From ab71ac15ddd7ed6a8ca83cbc23ea0b0cbb343f0f Mon Sep 17 00:00:00 2001 From: Francois Perrad Date: Mon, 31 Jan 2022 15:58:25 +0100 Subject: [PATCH] package/expat: security bump to 2.4.4 fix CVE-2022-23852, CVE-2022-23990 Signed-off-by: Francois Perrad Signed-off-by: Peter Korsgaard --- package/expat/expat.hash | 6 +++--- package/expat/expat.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/expat/expat.hash b/package/expat/expat.hash index 0853c3c76d..3129801668 100644 --- a/package/expat/expat.hash +++ b/package/expat/expat.hash @@ -1,6 +1,6 @@ -# From https://sourceforge.net/projects/expat/files/expat/2.4.3/ -md5 b1137f030590b3f0c41c69c6cd68fa90 expat-2.4.3.tar.xz -sha1 cfaacc4f929b34cfbde2b8f33b74ec84c0cbb329 expat-2.4.3.tar.xz +# From https://sourceforge.net/projects/expat/files/expat/2.4.4/ +md5 a712d23b7afb32e7527cf0b3fd8f12ac expat-2.4.4.tar.xz +sha1 6028b04d3505fc519c4c7c6bd67e1ad1a08cd7b6 expat-2.4.4.tar.xz # Locally calculated sha256 b1f9f1b1a5ebb0acaa88c9ff79bfa4e145823b78aa5185e5c5d85f060824778a expat-2.4.3.tar.xz diff --git a/package/expat/expat.mk b/package/expat/expat.mk index a7ace66095..250600c25e 100644 --- a/package/expat/expat.mk +++ b/package/expat/expat.mk @@ -4,7 +4,7 @@ # ################################################################################ -EXPAT_VERSION = 2.4.3 +EXPAT_VERSION = 2.4.4 EXPAT_SITE = http://downloads.sourceforge.net/project/expat/expat/$(EXPAT_VERSION) EXPAT_SOURCE = expat-$(EXPAT_VERSION).tar.xz EXPAT_INSTALL_STAGING = YES