expat: update to 2.5.0

Fixes: CVE-2022-43680
Added GitHub mirror.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 409dbb05c9ea0877549e0f2536dd5efce1747048)

diff --git a/libs/expat/Makefile b/libs/expat/Makefile
index 78c417cfa25334a515a43f8da4839fb9e5b1f66b..fd9c3f8428fe92162b6758ee3c6b450e7a622f76 100644 (file)
--- a/libs/expat/Makefile
+++ b/libs/expat/Makefile
@@ -6,12 +6,13 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=expat
-PKG_VERSION:=2.4.9
+PKG_VERSION:=2.5.0
 PKG_RELEASE:=$(AUTORELEASE)
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
-PKG_SOURCE_URL:=@SF/expat
-PKG_HASH:=6e8c0728fe5c7cd3f93a6acce43046c5e4736c7b4b68e032e9350daa0efc0354
+PKG_SOURCE_URL:=@SF/expat \
+       https://github.com/libexpat/libexpat/releases/download/R_$(subst .,_,$(PKG_VERSION))
+PKG_HASH:=ef2420f0232c087801abf705e89ae65f6257df6b7931d37846a193ef2e8cdcbe
 
 PKG_MAINTAINER:=Ted Hess <thess@kitschensync.net>
 PKG_LICENSE:=MIT