Thanks, applied as 1d8baf62d38ca6f9eea106942ae5e38cc1a1eb9e. Michael
[sent from post-receive hook] On Tue, 06 Oct 2026 09:01:28 +0200, Christian Melki <[email protected]> wrote: > Various fixes mostly. > https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/Changes > > Plugs CVE (high): > CVE-2026-93990: Reject high surrogates not followed by a low surrogate. > > Signed-off-by: Christian Melki <[email protected]> > Message-Id: <[email protected]> > Signed-off-by: Michael Olbrich <[email protected]> > > diff --git a/rules/expat.make b/rules/expat.make > index 3629398d9d2a..6c9707da4232 100644 > --- a/rules/expat.make > +++ b/rules/expat.make > @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_EXPAT) += expat > # > # Paths and names > # > -EXPAT_VERSION := 2.8.4 > -EXPAT_SHA256 := > 963250a823c16a498582b4ad82ad0f88926be0769675d3b6956be4d769a1cd8f > +EXPAT_VERSION := 2.8.5 > +EXPAT_SHA256 := > 952c03c33a6b337f12dae7a9b0f9dee86f867550d35c994d6bdaaddd37dc8454 > EXPAT := expat-$(EXPAT_VERSION) > EXPAT_SUFFIX := tar.bz2 > EXPAT_RELEASE := R_$(subst .,_,$(EXPAT_VERSION))
