Bug 281273

Summary: textproc/expat2: Update to 2.6.3
Product: Ports & Packages Reporter: Daniel Engberg <diizzy>
Component: Individual Port(s)Assignee: Daniel Engberg <diizzy>
Status: Closed FIXED    
Severity: Affects Some People CC: desktop, fluffy
Priority: --- Flags: antoine: exp-run+
Version: Latest   
Hardware: Any   
OS: Any   
URL: https://github.com/libexpat/libexpat/blob/R_2_6_3/expat/Changes
Attachments:
Description Flags
Patch for expat2
none
Patch for expat2 v2 fluffy: maintainer-approval+

Description Daniel Engberg freebsd_committer freebsd_triage 2024-09-04 18:46:26 UTC
Created attachment 253331 [details]
Patch for expat2

Fixes CVEs:
CVE-2024-45490
CVE-2024-45491
CVE-2024-45492

Compile and runtime tested on FreeBSD 14.1-RELEASE (amd64) (make, make check-plist, make test)

Poudriere testport OK 13.3-RELEASE (amd64)
Poudriere testport OK 14.0-RELEASE (i386)
Poudriere testport OK 14.0-RELEASE (amd64)
Poudriere testport OK 14.1-RELEASE (amd64)
Comment 1 Daniel Engberg freebsd_committer freebsd_triage 2024-09-04 18:46:59 UTC
Hi,

I'd like to request an exp-run

Best regards,
Daniel
Comment 2 Daniel Engberg freebsd_committer freebsd_triage 2024-09-04 18:47:30 UTC
It would be appreciated if someone could create vuxml entries
Comment 3 Antoine Brodin freebsd_committer freebsd_triage 2024-09-07 08:40:47 UTC
Exp-run looks fine
Comment 4 Daniel Engberg freebsd_committer freebsd_triage 2024-09-08 14:55:46 UTC
Created attachment 253427 [details]
Patch for expat2 v2

Remove additional patch for fooyin
Comment 5 Dima Panov freebsd_committer freebsd_triage 2024-09-08 22:34:29 UTC
Comment on attachment 253427 [details]
Patch for expat2 v2

LGTM
Comment 6 commit-hook freebsd_committer freebsd_triage 2024-09-15 11:55:40 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=f5cfb7ec00272ec123fab636dea68b561b536a82

commit f5cfb7ec00272ec123fab636dea68b561b536a82
Author:     Daniel Engberg <diizzy@FreeBSD.org>
AuthorDate: 2024-09-15 11:40:32 +0000
Commit:     Daniel Engberg <diizzy@FreeBSD.org>
CommitDate: 2024-09-15 11:54:31 +0000

    textproc/expat2: Update to 2.6.3

    Fixes CVEs:
    CVE-2024-45490
    CVE-2024-45491
    CVE-2024-45492

    * Remove GNU_CONFIGURE_MANPREFIX

    Changelog:
    https://github.com/libexpat/libexpat/blob/R_2_6_3/expat/Changes

    PR:             281273
    Approved by:    desktop (fluffy)
    Exp-run by:     antoine

 textproc/expat2/Makefile  | 4 ++--
 textproc/expat2/distinfo  | 6 +++---
 textproc/expat2/pkg-plist | 2 +-
 3 files changed, 6 insertions(+), 6 deletions(-)