From nobody Tue Sep 27 04:07:59 2022 X-Original-To: desktop@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Mc5h00XZPz4d6Mk for ; Tue, 27 Sep 2022 04:08:00 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Mc5gz0zVKz3ZTh for ; Tue, 27 Sep 2022 04:07:59 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4Mc5gz01D2z10sv for ; Tue, 27 Sep 2022 04:07:59 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 28R47w6M017993 for ; Tue, 27 Sep 2022 04:07:58 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from bugzilla@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 28R47wqH017992 for desktop@FreeBSD.org; Tue, 27 Sep 2022 04:07:58 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: bugzilla set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: desktop@FreeBSD.org Subject: [Bug 266524] [exp-run] update textproc/expat2 to 2.4.9 Date: Tue, 27 Sep 2022 04:07:59 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: commit-hook@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tcberner@freebsd.org X-Bugzilla-Flags: exp-run+ X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Using and improving FreeBSD on the desktop List-Archive: https://lists.freebsd.org/archives/freebsd-desktop List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-desktop@freebsd.org MIME-Version: 1.0 ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1664251679; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=33re5zegUL72tRi/9eUzRu64yOjHLpiCEbw9MANbCKI=; b=hiyqQk5gj+NSMLKEJp9cozNM8rH66aiECUFXGEd7Fizx8otfG8ynVsaf29P3Ii7Mx/H6r4 TH9887VChiCiXWgKAY4gdrkULpJomibcF5mR1XDx7xPe+uwni0Fy/rbFd/78nI0V9zv3/8 8HlP91gEv3OwEwNlaZCNzbJoxgCYRLprbN3zA9tZWcvQpyF3OSZyi2ri/1FQGh5ANW+xog 1iJmT3x00DyRFKhMuNJY9BjB+96ocXs10Nz7GCDkebS5besV8HGnBUKM7UT7n+V2g/hj8V UINhD1oyhk2gOUy1Fj88T8/VNPVXteorxi+eu+5UtcL1fu4DJl6ZZjwIuZlayw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1664251679; a=rsa-sha256; cv=none; b=ebcHC5tdlt3B39s8lOrjELzwC8Y3pyQoQ8T2pu53QsZOWeRA5nAIowX2vgYXhHQNuhfcFk n0nHNN62iz/nay/0dplhX+VdbFmVLT50CNJ9dSA0lrqOsyDWamE9mrwCs+ebPsA6MJvhRP 9SaFBz7KxMO9LtX4KB8ZCaspYrCFpRfhrHDO10YuZllFVPv6a9EjpOP3tyPuH+5Q26Vr1j hi499/pGgG7zVN8MnGsN5po+MAA71tJXLzS1h9sTpc65PJUU3smXUAEF+FmOcKM5J5sthQ 2P4zguiFtHoDs41vG8d3Q5o61N/J0PaSDCSYBMBFNNm2giNTLMBldlzCWDaLBg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D266524 --- Comment #3 from commit-hook@FreeBSD.org --- A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=3D9901fd092a8c8e43f24217ebea61a6f= 53ad245fb commit 9901fd092a8c8e43f24217ebea61a6f53ad245fb Author: Tobias C. Berner AuthorDate: 2022-09-21 04:36:41 +0000 Commit: Tobias C. Berner CommitDate: 2022-09-27 04:06:34 +0000 textproc/expat2: update to 2.4.9 Release 2.4.9 Tue September 20 2022 Security fixes: #629 #640 CVE-2022-40674 -- Heap use-after-free vulnerability in function doContent. Expected impact is denial of service or potentially arbitrary code execution. Bug fixes: #634 MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STD= IO=3D0 #614 docs: Fix documentation on effect of switch XML_DTD on symbol visibility in doc/reference.html Other changes: #638 MinGW: Make fix-xmltest-log.sh drop more Wine bug out= put #596 #625 Autotools: Sync CMake templates with CMake 3.22 #608 CMake: Migrate from use of CMAKE_*_POSTFIX to dedicated variables EXPAT_*_POSTFIX to stop affecti= ng other projects #597 #599 Windows|CMake: Add missing -DXML_STATIC to test runne= rs and fuzzers #512 #621 Windows|CMake: Render .def file from a template to fix linking with -DEXPAT_DTD=3DOFF and/or -DEXPAT_ATTR_INFO=3DON #611 #621 MinGW|CMake: Apply MSVC .def file when linking #622 #624 MinGW|CMake: Sync library name with GNU Autotools, i.e. produce libexpat-1.dll rather than libexpat.dll by default. Filename libexpat.dll.a is unaffected. #632 MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in toolchain file "cmake/mingw-toolchain.cmake" to avo= id error "windres: Command not found" on e.g. Ubuntu 2= 0.04 #597 #627 CMake: Unify inconsistent use of set() and option() in context of public build time options to take need f= or set(.. FORCE) in projects using Expat by means of add_subdirectory(..) off Expat's users' shoulders #626 #641 Stop exporting API symbols when building a static lib= rary #644 Resolve use of deprecated "fgrep" by "grep -F" #620 CMake: Make documentation on variables a bit more consistent #636 CMake: Drop leading whitespace from a #cmakedefine li= ne in file expat_config.h.cmake #594 xmlwf: Fix harmless variable mix-up in function nsatt= cmp #592 #593 #610 Address Cppcheck warnings #643 Address Clang 15 compiler warnings #642 #644 Version info bumped from 9:8:8 to 9:9:8; see https://verbump.de/ for what these numbers do Infrastructure: #597 #598 CI: Windows: Start covering MSVC 2022 #619 CI: macOS: Migrate off deprecated macOS 10.15 #632 CI: Linux: Make migration off deprecated Ubuntu 18.04 work #643 CI: Upgrade Clang from 14 to 15 #637 apply-clang-format.sh: Add support for BSD find #633 coverage.sh: Exclude MinGW headers #635 coverage.sh: Fix name collision for -funsigned-char Special thanks to: David Faure Felix Wilhelm Frank Bergmann Rhodri James Rosen Penev Thijs Schreijer Vincent Torri and Google Project Zero Exp-run by: antoine PR: 266524 textproc/expat2/Makefile | 2 +- textproc/expat2/distinfo | 6 +++--- textproc/expat2/pkg-plist | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) --=20 You are receiving this mail because: You are on the CC list for the bug.=