Authentication-Results: name.execsw.org; dkim=pass (1024-bit key) header.d=netbsd.org header.i=@netbsd.org header.b=044CUz3I; dkim=pass (1024-bit key) header.d=netbsd.org header.i=@netbsd.org header.b=wk+jHRTI Received: by mail.netbsd.org (Postfix, from userid 605) id 8283084EC1; Thu, 14 Mar 2024 09:15:59 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netbsd.org; s=20240131; t=1710407759; bh=2ypS61Quzg0v15miuN/jC/t/ciQSMwhVk+FbrnK9YHg=; h=Date:From:Subject:To:Reply-To:List-Id:List-Unsubscribe; b=044CUz3IdBZz+h1/Xrx3XKu4eKxFH4qOQuvQ7xS1kW4XCRG/V5vY6JCeaKb27YyLy ThJb1qTra7qoZEVWTnda24A6YMBOf1RyDIp3t9gtxqDSZVyyYtivehqUeKwQjSPb6o M9ecX34g3Y1ktq/YC/IST2CjogdGjsx7pg8kC45k= Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 7411084D45 for ; Thu, 14 Mar 2024 09:15:58 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Authentication-Results: mail.netbsd.org (amavisd-new); dkim=pass (1024-bit key) header.d=netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id 6cPKOjv6M4x4 for ; Thu, 14 Mar 2024 09:15:57 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id D523484CCA for ; Thu, 14 Mar 2024 09:15:57 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netbsd.org; s=20240131; t=1710407757; bh=2ypS61Quzg0v15miuN/jC/t/ciQSMwhVk+FbrnK9YHg=; h=Date:From:Subject:To:Reply-To; b=wk+jHRTIrp3XGnk1TmKnbnNVIxkeFFnxHKSlJB/a1GA90jEUS1rK+qNsMrGEPhuCl byIduuzQVAPeO0rsXYqvl9U0lY39cpvJJtE4WMsu22iq5n0l9M4jMBNFuJRq9PWZs0 6reKVID0cz5uLdh4o4Gavyc3ZJalYgHAgIyy25is= Received: by cvs.NetBSD.org (Postfix, from userid 500) id CBFB6FA2C; Thu, 14 Mar 2024 09:15:57 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1710407757234810" MIME-Version: 1.0 Date: Thu, 14 Mar 2024 09:15:57 +0000 From: "Thomas Klausner" Subject: CVS commit: pkgsrc/textproc/expat To: pkgsrc-changes@NetBSD.org Reply-To: wiz@netbsd.org X-Mailer: log_accum Message-Id: <20240314091557.CBFB6FA2C@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1710407757234810 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: wiz Date: Thu Mar 14 09:15:57 UTC 2024 Modified Files: pkgsrc/textproc/expat: Makefile distinfo Log Message: expat: update to 2.6.2. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !! Expat is UNDERSTAFFED and WITHOUT FUNDING. !! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Release 2.6.2 Wed March 13 2024 Security fixes: #839 #842 CVE-2024-28757 -- Prevent billion laughs attacks with isolated use of external parsers. Please see the commit message of commit 1d50b80cf31de87750103656f6eb693746854aa8 for details. Bug fixes: #839 #841 Reject direct parameter entity recursion and avoid the related undefined behavior Other changes: #847 Autotools: Fix build for DOCBOOK_TO_MAN containing spaces #837 Add missing #821 and #824 to 2.6.1 change log #838 #843 Version info bumped from 10:1:9 (libexpat*.so.1.9.1) to 10:2:9 (libexpat*.so.1.9.2); see https://verbump.de/ for what these numbers do Special thanks to: Philippe Antoine Tomas Korbar and Clang UndefinedBehaviorSanitizer OSS-Fuzz / ClusterFuzz To generate a diff of this commit: cvs rdiff -u -r1.56 -r1.57 pkgsrc/textproc/expat/Makefile cvs rdiff -u -r1.49 -r1.50 pkgsrc/textproc/expat/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1710407757234810 Content-Disposition: inline Content-Length: 1511 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/textproc/expat/Makefile diff -u pkgsrc/textproc/expat/Makefile:1.56 pkgsrc/textproc/expat/Makefile:1.57 --- pkgsrc/textproc/expat/Makefile:1.56 Fri Mar 1 06:50:02 2024 +++ pkgsrc/textproc/expat/Makefile Thu Mar 14 09:15:57 2024 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.56 2024/03/01 06:50:02 adam Exp $ +# $NetBSD: Makefile,v 1.57 2024/03/14 09:15:57 wiz Exp $ -DISTNAME= expat-2.6.1 +DISTNAME= expat-2.6.2 CATEGORIES= textproc MASTER_SITES= ${MASTER_SITE_GITHUB:=libexpat/} GITHUB_PROJECT= libexpat Index: pkgsrc/textproc/expat/distinfo diff -u pkgsrc/textproc/expat/distinfo:1.49 pkgsrc/textproc/expat/distinfo:1.50 --- pkgsrc/textproc/expat/distinfo:1.49 Fri Mar 1 06:50:02 2024 +++ pkgsrc/textproc/expat/distinfo Thu Mar 14 09:15:57 2024 @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.49 2024/03/01 06:50:02 adam Exp $ +$NetBSD: distinfo,v 1.50 2024/03/14 09:15:57 wiz Exp $ -BLAKE2s (expat-2.6.1.tar.gz) = 1f00eca4aa1ddc9f7d2d61d41bd12e2483e306c4ee2bed176da1c9bce95d2e66 -SHA512 (expat-2.6.1.tar.gz) = a36447638957c557122fb732d536217f19e7d5d2aef51e0bedd3e74e04f7320bb8fb5ef4155ea3fb2b6808eab5e76227fc1d8058126cad85a797d5485d7836e9 -Size (expat-2.6.1.tar.gz) = 762379 bytes +BLAKE2s (expat-2.6.2.tar.gz) = 72c3492d392007d75e8263d09df4fd24d2e98ee8700d18eb937966f33e725095 +SHA512 (expat-2.6.2.tar.gz) = aab95f567bfe4e09b7776be9cdc0d4c1f9df262762f22eed79e211d4f608df0168b0212f885926b7e0150afc39eb36c79e1702e8d08552e37202b9b0d8e4bc40 +Size (expat-2.6.2.tar.gz) = 764009 bytes --_----------=_1710407757234810--