CVE-2025-59375

2025-10-01 12:34:52 +02:00
3 changed files with 3553 additions and 0 deletions
--- a/CVE-2025-59375.patch
+++ b/CVE-2025-59375.patch
--- a/expat.changes
+++ b/expat.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Mon Sep 29 13:38:51 UTC 2025 - Martin Schreiner <martin.schreiner@suse.com>
+
+- Fix CVE-2025-59375 / bsc#1249584.
+- Add patch file:
+  * CVE-2025-59375.patch
+
 -------------------------------------------------------------------
 Fri Mar 28 10:22:44 UTC 2025 - pgajdos@suse.com

--- a/expat.spec
+++ b/expat.spec
@@ -33,6 +33,7 @@ Source3:        %{name}faq.html
 # https://www.gentoo.org/inside-gentoo/developers/index.html#sping
 # https://github.com/libexpat/libexpat/issues/537#issuecomment-1003796884
 Source4:        https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x3176ef7db2367f1fca4f306b1f9b0e909af37285#/expat.keyring
+Patch0:         CVE-2025-59375.patch
 BuildRequires:  c++_compiler
 BuildRequires:  pkgconfig