red.stw.pengutronix.de [IPv6:2a0a:edc0:0:1101:1d::54]) (Authenticated sender: relay-from-dude05.red.stw.pengutronix.de) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPSA id 621442012A4; Tue, 06 Oct 2026 09:01:28 +0200 (CEST) ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1791270088; a=rsa-sha256; cv=none; b=N0B/v7VzDITfjRIJR7CMaZKHtRS26tfZFfdf7aq2FgjyZN/tFAa5EBDF8p5thvZQo82VXJ j5IZ4lsEJZGwW4Tsc9vCdTOh8g8GkRjusHwwi2JSyqYTvojav75jmkTRwHRayMB8iPtGsB K4bJFdn8lwgHuxb2mBSZXLNqC9rngQjldAEacDUNhY48AYSSEp5nQOdfLXTiFOPInemyn3 iGySrn07GofGklbjQ5Qxr9RASdyET0h89G4qgu1JlquCsUXQZuRCQZfAuHyHCzGAqDZ8b2 ZoXcOFhK20jfszqkPLlTXAZvrRu2g9nmkqGlAebw08GQKtgaTuQIl0tm//IOVQ== ARC-Authentication-Results: i=1; ORIGINATING; auth=pass smtp.auth=relay-from-dude05.red.stw.pengutronix.de smtp.mailfrom=mol@pengutronix.de ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1791270088; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=DhzUCSnjG+TXEG7U9OGiyLOnJIV+o2eZZ6bCCXVL9w4=; b=XyllbCM/PI1pMC5DWcJdsb0WotGcnWsr2Uvc3tQ+VuGzMDnOc8NpNyvwfFxG0b8yoG81x9 kavTPzKFNBjC+tl49RfnLYNjEMXeS+NavFDlRsa93zId6R39rnsjwStcnRl+xGHwTY0ifq kVFmuvxzr9kmx7t6y1YC57WHSjgDXMV9golOr8+J2W4g54tZXmPbiXb5n471V5vyBDamGN CALd3TxkzHA/Z5NjxinDeFT6DZ4fG2MQO9b074hU/1rDk6jLK5sqefr55wwbc+Tdu+3elX HPAfuULlhjfdWlMXIVjSRQLGrIkkrNaN+iKFu7x2aBtBeS7p4hd3zp7C1sR+BQ== Received: by dude05.red.stw.pengutronix.de (Postfix, from userid 1014) id 5370D74014E; Tue, 06 Oct 2026 09:01:28 +0200 (CEST) From: Michael Olbrich To: ptxdist@pengutronix.de Date: Tue, 6 Oct 2026 09:01:28 +0200 Message-ID: <20261006070128.2792566-1-m.olbrich@pengutronix.de> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20260924174940.1929559-1-christian.melki@t2data.com> References: <20260924174940.1929559-1-christian.melki@t2data.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-3.3 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] [APPLIED] expat: Version bump. 2.8.4 -> 2.8.5 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Christian Melki Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Thanks, applied as 1d8baf62d38ca6f9eea106942ae5e38cc1a1eb9e. Michael [sent from post-receive hook] On Tue, 06 Oct 2026 09:01:28 +0200, Christian Melki wrote: > Various fixes mostly. > https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/Changes > > Plugs CVE (high): > CVE-2026-93990: Reject high surrogates not followed by a low surrogate. > > Signed-off-by: Christian Melki > Message-Id: <20260924174940.1929559-1-christian.melki@t2data.com> > Signed-off-by: Michael Olbrich > > diff --git a/rules/expat.make b/rules/expat.make > index 3629398d9d2a..6c9707da4232 100644 > --- a/rules/expat.make > +++ b/rules/expat.make > @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_EXPAT) += expat > # > # Paths and names > # > -EXPAT_VERSION := 2.8.4 > -EXPAT_SHA256 := 963250a823c16a498582b4ad82ad0f88926be0769675d3b6956be4d769a1cd8f > +EXPAT_VERSION := 2.8.5 > +EXPAT_SHA256 := 952c03c33a6b337f12dae7a9b0f9dee86f867550d35c994d6bdaaddd37dc8454 > EXPAT := expat-$(EXPAT_VERSION) > EXPAT_SUFFIX := tar.bz2 > EXPAT_RELEASE := R_$(subst .,_,$(EXPAT_VERSION))