* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. c242eb15bd1d589cfbcb97f7b16e7a8222f37d48
@ 2026-02-02 16:27 Michael Tremer
0 siblings, 0 replies; only message in thread
From: Michael Tremer @ 2026-02-02 16:27 UTC (permalink / raw)
To: ipfire-scm
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, next has been updated
via c242eb15bd1d589cfbcb97f7b16e7a8222f37d48 (commit)
via adf2409b7a43d1e9083e2d90d33bd0a3404173f8 (commit)
via 722c5642ca8a19cfa4558f847b405d4847bd12f1 (commit)
via e2d8be3b950f3119964ade54a62b72555c9b32e7 (commit)
via e3cf89f18806fa7dfaef5b84094787a325a5fabf (commit)
via eaa2a1862a7601065ed18d843620dc57c2990861 (commit)
from 5343a415923aaa9865f0826d907ee3464958716e (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit c242eb15bd1d589cfbcb97f7b16e7a8222f37d48
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sat Jan 31 21:40:12 2026 +0100
core201: Ship expat
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit adf2409b7a43d1e9083e2d90d33bd0a3404173f8
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sat Jan 31 21:40:13 2026 +0100
expat: Update to version 2.7.4
- Update from version 2.7.3 to 2.7.4
- Update of rootfile
- 2 CVE fixes are in this release.
- Changelog
2.7.4
Security fixes:
#1131 CVE-2026-24515 -- Function XML_ExternalEntityParserCreate
failed to copy the encoding handler data passed to
XML_SetUnknownEncodingHandler from the parent to the new
subparser. This can cause a NULL dereference (CWE-476) from
external entities that declare use of an unknown encoding.
The expected impact is denial of service. It takes use of
both functions XML_ExternalEntityParserCreate and
XML_SetUnknownEncodingHandler for an application to be
vulnerable.
#1075 CVE-2026-25210 -- Add missing check for integer overflow
related to buffer size determination in function doContent
Bug fixes:
#1073 lib: Fix missing undoing of group size expansion in doProlog
failure cases
#1107 xmlwf: Fix a memory leak
#1104 WASI: Fix format specifiers for 32bit WASI SDK
Other changes:
#1105 lib: Fix strict aliasing
#1106 lib: Leverage feature "flexible array member" of C99
#1051 lib: Swap (size_t)(-1) for C99 equivalent SIZE_MAX
#1109 lib|xmlwf: Return NULL instead of 0 for pointers
#1068 lib|Windows: Clean up use of macro _MSC_EXTENSIONS with MSVC
#1112 lib: Remove unused import
#1110 xmlwf: Warn about XXE in --help output (and man page)
#1102 #1103 WASI: Stop using getpid
#1113 #1130 Autotools: Drop file expat.m4 that provided obsolete Autoconf
macro AM_WITH_EXPAT
#1123 Autotools: Limit -Wno-pedantic-ms-format to MinGW
#1129 #1134 ..
#1087 Autotools|macOS: Sync CMake templates with CMake 4.0
#1139 #1140 Autotools|CMake: Introduce off-by-default symbol versioning
The related build system flags are:
- For Autotools, configure with --enable-symbol-versioning
- For CMake, configure with -DEXPAT_SYMBOL_VERSIONING=ON
Please double-check for consequences before activating
this inside distro packaging. Bug reports welcome!
#1117 Autotools|CMake: Remove libbsd support
#1105 Autotools|CMake: Stop using -fno-strict-aliasing, and use
-Wstrict-aliasing=3 instead
#1124 Autotools|CMake: Prefer command gsed (GNU sed) over sed
(e.g. for Solaris) inside fix-xmltest-log.sh
#1067 CMake: Detect and warn about unusable check_c_compiler_flag
#1137 CMake: Drop support for CMake <3.17
#1138 CMake|Windows: Fix libexpat.def.cmake version comments
#1086 #1110 docs: Add warning about external reference handlers and XXE
#1066 docs: Be explicit that parent parsers need to outlive
subparsers
#1089 ..
#1090 #1091 ..
#1092 #1093 ..
#1094 #1098 ..
#1115 #1116 docs: Misc non-content improvements to doc/reference.html
#1132 #1133 Version info bumped from 12:1:11 (libexpat*.so.1.11.1)
to 12:2:11 (libexpat*.so.1.11.2); see https://verbump.de/
for what these numbers do
Infrastructure:
#1119 #1121 Document guidelines for contributing to Expat
#1120 Introduce a pull request template
#1074 CI: Stop using about-to-be-removed image "macos-13"
#1083 #1088 CI: Mitigate random Wine crashes
#1104 CI: Cover compilation with WASI SDK
#1116 CI: Enforce clean doc XML formatting
#1124 ..
#1135 #1136 CI: Cover Solaris 11.4
#1125 CI: Extend CI coverage of FreeBSD
#1139 #1140 CI: Cover symbol versioning
#1114 xmlwf: Reformat helpgen code (using Black 25.12.0)
#1071 .gitignore: Add files CPackConfig.cmake and
CPackSourceConfig.cmake
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 722c5642ca8a19cfa4558f847b405d4847bd12f1
Merge: 5343a4159 e2d8be3b9
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Mon Feb 2 16:26:12 2026 +0000
Merge branch 'master' into next
-----------------------------------------------------------------------
Summary of changes:
config/rootfiles/common/expat | 20 ++++++++++----------
config/rootfiles/common/x86_64/linux | 4 ++++
.../{oldcore/106 => core/201}/filelists/expat | 0
.../{core/201 => oldcore/200}/filelists/openssl | 0
lfs/expat | 6 +++---
5 files changed, 17 insertions(+), 13 deletions(-)
copy config/rootfiles/{oldcore/106 => core/201}/filelists/expat (100%)
copy config/rootfiles/{core/201 => oldcore/200}/filelists/openssl (100%)
Difference in files:
diff --git a/config/rootfiles/common/expat b/config/rootfiles/common/expat
index 000261ca9..0088ac732 100644
--- a/config/rootfiles/common/expat
+++ b/config/rootfiles/common/expat
@@ -2,21 +2,21 @@
#usr/include/expat.h
#usr/include/expat_config.h
#usr/include/expat_external.h
-#usr/lib/cmake/expat-2.7.3
-#usr/lib/cmake/expat-2.7.3/expat-config-version.cmake
-#usr/lib/cmake/expat-2.7.3/expat-config.cmake
-#usr/lib/cmake/expat-2.7.3/expat-noconfig.cmake
-#usr/lib/cmake/expat-2.7.3/expat.cmake
+#usr/lib/cmake/expat-2.7.4
+#usr/lib/cmake/expat-2.7.4/expat-config-version.cmake
+#usr/lib/cmake/expat-2.7.4/expat-config.cmake
+#usr/lib/cmake/expat-2.7.4/expat-noconfig.cmake
+#usr/lib/cmake/expat-2.7.4/expat.cmake
#usr/lib/libexpat.la
#usr/lib/libexpat.so
usr/lib/libexpat.so.1
-usr/lib/libexpat.so.1.11.1
+usr/lib/libexpat.so.1.11.2
#usr/lib/pkgconfig/expat.pc
#usr/share/doc/expat
-#usr/share/doc/expat-2.7.3
-#usr/share/doc/expat-2.7.3/ok.min.css
-#usr/share/doc/expat-2.7.3/reference.html
-#usr/share/doc/expat-2.7.3/style.css
+#usr/share/doc/expat-2.7.4
+#usr/share/doc/expat-2.7.4/ok.min.css
+#usr/share/doc/expat-2.7.4/reference.html
+#usr/share/doc/expat-2.7.4/style.css
#usr/share/doc/expat/AUTHORS
#usr/share/doc/expat/changelog
#usr/share/man/man1/xmlwf.1
diff --git a/config/rootfiles/common/x86_64/linux b/config/rootfiles/common/x86_64/linux
index ada32400d..2092db35d 100644
--- a/config/rootfiles/common/x86_64/linux
+++ b/config/rootfiles/common/x86_64/linux
@@ -10978,6 +10978,10 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER/build/include/config/RT_GROUP_SCHED
#lib/modules/KVER/build/include/config/RT_MUTEXES
#lib/modules/KVER/build/include/config/RUSTC_HAS_COERCE_POINTEE
+#lib/modules/KVER/build/include/config/RUSTC_HAS_FILE_AS_C_STR
+#lib/modules/KVER/build/include/config/RUSTC_HAS_FILE_WITH_NUL
+#lib/modules/KVER/build/include/config/RUSTC_HAS_SPAN_FILE
+#lib/modules/KVER/build/include/config/RUSTC_HAS_UNNECESSARY_TRANSMUTES
#lib/modules/KVER/build/include/config/RUSTC_LLVM_VERSION
#lib/modules/KVER/build/include/config/RUSTC_VERSION
#lib/modules/KVER/build/include/config/RWSEM_SPIN_ON_OWNER
diff --git a/config/rootfiles/core/201/filelists/expat b/config/rootfiles/core/201/filelists/expat
new file mode 120000
index 000000000..e1923cf63
--- /dev/null
+++ b/config/rootfiles/core/201/filelists/expat
@@ -0,0 +1 @@
+../../../common/expat
\ No newline at end of file
diff --git a/config/rootfiles/oldcore/200/filelists/openssl b/config/rootfiles/oldcore/200/filelists/openssl
new file mode 120000
index 000000000..e011a9266
--- /dev/null
+++ b/config/rootfiles/oldcore/200/filelists/openssl
@@ -0,0 +1 @@
+../../../common/openssl
\ No newline at end of file
diff --git a/lfs/expat b/lfs/expat
index c61a4e5bc..f0803961d 100644
--- a/lfs/expat
+++ b/lfs/expat
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 2.7.3
+VER = 2.7.4
THISAPP = expat-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 26d4c9cb2c9b2a5b9ca9a86e9ea754e832f397bdb8ef266587b146591ff1358b2f439153f2eadb584180be6aee85050f19987565bbedf215993061ce5c85c5c9
+$(DL_FILE)_BLAKE2 = 167518530b3e88f7ecb6aecc5eb54a41a740f7184732dd72fafe9bfdcda0b94c537331543744b8b0eaf918d5f0b82dbe311ee4192a592b74e5d65dc577ed8f6a
install : $(TARGET)
hooks/post-receive
--
IPFire 2.x development tree
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2026-02-02 16:27 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-02-02 16:27 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. c242eb15bd1d589cfbcb97f7b16e7a8222f37d48 Michael Tremer
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox