<feed xmlns='http://www.w3.org/2005/Atom'>
<title>staging/stintel/tools/expat, branch master</title>
<subtitle>Staging tree of Stijn Tintel</subtitle>
<id>https://git.openwrt.org/openwrt/staging/stintel/atom?h=master</id>
<link rel='self' href='https://git.openwrt.org/openwrt/staging/stintel/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/stintel/'/>
<updated>2026-09-12T14:49:17Z</updated>
<entry>
<title>tools/expat: update to 2.8.4</title>
<updated>2026-09-12T14:49:17Z</updated>
<author>
<name>Wei-Ting Yang</name>
</author>
<published>2026-09-11T13:28:42Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/stintel/commit/?id=d0d8c40b678c8326551ad37fc8bbecc53cb33217'/>
<id>urn:sha1:d0d8c40b678c8326551ad37fc8bbecc53cb33217</id>
<content type='text'>
This version bump includes fixes for the following CVEs:
- CVE-2026-66046
- CVE-2026-72522
- CVE-2026-76641
- CVE-2026-76956
- CVE-2026-76957

Full release notes:
https://github.com/libexpat/libexpat/blob/master/expat/Changes

Signed-off-by: Wei-Ting Yang &lt;williamatcg@gmail.com&gt;
Link: https://github.com/openwrt/openwrt/pull/25134
Signed-off-by: Hauke Mehrtens &lt;hauke@hauke-m.de&gt;
</content>
</entry>
<entry>
<title>tools/expat: update to 2.8.2</title>
<updated>2026-07-02T14:36:16Z</updated>
<author>
<name>Wei-Ting Yang</name>
</author>
<published>2026-07-01T04:32:09Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/stintel/commit/?id=62e7565f0e1e88e5fc8d038f09cb38ffd583bbed'/>
<id>urn:sha1:62e7565f0e1e88e5fc8d038f09cb38ffd583bbed</id>
<content type='text'>
This version bump includes fixes for the following CVEs:
- CVE-2026-41080
- CVE-2026-45186
- CVE-2026-50219
- CVE-2026-56131
- CVE-2026-56132
- CVE-2026-56403
- CVE-2026-56404
- CVE-2026-56405
- CVE-2026-56406
- CVE-2026-56407
- CVE-2026-56408
- CVE-2026-56409
- CVE-2026-56410
- CVE-2026-56411
- CVE-2026-56412

Full release notes:
https://github.com/libexpat/libexpat/blob/master/expat/Changes

Signed-off-by: Wei-Ting Yang &lt;williamatcg@gmail.com&gt;
Link: https://github.com/openwrt/openwrt/pull/24016
Signed-off-by: Robert Marko &lt;robimarko@gmail.com&gt;
</content>
</entry>
<entry>
<title>tools/expat: update to 2.7.5</title>
<updated>2026-04-20T06:50:19Z</updated>
<author>
<name>Nick Hainke</name>
</author>
<published>2026-04-19T09:37:10Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/stintel/commit/?id=76928eb34a2bcf3c9784c4117663785caf9a05a2'/>
<id>urn:sha1:76928eb34a2bcf3c9784c4117663785caf9a05a2</id>
<content type='text'>
Changelog:
https://github.com/libexpat/libexpat/blob/R_2_7_5/expat/Changes

Fixes: CVE-2026-32776 CVE-2026-32777 CVE-2026-32778
Link: https://github.com/openwrt/openwrt/pull/23007
Signed-off-by: Nick Hainke &lt;vincent@systemli.org&gt;
</content>
</entry>
<entry>
<title>tools/expat: fix PKG_CPE_ID</title>
<updated>2026-03-14T19:34:36Z</updated>
<author>
<name>Fabrice Fontaine</name>
</author>
<published>2026-03-13T19:57:11Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/stintel/commit/?id=3c3e56afca1e2b2c3e0c091da77bc9774c788ae3'/>
<id>urn:sha1:3c3e56afca1e2b2c3e0c091da77bc9774c788ae3</id>
<content type='text'>
cpe:/a:libexpat_project:libexpat is the correct CPE ID for expat:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libexpat_project:libexpat

Fixes: ff59f3f4bdb56c779579aaa11b815f4c83abbac5 (tools/expat: fix PKG_CPE_ID)
Signed-off-by: Fabrice Fontaine &lt;fontaine.fabrice@gmail.com&gt;
Link: https://github.com/openwrt/openwrt/pull/22406
Signed-off-by: Hauke Mehrtens &lt;hauke@hauke-m.de&gt;
</content>
</entry>
<entry>
<title>tools/expat: update to 2.7.4</title>
<updated>2026-02-07T08:06:52Z</updated>
<author>
<name>Nick Hainke</name>
</author>
<published>2026-02-06T22:00:25Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/stintel/commit/?id=274e9aff7c1575750f999e0d5af339ece61729b1'/>
<id>urn:sha1:274e9aff7c1575750f999e0d5af339ece61729b1</id>
<content type='text'>
Changelog:
https://github.com/libexpat/libexpat/blob/R_2_7_4/expat/Changes

Fixes: CVE-2026-24515 CVE-2026-25210
Link: https://github.com/openwrt/openwrt/pull/21907
Signed-off-by: Nick Hainke &lt;vincent@systemli.org&gt;
</content>
</entry>
<entry>
<title>expat: Update to 2.7.3</title>
<updated>2025-09-27T21:49:44Z</updated>
<author>
<name>Ted Hess</name>
</author>
<published>2025-09-27T21:46:18Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/stintel/commit/?id=842623a4f82411821f8632f7f04511332bb6d47a'/>
<id>urn:sha1:842623a4f82411821f8632f7f04511332bb6d47a</id>
<content type='text'>
Fixes:
    CVE-2025-59375
    Regression from: CVE-2024-8176

Changelog: https://github.com/libexpat/libexpat/blob/R_2_7_3/expat/Changes

Signed-off-by: Ted Hess &lt;thess@kitschensync.net&gt;
</content>
</entry>
<entry>
<title>tools/expat: fix compilation with ccache</title>
<updated>2025-07-29T19:33:12Z</updated>
<author>
<name>Rosen Penev</name>
</author>
<published>2025-07-27T18:37:27Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/stintel/commit/?id=b0650c50c8f040cf3f94af0f9b07e65c14f36045'/>
<id>urn:sha1:b0650c50c8f040cf3f94af0f9b07e65c14f36045</id>
<content type='text'>
Even though expat is a C library, the configure script tests both C and
C++ compilers so a fix is needed for the latter.

Signed-off-by: Rosen Penev &lt;rosenp@gmail.com&gt;
Link: https://github.com/openwrt/openwrt/pull/19594
Signed-off-by: Robert Marko &lt;robimarko@gmail.com&gt;
</content>
</entry>
<entry>
<title>tools/expat: bump to 2.7.1 to fix several CVEs</title>
<updated>2025-04-06T18:01:46Z</updated>
<author>
<name>George Sapkin</name>
</author>
<published>2025-04-04T22:37:32Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/stintel/commit/?id=14a88ba520b44cf22216d1819d936cea1ec509a9'/>
<id>urn:sha1:14a88ba520b44cf22216d1819d936cea1ec509a9</id>
<content type='text'>
Addresses CVE-2024-8176 and CVE-2024-50602.

Changelog: https://github.com/libexpat/libexpat/blob/R_2_7_1/expat/Changes
Fixes: https://github.com/openwrt/packages/issues/26255
Fixes: https://github.com/advisories/GHSA-9hcv-xw76-m4h6
Fixes: https://github.com/advisories/GHSA-79wf-qgrg-2p6c
Signed-off-by: George Sapkin &lt;george@sapk.in&gt;
Link: https://github.com/openwrt/openwrt/pull/18421
Signed-off-by: Hauke Mehrtens &lt;hauke@hauke-m.de&gt;
</content>
</entry>
<entry>
<title>tools/expat: update to 2.6.3</title>
<updated>2024-09-19T21:05:44Z</updated>
<author>
<name>Yanase Yuki</name>
</author>
<published>2024-09-13T10:22:28Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/stintel/commit/?id=2db7f1c67c007bf6548d24a04c81c862a55e566b'/>
<id>urn:sha1:2db7f1c67c007bf6548d24a04c81c862a55e566b</id>
<content type='text'>
This release fixes CVE-2024-45490, CVE-2024-45491 and
CVE-2024-45492.

Changelog:
https://github.com/libexpat/libexpat/blob/R_2_6_3/expat/Changes

Signed-off-by: Yanase Yuki &lt;dev@zpc.st&gt;
Link: https://github.com/openwrt/openwrt/pull/16379
Signed-off-by: Hauke Mehrtens &lt;hauke@hauke-m.de&gt;
</content>
</entry>
<entry>
<title>tools/expat: fix PKG_CPE_ID</title>
<updated>2024-04-27T21:37:57Z</updated>
<author>
<name>Fabrice Fontaine</name>
</author>
<published>2024-04-26T09:24:41Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/stintel/commit/?id=ff59f3f4bdb56c779579aaa11b815f4c83abbac5'/>
<id>urn:sha1:ff59f3f4bdb56c779579aaa11b815f4c83abbac5</id>
<content type='text'>
cpe:/a:libexpat_project:libexpat is the correct CPE ID for expat:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libexpat:libexpat

Fixes: c61a2395140d92cdd37d3d6ee43a765427e8e318 (add PKG_CPE_ID ids to package and tools)

Signed-off-by: Fabrice Fontaine &lt;fontaine.fabrice@gmail.com&gt;
Link: https://github.com/openwrt/openwrt/pull/15291
Signed-off-by: Robert Marko &lt;robimarko@gmail.com&gt;
</content>
</entry>
</feed>
