diff mbox series

expat: Upgrade 2.8.0 -> 2.8.1

Message ID 20260513115923.3375717-1-richard.purdie@linuxfoundation.org
State Under Review
Headers show
Series expat: Upgrade 2.8.0 -> 2.8.1 | expand

Commit Message

Richard Purdie May 13, 2026, 11:59 a.m. UTC 
https://blog.hartwork.org/posts/expat-2-8-1-released/

Security fixes:
  #1216  CVE-2026-45186 -- Fix quadratic runtime from attribute name
            collision checks that allowed denial of service attacks
            through moderately sized crafted XML input (CWE-407).
            Please note that a layer of compression around XML can
            significantly reduce the minimum attack payload size.

Other changes:
  #1209 #1213  Drop more casts related to `void *` that C99 does not need
  #1213        xmlwf: Streamline use of `mmap`
  #1214 #1217  Version info bumped from 13:0:12 (libexpat*.so.1.12.0)
                    to 13:1:12 (libexpat*.so.1.12.1); see https://verbump.de/
                    for what these numbers do

Infrastructure:
  #1210  CI: Cover compilation with Visual Studio 18 2026 on Windows
  #1215  CI: Cover compilation for ARM64 on Windows
  #1212  CI: Bump WASI SDK from 32 to 33

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---
 meta/recipes-core/expat/{expat_2.8.0.bb => expat_2.8.1.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-core/expat/{expat_2.8.0.bb => expat_2.8.1.bb} (92%)
diff mbox series

Patch

diff --git a/meta/recipes-core/expat/expat_2.8.0.bb b/meta/recipes-core/expat/expat_2.8.1.bb
similarity index 92%
rename from meta/recipes-core/expat/expat_2.8.0.bb
rename to meta/recipes-core/expat/expat_2.8.1.bb
index 53c141c2005..fa48d42bf86 100644
--- a/meta/recipes-core/expat/expat_2.8.0.bb
+++ b/meta/recipes-core/expat/expat_2.8.1.bb
@@ -15,7 +15,7 @@  SRC_URI = "${GITHUB_BASE_URI}/download/R_${VERSION_TAG}/expat-${PV}.tar.bz2  \
 GITHUB_BASE_URI = "https://github.com/libexpat/libexpat/releases/"
 UPSTREAM_CHECK_REGEX = "releases/tag/R_(?P<pver>.+)"
 
-SRC_URI[sha256sum] = "586494499ac3ad46d87f3beda7b1f770c1c8026a9b60e151593f8b29089a52ca"
+SRC_URI[sha256sum] = "f5833dd2e1cd7739ec9182804a1a29c4f0cc7c2f26b633d3a2188b7766a88ecb"
 
 EXTRA_OECMAKE:class-native += "-DEXPAT_BUILD_DOCS=OFF"