* [Buildroot] [PATCH 1/1] package/expat: security bump version to 2.7.5
@ 2026-03-18 20:49 Bernd Kuhls
2026-03-18 21:42 ` Julien Olivain via buildroot
2026-03-27 10:02 ` Thomas Perale via buildroot
0 siblings, 2 replies; 3+ messages in thread
From: Bernd Kuhls @ 2026-03-18 20:49 UTC (permalink / raw)
To: buildroot; +Cc: Fabrice Fontaine
https://github.com/libexpat/libexpat/blob/R_2_7_5/expat/Changes
Fixes CVE-2026-32776, CVE-2026-32777 & CVE-2026-32778.
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
package/expat/expat.hash | 4 ++--
package/expat/expat.mk | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/package/expat/expat.hash b/package/expat/expat.hash
index 7536e7cb1d..37a9c2ab9f 100644
--- a/package/expat/expat.hash
+++ b/package/expat/expat.hash
@@ -1,4 +1,4 @@
-# From https://github.com/libexpat/libexpat/releases/tag/R_2_7_4
-sha256 9e9cabb457c1e09de91db2706d8365645792638eb3be1f94dbb2149301086ac0 expat-2.7.4.tar.xz
+# From https://github.com/libexpat/libexpat/releases/tag/R_2_7_5
+sha256 1032dfef4ff17f70464827daa28369b20f6584d108bc36f17ab1676e1edd2f91 expat-2.7.5.tar.xz
# Locally calculated
sha256 31b15de82aa19a845156169a17a5488bf597e561b2c318d159ed583139b25e87 COPYING
diff --git a/package/expat/expat.mk b/package/expat/expat.mk
index 215c34e9cf..68af751233 100644
--- a/package/expat/expat.mk
+++ b/package/expat/expat.mk
@@ -4,7 +4,7 @@
#
################################################################################
-EXPAT_VERSION = 2.7.4
+EXPAT_VERSION = 2.7.5
EXPAT_SITE = https://github.com/libexpat/libexpat/releases/download/R_$(subst .,_,$(EXPAT_VERSION))
EXPAT_SOURCE = expat-$(EXPAT_VERSION).tar.xz
EXPAT_INSTALL_STAGING = YES
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/expat: security bump version to 2.7.5
2026-03-18 20:49 [Buildroot] [PATCH 1/1] package/expat: security bump version to 2.7.5 Bernd Kuhls
@ 2026-03-18 21:42 ` Julien Olivain via buildroot
2026-03-27 10:02 ` Thomas Perale via buildroot
1 sibling, 0 replies; 3+ messages in thread
From: Julien Olivain via buildroot @ 2026-03-18 21:42 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: buildroot, Fabrice Fontaine
On 18/03/2026 21:49, Bernd Kuhls wrote:
> https://github.com/libexpat/libexpat/blob/R_2_7_5/expat/Changes
>
> Fixes CVE-2026-32776, CVE-2026-32777 & CVE-2026-32778.
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Applied to master, thanks.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/expat: security bump version to 2.7.5
2026-03-18 20:49 [Buildroot] [PATCH 1/1] package/expat: security bump version to 2.7.5 Bernd Kuhls
2026-03-18 21:42 ` Julien Olivain via buildroot
@ 2026-03-27 10:02 ` Thomas Perale via buildroot
1 sibling, 0 replies; 3+ messages in thread
From: Thomas Perale via buildroot @ 2026-03-27 10:02 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: Thomas Perale, buildroot
In reply of:
> https://github.com/libexpat/libexpat/blob/R_2_7_5/expat/Changes
>
> Fixes CVE-2026-32776, CVE-2026-32777 & CVE-2026-32778.
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Applied to 2026.02.x & 2025.02.x. Thanks
> ---
> package/expat/expat.hash | 4 ++--
> package/expat/expat.mk | 2 +-
> 2 files changed, 3 insertions(+), 3 deletions(-)
>
> diff --git a/package/expat/expat.hash b/package/expat/expat.hash
> index 7536e7cb1d..37a9c2ab9f 100644
> --- a/package/expat/expat.hash
> +++ b/package/expat/expat.hash
> @@ -1,4 +1,4 @@
> -# From https://github.com/libexpat/libexpat/releases/tag/R_2_7_4
> -sha256 9e9cabb457c1e09de91db2706d8365645792638eb3be1f94dbb2149301086ac0 expat-2.7.4.tar.xz
> +# From https://github.com/libexpat/libexpat/releases/tag/R_2_7_5
> +sha256 1032dfef4ff17f70464827daa28369b20f6584d108bc36f17ab1676e1edd2f91 expat-2.7.5.tar.xz
> # Locally calculated
> sha256 31b15de82aa19a845156169a17a5488bf597e561b2c318d159ed583139b25e87 COPYING
> diff --git a/package/expat/expat.mk b/package/expat/expat.mk
> index 215c34e9cf..68af751233 100644
> --- a/package/expat/expat.mk
> +++ b/package/expat/expat.mk
> @@ -4,7 +4,7 @@
> #
> ################################################################################
>
> -EXPAT_VERSION = 2.7.4
> +EXPAT_VERSION = 2.7.5
> EXPAT_SITE = https://github.com/libexpat/libexpat/releases/download/R_$(subst .,_,$(EXPAT_VERSION))
> EXPAT_SOURCE = expat-$(EXPAT_VERSION).tar.xz
> EXPAT_INSTALL_STAGING = YES
> --
> 2.47.3
>
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2026-03-27 10:02 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-03-18 20:49 [Buildroot] [PATCH 1/1] package/expat: security bump version to 2.7.5 Bernd Kuhls
2026-03-18 21:42 ` Julien Olivain via buildroot
2026-03-27 10:02 ` Thomas Perale via buildroot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox