* [Buildroot] [git commit] package/expat: security bump to 2.4.4
@ 2022-02-01 22:14 Peter Korsgaard
0 siblings, 0 replies; only message in thread
From: Peter Korsgaard @ 2022-02-01 22:14 UTC (permalink / raw)
To: buildroot
commit: https://git.buildroot.net/buildroot/commit/?id=ab71ac15ddd7ed6a8ca83cbc23ea0b0cbb343f0f
branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/master
fix CVE-2022-23852, CVE-2022-23990
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
package/expat/expat.hash | 6 +++---
package/expat/expat.mk | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/package/expat/expat.hash b/package/expat/expat.hash
index 0853c3c76d..3129801668 100644
--- a/package/expat/expat.hash
+++ b/package/expat/expat.hash
@@ -1,6 +1,6 @@
-# From https://sourceforge.net/projects/expat/files/expat/2.4.3/
-md5 b1137f030590b3f0c41c69c6cd68fa90 expat-2.4.3.tar.xz
-sha1 cfaacc4f929b34cfbde2b8f33b74ec84c0cbb329 expat-2.4.3.tar.xz
+# From https://sourceforge.net/projects/expat/files/expat/2.4.4/
+md5 a712d23b7afb32e7527cf0b3fd8f12ac expat-2.4.4.tar.xz
+sha1 6028b04d3505fc519c4c7c6bd67e1ad1a08cd7b6 expat-2.4.4.tar.xz
# Locally calculated
sha256 b1f9f1b1a5ebb0acaa88c9ff79bfa4e145823b78aa5185e5c5d85f060824778a expat-2.4.3.tar.xz
diff --git a/package/expat/expat.mk b/package/expat/expat.mk
index a7ace66095..250600c25e 100644
--- a/package/expat/expat.mk
+++ b/package/expat/expat.mk
@@ -4,7 +4,7 @@
#
################################################################################
-EXPAT_VERSION = 2.4.3
+EXPAT_VERSION = 2.4.4
EXPAT_SITE = http://downloads.sourceforge.net/project/expat/expat/$(EXPAT_VERSION)
EXPAT_SOURCE = expat-$(EXPAT_VERSION).tar.xz
EXPAT_INSTALL_STAGING = YES
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2022-02-01 22:15 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-02-01 22:14 [Buildroot] [git commit] package/expat: security bump to 2.4.4 Peter Korsgaard
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.