package/expat: security bump to version 2.2.7
authorPeter Korsgaard <peter@korsgaard.com>
Fri, 28 Jun 2019 13:26:13 +0000 (15:26 +0200)
committerArnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Sun, 30 Jun 2019 12:40:18 +0000 (14:40 +0200)
commit84fd08cf4f860914b0d7b6e48dbe6819e96cc423
tree500586a9baf4569f5b2f20654e840b7fb37a1d79
parentcdbb3ced003a3fbf141964d4acaabda969d742b0
package/expat: security bump to version 2.2.7

Fixes the following security vulnerabilites:

CVE-2018-20843: In libexpat in Expat before 2.2.7, XML input including XML
names that contain a large number of colons could make the XML parser
consume a high amount of RAM and CPU resources while processing (enough to
be usable for denial-of-service attacks).

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
package/expat/expat.hash
package/expat/expat.mk