Summary: | textproc/expat2: Update to 2.6.3 | ||||||||
---|---|---|---|---|---|---|---|---|---|
Product: | Ports & Packages | Reporter: | Daniel Engberg <diizzy> | ||||||
Component: | Individual Port(s) | Assignee: | Daniel Engberg <diizzy> | ||||||
Status: | Closed FIXED | ||||||||
Severity: | Affects Some People | CC: | desktop, fluffy | ||||||
Priority: | --- | Flags: | antoine:
exp-run+
|
||||||
Version: | Latest | ||||||||
Hardware: | Any | ||||||||
OS: | Any | ||||||||
URL: | https://github.com/libexpat/libexpat/blob/R_2_6_3/expat/Changes | ||||||||
Attachments: |
|
Hi, I'd like to request an exp-run Best regards, Daniel It would be appreciated if someone could create vuxml entries Exp-run looks fine Created attachment 253427 [details]
Patch for expat2 v2
Remove additional patch for fooyin
Comment on attachment 253427 [details]
Patch for expat2 v2
LGTM
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=f5cfb7ec00272ec123fab636dea68b561b536a82 commit f5cfb7ec00272ec123fab636dea68b561b536a82 Author: Daniel Engberg <diizzy@FreeBSD.org> AuthorDate: 2024-09-15 11:40:32 +0000 Commit: Daniel Engberg <diizzy@FreeBSD.org> CommitDate: 2024-09-15 11:54:31 +0000 textproc/expat2: Update to 2.6.3 Fixes CVEs: CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 * Remove GNU_CONFIGURE_MANPREFIX Changelog: https://github.com/libexpat/libexpat/blob/R_2_6_3/expat/Changes PR: 281273 Approved by: desktop (fluffy) Exp-run by: antoine textproc/expat2/Makefile | 4 ++-- textproc/expat2/distinfo | 6 +++--- textproc/expat2/pkg-plist | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) |
Created attachment 253331 [details] Patch for expat2 Fixes CVEs: CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 Compile and runtime tested on FreeBSD 14.1-RELEASE (amd64) (make, make check-plist, make test) Poudriere testport OK 13.3-RELEASE (amd64) Poudriere testport OK 14.0-RELEASE (i386) Poudriere testport OK 14.0-RELEASE (amd64) Poudriere testport OK 14.1-RELEASE (amd64)