Thanks, applied as 4c4cfa8d1e5e3fcc2eee33aeb09237ef6622265f.

Michael

[sent from post-receive hook]

On Mon, 24 Mar 2025 08:45:53 +0100, Christian Melki 
<[email protected]> wrote:
> Not overly exiting.
> https://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes
> 
> Plugs CVE:
> CVE-2024-8176 - Fix crash from chaining a large number of entities..
> 
> Signed-off-by: Christian Melki <[email protected]>
> Message-Id: <[email protected]>
> Signed-off-by: Michael Olbrich <[email protected]>
> 
> diff --git a/rules/expat.make b/rules/expat.make
> index 35b652b154e2..e1ccb4c79e7e 100644
> --- a/rules/expat.make
> +++ b/rules/expat.make
> @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_EXPAT) += expat
>  #
>  # Paths and names
>  #
> -EXPAT_VERSION                := 2.6.4
> -EXPAT_MD5            := f1acfb75967648230d37629e02afbadc
> +EXPAT_VERSION                := 2.7.0
> +EXPAT_MD5            := ec6d9a4d8033395bbb9287286db8bb1f
>  EXPAT                        := expat-$(EXPAT_VERSION)
>  EXPAT_SUFFIX         := tar.bz2
>  EXPAT_RELEASE                := R_$(subst .,_,$(EXPAT_VERSION))

Reply via email to