[Buildroot] package/expat: please backport to 2021.11.x
Christian Stewart
christian at paral.in
Tue Feb 22 08:48:26 UTC 2022
Hi Thomas,
On Tue, Feb 22, 2022 at 12:33 AM Thomas Petazzoni
<thomas.petazzoni at bootlin.com> wrote:
> On Mon, 21 Feb 2022 21:21:16 -0800
> Christian Stewart <christian at paral.in> wrote:
>
> > Expat v2.4.4 (vulnerable) download has been removed from sourceforge.
> >
> > So 2021.11.x build is broken with the older expat.
>
> This is strange: if the expat tarball is no longer available from
> sourceforge, Buildroot should fallback to sources.buildroot.net, which
> contains the expat-2.4.4.tar.xz tarball, at
> http://sources.buildroot.net/expat/.
It does, my mistake, I had an alternate mirror configured.
> Of course, it is better to update since there is a security issue in
> 2.4.4,
Best regards,
Christian
More information about the buildroot
mailing list