[Buildroot] package/expat: please backport to 2021.11.x

Christian Stewart christian at paral.in
Tue Feb 22 08:48:26 UTC 2022


Hi Thomas,



On Tue, Feb 22, 2022 at 12:33 AM Thomas Petazzoni
<thomas.petazzoni at bootlin.com> wrote:
> On Mon, 21 Feb 2022 21:21:16 -0800
> Christian Stewart <christian at paral.in> wrote:
>
> > Expat v2.4.4 (vulnerable) download has been removed from sourceforge.
> >
> > So 2021.11.x build is broken with the older expat.
>
> This is strange: if the expat tarball is no longer available from
> sourceforge, Buildroot should fallback to sources.buildroot.net, which
> contains the expat-2.4.4.tar.xz tarball, at
> http://sources.buildroot.net/expat/.

It does, my mistake, I had an alternate mirror configured.

> Of course, it is better to update since there is a security issue in
> 2.4.4,

Best regards,
Christian



More information about the buildroot mailing list