--- - branch: MAIN date: Fri Sep 8 07:55:17 UTC 2017 files: - new: '1.35' old: '1.34' path: pkgsrc/textproc/expat/Makefile pathrev: pkgsrc/textproc/expat/Makefile@1.35 type: modified - new: '1.11' old: '1.10' path: pkgsrc/textproc/expat/PLIST pathrev: pkgsrc/textproc/expat/PLIST@1.11 type: modified - new: '1.30' old: '1.29' path: pkgsrc/textproc/expat/distinfo pathrev: pkgsrc/textproc/expat/distinfo@1.30 type: modified - new: '0' old: '1.2' path: pkgsrc/textproc/expat/patches/patch-configure pathrev: pkgsrc/textproc/expat/patches/patch-configure@0 type: deleted - new: '0' old: '1.3' path: pkgsrc/textproc/expat/patches/patch-configure.ac pathrev: pkgsrc/textproc/expat/patches/patch-configure.ac@0 type: deleted id: 20170908T075517Z.58ec1c9fa34a2d7f62b4759d4a5b481f8ef6474c log: "Updated expat to 2.2.4.\n\nRelease 2.2.4 Sat Auguest 19 2017\n Bug fixes:\n #115 Fix copying of partial characters for UTF-8 input\n\n \ Other changes:\n #109 Fix \"make check\" for non-x86 architectures that default\n to unsigned type char (-128..127 rather than 0..255)\n #109 coverage.sh: Cover -funsigned-char\n Autotools: Introduce --without-xmlwf argument\n #65 Autotools: Replace handwritten Makefile with GNU Automake\n #43 CMake: Auto-detect high quality entropy extractors, add new\n option USE_libbsd=ON to use arc4random_buf of libbsd\n #74 CMake: Add -fno-strict-aliasing only where supported\n \ #114 CMake: Always honor manually set BUILD_* options\n #114 \ CMake: Compile man page if docbook2x-man is available, only\n #117 \ Include file tests/xmltest.log.expected in source tarball\n (required for \"make run-xmltest\")\n #117 Include (existing) Visual Studio 2013 files in source tarball\n Improve test suite error output\n \ #111 Fix some typos in documentation\n Version info bumped from 7:5:6 to 7:6:6\n\n Special thanks to:\n Jakub Wilk\n \ Joe Orton\n Lin Tian\n Rolf Eike Beer\n\nRelease 2.2.3 Wed August 2 2017\n Security fixes:\n #82 CVE-2017-11742 -- Windows: Fix DLL hijacking vulnerability\n using Steve Holme's LoadLibrary wrapper for/of cURL\n\n Bug fixes:\n #85 Fix a dangling pointer issue related to realloc\n\n Other changes:\n Increase code coverage\n #91 Linux: Allow getrandom to fail if nonblocking pool has not\n yet been initialized and read /dev/urandom then, instead.\n This is in line with what recent Python does.\n \ #81 Pre-10.7/Lion macOS: Support entropy from arc4random\n #86 \ Check that a UTF-16 encoding in an XML declaration has the\n right endianness\n #4 #5 #7 Recover correctly when some reallocations fail\n \ Repair \"./configure && make\" for systems without any\n provider of high quality entropy\n and try reading /dev/urandom on those\n \ Ensure that user-defined character encodings have converter\n \ functions when they are needed\n Fix mis-leading description of argument -c in xmlwf.1\n Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)\n for CloudABI\n #100 \ Fix use of SIPHASH_MAIN in siphash.h\n #23 Test suite: Fix memory leaks\n Version info bumped from 7:4:6 to 7:5:6\n\n Special thanks to:\n Chanho Park\n Joe Orton\n Pascal Cuoq\n Rhodri James\n Simon McVittie\n Vadim Zeitlin\n Viktor Szakats\n and\n Core Infrastructure Initiative\n\nRelease 2.2.2 Wed July 12 2017\n Security fixes:\n #43 \ Protect against compilation without any source of high\n quality entropy enabled, e.g. with CMake build system;\n commit ff0207e6076e9828e536b8d9cd45c9c92069b895\n \ #60 Windows with _UNICODE:\n Unintended use of LoadLibraryW with a non-wide string\n resulted in failure to load advapi32.dll and degradation\n in quality of used entropy when compiled with _UNICODE for\n Windows; you can launch existing binaries with\n EXPAT_ENTROPY_DEBUG=1 in the environment to inspect the\n quality of entropy used during runtime; commits\n \ * 95b95032f907ef1cd17ee7a9a1768010a825d61d\n * 73a5a2e9c081f49f2d775cf7ced864158b68dc80\n [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;\n resulted in NULL dereference, previously;\n commit ac256dafdffc9622ab0dc2c62fcecb0dfcfa71fe\n\n \ Bug fixes:\n #69 Fix improper use of unsigned long long integer literals\n\n Other changes:\n #73 Start requiring a C99 compiler\n \ #49 Fix \"==\" Bashism in configure script\n #50 Fix too eager getrandom detection for Debian GNU/kFreeBSD\n #52 and macOS\n #51 Address lack of stdint.h in Visual Studio 2003 to 2008\n \ #58 Address compile warnings\n #68 Fix \"./buildconf.sh && ./configure\" for some versions\n of Dash for /bin/sh\n \ #72 CMake: Ease use of Expat in context of a parent project\n with multiple CMakeLists.txt files\n #72 CMake: Resolve mistaken executable permissions\n #76 Address compile warning with -DNDEBUG (not recommended!)\n \ #77 Address compile warning about macro redefinition\n\n Special thanks to:\n Alexander Bluhm\n Ben Boeckel\n CÄ\x83tÄ\x83lin RÄ\x83ceanu\n Kerin Millar\n László Böszörményi\n S. P. Zeidler\n Segev Finer\n Václav Slavík\n Victor Stinner\n Viktor Szakats\n and\n Radically Open Security\n" module: pkgsrc subject: 'CVS commit: pkgsrc/textproc/expat' unixtime: '1504857317' user: wiz