From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH] expat: Update to version 2.5.0
Date: Tue, 08 Nov 2022 11:07:12 +0000
Message-ID: <FBF8AD77-54BE-4995-8B6B-F78E985E4C5F@ipfire.org>
In-Reply-To: <20221107211358.3219461-1-adolf.belka@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============6465162028311846660=="
List-Id: <development.lists.ipfire.org>

--===============6465162028311846660==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org>

> On 7 Nov 2022, at 21:13, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>=20
> - Update from version 2.4.9 to 2.5.0
> - Update of rootfile.
> - Changelog
>    Release 2.5.0 Tue October 25 2022
>        Security fixes:
>  #616 #649 #650  CVE-2022-43680 -- Fix heap use-after-free after overeager
>                    destruction of a shared DTD in function
>                    XML_ExternalEntityParserCreate in out-of-memory situatio=
ns.
>                    Expected impact is denial of service or potentially
>                    arbitrary code execution.
>        Bug fixes:
>       #612 #645  Fix curruption from undefined entities
>       #613 #654  Fix case when parsing was suspended while processing nested
>                    entities
>  #616 #652 #653  Stop leaking opening tag bindings after a closing tag
>                    mismatch error where a parser is reset through
>                    XML_ParserReset and then reused to parse
>            #656  CMake: Fix generation of pkg-config file
>            #658  MinGW|CMake: Fix static library name
>        Other changes:
>            #663  Protect header expat_config.h from multiple inclusion
>            #666  examples: Make use of XML_GetBuffer and be more
>                    consistent across examples
>            #648  Address compiler warnings
>       #667 #668  Version info bumped from 9:9:8 to 9:10:8;
>                    see https://verbump.de/ for what these numbers do
>=20
> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
> ---
> config/rootfiles/common/expat | 20 ++++++++++----------
> lfs/expat                     |  4 ++--
> 2 files changed, 12 insertions(+), 12 deletions(-)
>=20
> diff --git a/config/rootfiles/common/expat b/config/rootfiles/common/expat
> index 8feb895b3..5b25d63b8 100644
> --- a/config/rootfiles/common/expat
> +++ b/config/rootfiles/common/expat
> @@ -2,20 +2,20 @@
> #usr/include/expat.h
> #usr/include/expat_config.h
> #usr/include/expat_external.h
> -#usr/lib/cmake/expat-2.4.9
> -#usr/lib/cmake/expat-2.4.9/expat-config-version.cmake
> -#usr/lib/cmake/expat-2.4.9/expat-config.cmake
> -#usr/lib/cmake/expat-2.4.9/expat-noconfig.cmake
> -#usr/lib/cmake/expat-2.4.9/expat.cmake
> +#usr/lib/cmake/expat-2.5.0
> +#usr/lib/cmake/expat-2.5.0/expat-config-version.cmake
> +#usr/lib/cmake/expat-2.5.0/expat-config.cmake
> +#usr/lib/cmake/expat-2.5.0/expat-noconfig.cmake
> +#usr/lib/cmake/expat-2.5.0/expat.cmake
> #usr/lib/libexpat.la
> #usr/lib/libexpat.so
> usr/lib/libexpat.so.1
> -usr/lib/libexpat.so.1.8.9
> +usr/lib/libexpat.so.1.8.10
> #usr/lib/pkgconfig/expat.pc
> #usr/share/doc/expat
> -#usr/share/doc/expat-2.4.9
> -#usr/share/doc/expat-2.4.9/ok.min.css
> -#usr/share/doc/expat-2.4.9/reference.html
> -#usr/share/doc/expat-2.4.9/style.css
> +#usr/share/doc/expat-2.5.0
> +#usr/share/doc/expat-2.5.0/ok.min.css
> +#usr/share/doc/expat-2.5.0/reference.html
> +#usr/share/doc/expat-2.5.0/style.css
> #usr/share/doc/expat/AUTHORS
> #usr/share/doc/expat/changelog
> diff --git a/lfs/expat b/lfs/expat
> index a1a1326d0..a89b6d114 100644
> --- a/lfs/expat
> +++ b/lfs/expat
> @@ -24,7 +24,7 @@
>=20
> include Config
>=20
> -VER        =3D 2.4.9
> +VER        =3D 2.5.0
>=20
> THISAPP    =3D expat-$(VER)
> DL_FILE    =3D $(THISAPP).tar.bz2
> @@ -40,7 +40,7 @@ objects =3D $(DL_FILE)
>=20
> $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE)
>=20
> -$(DL_FILE)_BLAKE2 =3D d60183f96f3359acc069af638cc8d16ba19f51fbd8a61eddd80c=
2babddde357dcf0561e87af901f53617bfd9452e146c9dd9f317729cd3648b65832a38388640
> +$(DL_FILE)_BLAKE2 =3D 15a5dcd3af17995fb4299301710b38d609c1fe7a8d6a6284581f=
edd96e89e0c16526d0342fb55773ac9d678cd65dc5cdb1532c764eeb3a20ccdf1e168b96e337
>=20
> install : $(TARGET)
>=20
> --=20
> 2.38.1
>=20


--===============6465162028311846660==--