From 4785572eee3ea76778dfce9a69f6daad3afb8bd4 Mon Sep 17 00:00:00 2001 From: Sebastian Pipping Date: Thu, 25 Jun 2026 18:45:26 +0200 Subject: [PATCH 1/2] expat: Add Expat 2.8.2 with security fixes --- repos/spack_repo/builtin/packages/expat/package.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/repos/spack_repo/builtin/packages/expat/package.py b/repos/spack_repo/builtin/packages/expat/package.py index 7cac7e10143..c01ee48635e 100644 --- a/repos/spack_repo/builtin/packages/expat/package.py +++ b/repos/spack_repo/builtin/packages/expat/package.py @@ -18,6 +18,10 @@ class Expat(AutotoolsPackage, CMakePackage): url = "https://github.com/libexpat/libexpat/releases/download/R_2_2_9/expat-2.2.9.tar.bz2" license("MIT") + version( + "2.8.2", + sha256="69e7f52417d85b1c2b7fe855e176eec55d0b2d7d92d691372d833a1c7df7923b", + ) version( "2.8.1", sha256="f5833dd2e1cd7739ec9182804a1a29c4f0cc7c2f26b633d3a2188b7766a88ecb", From 99029dae8b30050d9ec5b7dc90ea43ee09ad245c Mon Sep 17 00:00:00 2001 From: Sebastian Pipping Date: Thu, 25 Jun 2026 18:45:48 +0200 Subject: [PATCH 2/2] expat: Deprecate vulnerable Expat 2.8.1 --- repos/spack_repo/builtin/packages/expat/package.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/repos/spack_repo/builtin/packages/expat/package.py b/repos/spack_repo/builtin/packages/expat/package.py index c01ee48635e..0820f6f6d13 100644 --- a/repos/spack_repo/builtin/packages/expat/package.py +++ b/repos/spack_repo/builtin/packages/expat/package.py @@ -22,11 +22,12 @@ class Expat(AutotoolsPackage, CMakePackage): "2.8.2", sha256="69e7f52417d85b1c2b7fe855e176eec55d0b2d7d92d691372d833a1c7df7923b", ) + # deprecate all releases before 2.8.2 because of various security issues version( "2.8.1", sha256="f5833dd2e1cd7739ec9182804a1a29c4f0cc7c2f26b633d3a2188b7766a88ecb", + deprecated=True, ) - # deprecate all releases before 2.8.1 because of various security issues version( "2.8.0", sha256="586494499ac3ad46d87f3beda7b1f770c1c8026a9b60e151593f8b29089a52ca",