From d8ce3c0142174928804fa986d718b44aa7fa0942 Mon Sep 17 00:00:00 2001
From: Wei-Ting Yang <williamatcg@gmail.com>
Date: Fri, 11 Sep 2026 19:59:11 +0800
Subject: [PATCH] expat: update to 2.8.4

This version bump includes fixes for the following CVEs:
- CVE-2026-66046
- CVE-2026-72522
- CVE-2026-76641
- CVE-2026-76956
- CVE-2026-76957

Full release notes:
https://github.com/libexpat/libexpat/blob/master/expat/Changes

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit dbe9f7c5e1b1ef7d4b48a5fef513471aad2a2ef2)
---
 libs/expat/Makefile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/libs/expat/Makefile b/libs/expat/Makefile
index 8627cf5792..bbc3dfddc6 100644
--- a/libs/expat/Makefile
+++ b/libs/expat/Makefile
@@ -6,12 +6,12 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=expat
-PKG_VERSION:=2.8.2
+PKG_VERSION:=2.8.4
 PKG_RELEASE:=1
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
 PKG_SOURCE_URL:=https://github.com/libexpat/libexpat/releases/download/R_$(subst .,_,$(PKG_VERSION))
-PKG_HASH:=ef7d1994f533c9e7343d6c19f31064fc8ebbcbcaa144be3812b4f43052a05f4c
+PKG_HASH:=b8ece2437692dad44d851c4532723390a5a330990007706be9c8d2b90d294f36
 
 PKG_LICENSE:=MIT
 PKG_LICENSE_FILES:=COPYING