Update libexpat to 2.4.4. This fixes CVE-2022-23852 and CVE-2022-23990.
authorbluhm <bluhm@openbsd.org>
Mon, 31 Jan 2022 00:21:53 +0000 (00:21 +0000)
committerbluhm <bluhm@openbsd.org>
Mon, 31 Jan 2022 00:21:53 +0000 (00:21 +0000)
commit7f817ade34f17ecb3781fdb1cc6552d9790bcf70
treef9b71f36b25e36ee5a41bd1cec163e83ca9d5e59
parent7fbee575b130778ef6213543b2541c15662c3cc6
Update libexpat to 2.4.4.  This fixes CVE-2022-23852 and CVE-2022-23990.
Relevant for OpenBSD are security fixes #550 #551 and other changes
#553 (missing in change log).  No library bump necessary.
OK millert@
lib/libexpat/Changes
lib/libexpat/README.md
lib/libexpat/doc/reference.html
lib/libexpat/lib/expat.h
lib/libexpat/lib/xmlparse.c
lib/libexpat/tests/runtests.c