diff mbox series

package/expat: security bump to version 2.6.4

Message ID 20241112054700.1698687-1-francois.perrad@gadz.org
State Accepted
Headers show
Series package/expat: security bump to version 2.6.4 | expand

Commit Message

Francois Perrad Nov. 12, 2024, 5:46 a.m. UTC
fix CVE-2024-50602

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
---
 package/expat/expat.hash | 2 +-
 package/expat/expat.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

Comments

Peter Korsgaard Nov. 13, 2024, 5:53 p.m. UTC | #1
>>>>> "Francois" == Francois Perrad <francois.perrad@gadz.org> writes:

 > fix CVE-2024-50602
 > Signed-off-by: Francois Perrad <francois.perrad@gadz.org>

Committed, thanks.
Peter Korsgaard Nov. 26, 2024, 1:20 p.m. UTC | #2
>>>>> "Francois" == Francois Perrad <francois.perrad@gadz.org> writes:

 > fix CVE-2024-50602
 > Signed-off-by: Francois Perrad <francois.perrad@gadz.org>

Committed to 2024.02.x and 2024.08.x, thanks.
diff mbox series

Patch

diff --git a/package/expat/expat.hash b/package/expat/expat.hash
index e40b250ba..b0273c73e 100644
--- a/package/expat/expat.hash
+++ b/package/expat/expat.hash
@@ -1,3 +1,3 @@ 
 # Locally calculated
-sha256  274db254a6979bde5aad404763a704956940e465843f2a9bd9ed7af22e2c0efc  expat-2.6.3.tar.xz
+sha256  a695629dae047055b37d50a0ff4776d1d45d0a4c842cf4ccee158441f55ff7ee  expat-2.6.4.tar.xz
 sha256  122f2c27000472a201d337b9b31f7eb2b52d091b02857061a8880371612d9534  COPYING
diff --git a/package/expat/expat.mk b/package/expat/expat.mk
index f5c6175f2..24cfa0a9d 100644
--- a/package/expat/expat.mk
+++ b/package/expat/expat.mk
@@ -4,7 +4,7 @@ 
 #
 ################################################################################
 
-EXPAT_VERSION = 2.6.3
+EXPAT_VERSION = 2.6.4
 EXPAT_SITE = https://github.com/libexpat/libexpat/releases/download/R_$(subst .,_,$(EXPAT_VERSION))
 EXPAT_SOURCE = expat-$(EXPAT_VERSION).tar.xz
 EXPAT_INSTALL_STAGING = YES