From fd25949b375b71ecdccc7bd36b76c700972d36d7 Mon Sep 17 00:00:00 2001 From: "Tobias C. Berner" Date: Mon, 31 Jan 2022 10:32:43 +0100 Subject: [PATCH] textproc/expat2: update to 2.4.4 Release 2.4.4 Sun January 30 2022 Security fixes: #550 CVE-2022-23852 -- Fix signed integer overflow (undefined behavior) in function XML_GetBuffer (that is also called by function XML_Parse internally) for when XML_CONTEXT_BYTES is defined to >0 (which is both common and default). Impact is denial of service or more. #551 CVE-2022-23990 -- Fix unsigned integer overflow in function doProlog triggered by large content in element type declarations when there is an element declaration handler present (from a prior call to XML_SetElementDeclHandler). Impact is denial of service or more. Bug fixes: #544 #545 xmlwf: Fix a memory leak on output file opening error Other changes: #546 Autotools: Fix broken CMake support under Cygwin #554 Windows: Add missing files to the installer to fix compilation with CMake from installed sources #552 #554 Version info bumped from 9:3:8 to 9:4:8; see https://verbump.de/ for what these numbers do Special thanks to: Carlo Bramini hwt0415 Roland Illig Samanta Navarro and Clang LeakSan and the Clang team PR: XXXXXX Exp-run by: antoine --- textproc/expat2/Makefile | 2 +- textproc/expat2/distinfo | 6 +++--- textproc/expat2/pkg-plist | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/textproc/expat2/Makefile b/textproc/expat2/Makefile index f9b7afc63294..bdfb93289f4b 100644 --- a/textproc/expat2/Makefile +++ b/textproc/expat2/Makefile @@ -1,7 +1,7 @@ # Created by: Dirk Froemberg PORTNAME= expat -DISTVERSION= 2.4.3 +DISTVERSION= 2.4.4 CATEGORIES= textproc MASTER_SITES= https://github.com/libexpat/libexpat/releases/download/R_${DISTVERSION:S|.|_|g}/ diff --git a/textproc/expat2/distinfo b/textproc/expat2/distinfo index 65ef365c45eb..b344016f42c2 100644 --- a/textproc/expat2/distinfo +++ b/textproc/expat2/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1642445891 -SHA256 (expat-2.4.3.tar.xz) = b1f9f1b1a5ebb0acaa88c9ff79bfa4e145823b78aa5185e5c5d85f060824778a -SIZE (expat-2.4.3.tar.xz) = 451012 +TIMESTAMP = 1643620923 +SHA256 (expat-2.4.4.tar.xz) = b5d25d6e373351c2ed19b562b4732d01d2589ac8c8e9e7962d8df1207cc311b8 +SIZE (expat-2.4.4.tar.xz) = 449448 diff --git a/textproc/expat2/pkg-plist b/textproc/expat2/pkg-plist index c1ba19e70342..bfeae6d8c604 100644 --- a/textproc/expat2/pkg-plist +++ b/textproc/expat2/pkg-plist @@ -9,7 +9,7 @@ lib/cmake/expat-%%EXPAT_VERSION%%/expat.cmake %%STATIC%%lib/libexpat.a lib/libexpat.so lib/libexpat.so.1 -lib/libexpat.so.1.8.3 +lib/libexpat.so.1.8.4 libdata/pkgconfig/expat.pc man/man1/xmlwf.1.gz %%PORTDOCS%%%%DOCSDIR%%/AUTHORS -- 2.34.1