staging/stintel/tools/expat, branch master

tools/expat: update to 2.7.5

2026-04-20T06:50:19Z

Changelog: https://github.com/libexpat/libexpat/blob/R_2_7_5/expat/Changes Fixes: CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 Link: https://github.com/openwrt/openwrt/pull/23007 Signed-off-by: Nick Hainke

tools/expat: fix PKG_CPE_ID

2026-03-14T19:34:36Z

cpe:/a:libexpat_project:libexpat is the correct CPE ID for expat: https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libexpat_project:libexpat Fixes: ff59f3f4bdb56c779579aaa11b815f4c83abbac5 (tools/expat: fix PKG_CPE_ID) Signed-off-by: Fabrice Fontaine Link: https://github.com/openwrt/openwrt/pull/22406 Signed-off-by: Hauke Mehrtens

tools/expat: update to 2.7.4

2026-02-07T08:06:52Z

Changelog: https://github.com/libexpat/libexpat/blob/R_2_7_4/expat/Changes Fixes: CVE-2026-24515 CVE-2026-25210 Link: https://github.com/openwrt/openwrt/pull/21907 Signed-off-by: Nick Hainke

expat: Update to 2.7.3

2025-09-27T21:49:44Z

Fixes: CVE-2025-59375 Regression from: CVE-2024-8176 Changelog: https://github.com/libexpat/libexpat/blob/R_2_7_3/expat/Changes Signed-off-by: Ted Hess

tools/expat: fix compilation with ccache

2025-07-29T19:33:12Z

Even though expat is a C library, the configure script tests both C and C++ compilers so a fix is needed for the latter. Signed-off-by: Rosen Penev Link: https://github.com/openwrt/openwrt/pull/19594 Signed-off-by: Robert Marko

tools/expat: bump to 2.7.1 to fix several CVEs

2025-04-06T18:01:46Z

Addresses CVE-2024-8176 and CVE-2024-50602. Changelog: https://github.com/libexpat/libexpat/blob/R_2_7_1/expat/Changes Fixes: https://github.com/openwrt/packages/issues/26255 Fixes: https://github.com/advisories/GHSA-9hcv-xw76-m4h6 Fixes: https://github.com/advisories/GHSA-79wf-qgrg-2p6c Signed-off-by: George Sapkin Link: https://github.com/openwrt/openwrt/pull/18421 Signed-off-by: Hauke Mehrtens

tools/expat: update to 2.6.3

2024-09-19T21:05:44Z

This release fixes CVE-2024-45490, CVE-2024-45491 and CVE-2024-45492. Changelog: https://github.com/libexpat/libexpat/blob/R_2_6_3/expat/Changes Signed-off-by: Yanase Yuki Link: https://github.com/openwrt/openwrt/pull/16379 Signed-off-by: Hauke Mehrtens

tools/expat: fix PKG_CPE_ID

2024-04-27T21:37:57Z

cpe:/a:libexpat_project:libexpat is the correct CPE ID for expat: https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libexpat:libexpat Fixes: c61a2395140d92cdd37d3d6ee43a765427e8e318 (add PKG_CPE_ID ids to package and tools) Signed-off-by: Fabrice Fontaine Link: https://github.com/openwrt/openwrt/pull/15291 Signed-off-by: Robert Marko

tools: prefer gz or bz2 tarballs

2024-04-06T09:24:18Z

In the light of recent XZ events, and fundamental XZ issues lets work on moving away from using XZ. So, use gz compressed tarballs as sources whenever possible. dwarves only offers bz2 compressed tarballs, so use those as size difference is minor compared to XZ. Signed-off-by: Robert Marko dwarves

tools/expat: update to version 2.6.2

2024-03-26T09:37:37Z

Release notes: https://github.com/libexpat/libexpat/blob/R_2_6_2/expat/Changes Fixes: CVE-2024-28757 Signed-off-by: Josef Schlehofer