From 402d85ef4e3d5161869d5da918ec679a9571c417 Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Sat, 5 Mar 2022 18:39:13 +0100 Subject: [PATCH] package/expat: bump to version 2.4.7 This release relaxes the fix to CVE-2022-25236 (introduced with release 2.4.5) which some of you have been waiting for, due to related incompatibilities. https://blog.hartwork.org/posts/expat-2-4-7-released https://github.com/libexpat/libexpat/blob/R_2_4_7/expat/Changes Signed-off-by: Fabrice Fontaine Signed-off-by: Peter Korsgaard --- package/expat/expat.hash | 8 ++++---- package/expat/expat.mk | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package/expat/expat.hash b/package/expat/expat.hash index 0d9f60931f..26f1098b7a 100644 --- a/package/expat/expat.hash +++ b/package/expat/expat.hash @@ -1,7 +1,7 @@ -# From https://sourceforge.net/projects/expat/files/expat/2.4.6/ -md5 22a30c888752fdda9f8dd1b7281c54b0 expat-2.4.6.tar.xz -sha1 26e223c4795c242814b0e3299a5027c22b9dc733 expat-2.4.6.tar.xz +# From https://sourceforge.net/projects/expat/files/expat/2.4.7/ +md5 75a1f475e30281a00cb6f083ea481159 expat-2.4.7.tar.xz +sha1 032ceaa11cd791d4bc622bbf0d835b8766207796 expat-2.4.7.tar.xz # Locally calculated -sha256 de55794b7a9bc214852fdc075beaaecd854efe1361597e6268ee87946951289b expat-2.4.6.tar.xz +sha256 9875621085300591f1e64c18fd3da3a0eeca4a74f884b9abac2758ad1bd07a7d expat-2.4.7.tar.xz sha256 8c6b5b6de8fae20b317f4992729abc0e520bfba4c7606cd1e9eeb87418eebdec COPYING diff --git a/package/expat/expat.mk b/package/expat/expat.mk index c481b5c225..b29b0e1d26 100644 --- a/package/expat/expat.mk +++ b/package/expat/expat.mk @@ -4,7 +4,7 @@ # ################################################################################ -EXPAT_VERSION = 2.4.6 +EXPAT_VERSION = 2.4.7 EXPAT_SITE = http://downloads.sourceforge.net/project/expat/expat/$(EXPAT_VERSION) EXPAT_SOURCE = expat-$(EXPAT_VERSION).tar.xz EXPAT_INSTALL_STAGING = YES