1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-27 05:10:36 +00:00

textproc/expat2: update to 2.4.3

From [1]:

libexpat is a fast streaming XML parser. Alongside libxml2, Expat is one
of the most widely used software libre XML parsers written in C,
precisely C99. It is cross-platform and licensed under the MIT license.

Expat 2.4.3 has been released earlier today. Besides two minor fixes to
the build system, this release is about security fixes. There is a total
of 8 CVEs fixed, all related to fixed-size integer math (integer
overflow and invalid shifts) near memory allocation. Impact is denial of
service, or more.

  *  CVE-2021-45960
  *  CVE-2021-46143
  *  CVE-2022-22822
  *  CVE-2022-22823
  *  CVE-2022-22824
  *  CVE-2022-22825
  *  CVE-2022-22826
  *  CVE-2022-22827

For more details, please check out the change log [2].

[1] https://blog.hartwork.org/posts/expat-2-4-3-released/
[2] https://github.com/libexpat/libexpat/blob/R_2_4_3/expat/Changes

Exp-run by:	antoine
PR:		261285
This commit is contained in:
Tobias C. Berner 2022-01-17 19:59:30 +01:00
parent 82748106ff
commit 97d40c6bda
3 changed files with 5 additions and 5 deletions

View File

@ -1,7 +1,7 @@
# Created by: Dirk Froemberg <dirk@FreeBSD.org>
PORTNAME= expat
DISTVERSION= 2.4.2
DISTVERSION= 2.4.3
CATEGORIES= textproc
MASTER_SITES= https://github.com/libexpat/libexpat/releases/download/R_${DISTVERSION:S|.|_|g}/

View File

@ -1,3 +1,3 @@
TIMESTAMP = 1640043582
SHA256 (expat-2.4.2.tar.xz) = bc2ff58f49c29aac7bff705a6c167a821f26c512079ff08ac432fd0fdc9bb199
SIZE (expat-2.4.2.tar.xz) = 449664
TIMESTAMP = 1642445891
SHA256 (expat-2.4.3.tar.xz) = b1f9f1b1a5ebb0acaa88c9ff79bfa4e145823b78aa5185e5c5d85f060824778a
SIZE (expat-2.4.3.tar.xz) = 451012

View File

@ -9,7 +9,7 @@ lib/cmake/expat-%%EXPAT_VERSION%%/expat.cmake
%%STATIC%%lib/libexpat.a
lib/libexpat.so
lib/libexpat.so.1
lib/libexpat.so.1.8.2
lib/libexpat.so.1.8.3
libdata/pkgconfig/expat.pc
man/man1/xmlwf.1.gz
%%PORTDOCS%%%%DOCSDIR%%/AUTHORS