This version bump includes fixes for the following CVEs:
- CVE-2026-32776
- CVE-2026-32777
- CVE-2026-32778
- CVE-2026-41080
- CVE-2026-45186
Full release notes:
https://github.com/libexpat/libexpat/blob/master/expat/Changes
Signed-off-by: Wei-Ting Yang <redacted>
include $(TOPDIR)/rules.mk
PKG_NAME:=expat
-PKG_VERSION:=2.7.4
+PKG_VERSION:=2.8.1
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/libexpat/libexpat/releases/download/R_$(subst .,_,$(PKG_VERSION))
-PKG_HASH:=461ecc8aa98ab1a68c2db788175665d1a4db640dc05bf0e289b6ea17122144ec
+PKG_HASH:=a52eb72108be160e190b5cafa5bba8663f1313f2013e26060d1c18e26e31067b
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=COPYING