Thanks, applied as 6cc0a75121d43ca758ce2fc467427e368849f88c.

Michael

[sent from post-receive hook]

On Tue, 19 Mar 2024 07:44:51 +0100, Christian Melki 
<[email protected]> wrote:
> Minor changes
> https://github.com/libexpat/libexpat/blob/R_2_6_2/expat/Changes
> Plugs CVE:
> CVE-2024-28757: Prevent billion laughs attacks with isolated use of external 
> parsers.
> 
> Signed-off-by: Christian Melki <[email protected]>
> Message-Id: <[email protected]>
> Signed-off-by: Michael Olbrich <[email protected]>
> 
> diff --git a/rules/expat.make b/rules/expat.make
> index 1c5fcf44156c..03f9ac6b4d40 100644
> --- a/rules/expat.make
> +++ b/rules/expat.make
> @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_EXPAT) += expat
>  #
>  # Paths and names
>  #
> -EXPAT_VERSION                := 2.6.1
> -EXPAT_MD5            := d83bb2458956aeed4236cf45bff6eccd
> +EXPAT_VERSION                := 2.6.2
> +EXPAT_MD5            := b246f58b25a7629fca6cbd1429400cdf
>  EXPAT                        := expat-$(EXPAT_VERSION)
>  EXPAT_SUFFIX         := tar.bz2
>  EXPAT_RELEASE                := R_$(subst .,_,$(EXPAT_VERSION))

Reply via email to