packages/libs/expat/Makefile, branch master

expat: update to 2.7.4

2026-02-07T17:16:38Z

Changelog: https://github.com/libexpat/libexpat/blob/R_2_7_4/expat/Changes Fixes: CVE-2026-24515 CVE-2026-25210 Signed-off-by: Nick Hainke

expat: upgrade to 2.7.3

2025-09-27T19:07:13Z

Upstream changelog: https://github.com/libexpat/libexpat/blob/R_2_7_3/expat/Changes Signed-off-by: Ted Hess

expat: bump to 2.7.1 to fix several CVEs

2025-04-06T20:11:26Z

Addresses CVE-2024-8176 and CVE-2024-50602. Full changelog linked below. Changelog: https://github.com/libexpat/libexpat/blob/R_2_7_1/expat/Changes Fixes: https://github.com/openwrt/packages/issues/26255 Fixes: https://github.com/advisories/GHSA-9hcv-xw76-m4h6 Fixes: https://github.com/advisories/GHSA-79wf-qgrg-2p6c Signed-off-by: George Sapkin

expat: update to 2.6.3

2024-09-13T09:13:03Z

- This release contains fixes for CVE-2024-45490, CVE-2024-45491, CVE-2024-45492. - Since official place for expat development moved from SourceForge to GitHub, SourceForge was removed from PKG_SOURCE_URL. - Use gzip archive to avoid xz usage. - Remove DOCBOOK_TO_MAN=OFF from CMAKE_OPTIONS because we already have EXPAT_BUILD_DOCS=OFF, which has same effect. Signed-off-by: Yanase Yuki

expat: update to 2.6.2

2024-03-22T08:04:54Z

Signed-off-by: krant

expat: update to 2.6.0

2024-02-07T21:50:12Z

- Don't set default CMake options Signed-off-by: krant

libs/expat: fix PKG_CPE_ID

2024-02-05T00:01:55Z

There is not a single CVE linked to libexpat:expat so use libexpat_project:libexpat instead: https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libexpat_project:libexpat Fixes: 70c62ef2d77aef5d8a27ccca2b147bc2a69dc7f8 (expat: update to version 2.2.7 (security fix)) Signed-off-by: Fabrice Fontaine

treewide: remove AUTORELEASE

2023-04-21T20:46:58Z

Automatically compute and substitute current values for all $(AUTORELEASE) instances as this feature is deprecated and shouldn't be used. The following temporary change was made to the core: diff --git a/rules.mk b/rules.mk index 57d7995d4fa8..f16367de87a8 100644 --- a/rules.mk +++ b/rules.mk @@ -429,7 +429,7 @@ endef abi_version_str = $(subst -,,$(subst _,,$(subst .,,$(1)))) COMMITCOUNT = $(if $(DUMP),0,$(call commitcount)) -AUTORELEASE = $(if $(DUMP),0,$(call commitcount,1)) +AUTORELEASE = $(if $(DUMP),0,$(shell sed -i "s/\$$(AUTORELEASE)/$(call commitcount,1)/" $(CURDIR)/Makefile)) all: FORCE: ; And this command used to fix affected packages: for i in $(cd feeds/packages; git grep -l PKG_RELEASE:=.*AUTORELEASE | \ sed 's^.*/$[^/]*$/Makefile^\1^';); do make package/$i/download done Signed-off-by: Paul Fertser

expat: update to 2.5.0

2022-11-15T00:34:58Z

Fixes: CVE-2022-43680 Added GitHub mirror. Signed-off-by: Rosen Penev

expat: update to 2.4.9

2022-10-03T22:04:50Z

Fixes CVE-2022-40674. Release Notes: - https://github.com/libexpat/libexpat/blob/R_2_4_8/expat/Changes - https://github.com/libexpat/libexpat/blob/R_2_4_9/expat/Changes Signed-off-by: Nick Hainke