Accepting request 1306571 from devel:libraries:c_c++

- version update to 2.7.2 [bsc#1249584]
  * CVE-2025-59375 -- Disallow use of disproportional amounts of
    dynamic memory from within an Expat parser
  * xmlwf: Fix (internal) help generator
  * xmlwf: Mention supported environment variables in
    --help output
  * see Changes for details

OBS-URL: https://build.opensuse.org/request/show/1306571
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/expat?expand=0&rev=82

expat-2.7.1.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEEy43nCpDPv2w79cxWliYqz/vTrsYFAmflq4EACgkQliYqz/vT
-rsbgBw/7BnBRKM4F7dvK5aAxJHyGC4uz2r/2ETQiC2kOu5DTJVa3whaITIrzG/3w
-9ikYp5st/Xgm7pDTT1Hr1po/4JDr2eDJnUfml9EHPkkqCK3NUd6NzpRArEnHnoRx
-1SLTB0TKpGAdHF87WlhThujq1NGWQTXtX6IPpXHm3K/K7saFy1aGE7WR0YGV2ytt
-VxR/ucey2Gh2PqvfiIipAs81Qcyt3UM5U1TpViDQ3ezRF0CpgCDhQ8MkZxgu7c/k
-LyE4c5Gla8MiJqcraX3Ymz6dCH6SRiX2NY5Vpy8f9yIqDq5eyhkHi5SPRx2jG5Ua
-LVZmN0orxXgOFWyFZPoz4guO7hWLNjesq3cCySOOMBxydIXFVVPgwX0rtgaUXX77
-Z3b05oCECGhvFO4BdXTTnKtaNoSnb7yjwqsBK8aupZfHnHSuUVV53wAOIwkBWpJk
-CfOgkvdF59pOS+yQmV/VRjVZnIF9Rt/8mrStyKPHqAYJuTAKugicfpbVOfXQXSmk
-ASAuVgzddFWMaircpMsZFBDTBk7a5jum39D67sVS74pDk2imvixYqtWo+8AI7NQ5
-TqWXyULVD9K3OCh47w1zhwRfTskYAvX5lV0TTYo7kXtPMCyfPa8seBOpHtoSM8bB
-+zZkWd/LNWcRRdcmenPnwv2GiLO5jCgAIuJrboyJPw8E93q94jA=
-=Ug7G
------END PGP SIGNATURE-----

expat-2.7.2.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQIzBAABCAAdFiEEy43nCpDPv2w79cxWliYqz/vTrsYFAmjJjAcACgkQliYqz/vT
+rsbRdRAAj9lKcun8hAC3pS3LueWJT46/Lb+yeuMbBdNLlTft6Scvb+WZGHP63lxX
+B4jv+qpPF5Yz5uUwa+h3BwYvQXRH7d1fzX1TdRDHLrvbid92EFjZ2lJSJ9Ihx1ql
+qfQCD7fZQyfIYV+IKIy4QrxAaQFnNc9NvXZ9runiiya9fd3Xx8u+UecPBGyqCAx+
+hMfp8uilLxeVd/P3N3aOJwsLaqrEp4alXX3sa5BCCLYT6Ei5/PuxQhRq0UMK9YMV
+O3hdxcAtYNRq5ZObTApnscn4APJdyF/pzUQQQCatm9MmCKPyxUpEId0X759mpJBH
+ZpqQLDQMdsNEp5MLNvMufMjaEWw9WfBvx/vy2o6WZZch+ObUMTBEiSAO/MozT9qe
+zKdeZaWQ8MMUP+6+t0H+Q45TP1qMIQirGqIkkgHLykes91HpumRyPyTR4+rR3siA
+2/IpzD5uuw/3XVFJiqLrmh0ILp/32CkaAiBZZ3oDUridGNk3yiyAAzUZEB54pmFf
+jXyX1qdN8R3xgtjNBXW+q+klJqu3Oifr1Ehl46BJAky9Ttysmh/WiHrdZaxSsTDZ
+9E7DpxKtQyV7x0vQOslQVTwyX+HFPYGZntOmqM0grsQ0hMSDDCBd0UJTwrYrtazX
+zE6GNDHzgd3sFaCwwJzvnxogXruQrHht0F5ZHEzcUStmtP86XRE=
+=rCmF
+-----END PGP SIGNATURE-----

expat.changes

@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Mon Sep 22 14:54:27 UTC 2025 - pgajdos@suse.com
+
+- version update to 2.7.2 [bsc#1249584]
+  * CVE-2025-59375 -- Disallow use of disproportional amounts of
+    dynamic memory from within an Expat parser
+  * xmlwf: Fix (internal) help generator
+  * xmlwf: Mention supported environment variables in
+    --help output
+  * see Changes for details
+
 -------------------------------------------------------------------
 Fri Mar 28 10:22:44 UTC 2025 - pgajdos@suse.com
 
@@ -186,7 +197,7 @@ Mon Feb 12 20:44:14 UTC 2024 - David Anes <david.anes@suse.com>
 
 - Update to 2.6.0: 
   * Security fixes:
-    - CVE-2023-52425 (boo#1219559)  
+    - CVE-2023-52425 (boo#1219559, bsc#1221563)  
       -- Fix quadratic runtime issues with big tokens
       that can cause denial of service, in partial where
       dealing with compressed XML input.  Applications

expat.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package expat
 #
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
 # Copyright (c) 2024 Andreas Stieger <Andreas.Stieger@gmx.de>
 #
 # All modifications and additions to the file contributed by third parties
@@ -17,10 +17,10 @@
 #
 
 
-%global unversion 2_7_1
+%global unversion 2_7_2
 %define sover 1
 Name:           expat
-Version:        2.7.1
+Version:        2.7.2
 Release:        0
 Summary:        XML Parser Toolkit
 License:        MIT