From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-ed1-x52d.google.com (mail-ed1-x52d.google.com [IPv6:2a00:1450:4864:20::52d]) by sourceware.org (Postfix) with ESMTPS id 31B7F3858C5F for ; Mon, 6 Mar 2023 06:03:30 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 31B7F3858C5F Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com Received: by mail-ed1-x52d.google.com with SMTP id ec29so2982711edb.6 for ; Sun, 05 Mar 2023 22:03:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1678082609; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=JywjuqPPixb/zZS/lsQ6/xqvyvCW/moZsPLC90BG3CA=; b=DBLUA41XhsNE7SFqfN1zeIFsKrBAzkHnIxxkTBfBBm4loLrToZmlALVl+/EoXDjKbu +efk6MUZEyKfgV8932uBqZoXYqvu4GGWMS6rC8HMyPz9zCRDrfbIpw+zL27A2qP+96wL L0CPlIhpQEN86SC/hq1mYUXOVk9a2iZbRWTLsp2+ZtsgxGrx7qYz6sfykJVTfw34fv+L 1gh48znJ2fCsMUCE3g76xKTrDp3MYETXgTo3UlYHeLkmNRBCZW7GRkex+JtGVoNXAfRp 1ZL2Tvv1FPFmGnDGN8QTwkZ8n7mV3qy/87TwsTRLIq9Tdf/nYm+CUnh6wYiubb30+dPN JrcA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1678082609; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=JywjuqPPixb/zZS/lsQ6/xqvyvCW/moZsPLC90BG3CA=; b=iQZmJ5A2igfEPrFFJB9r2Wi2B+Zm10sGUSzxCQiSMbY7LkS9g7YKs4T4ufQVv0He0u 1i6IuY/trxLZyPoD/cZn/PdopgOK4s8JVnERjp+dcUjBVQxnl2vt5RgqOTU6I8wKvrXA xgMR/GG4fiPB5QmQTE4CTHAiMQQV5QpVnZA92HZV362mh7oj/JGEGbIyHlrfU0mZJqRx T3JaqcroeXjN17PeDYEghYTUcaoGHt9goGPhaMnViuTNwf5e5LzqyiPesM0sRW260mZM zzH2nB3n0kE7axeAuWBacgn56wRNtKwDoSSwfOWnJ4S4Sze/G4GEDY2K7InSvKWpshLe yhNQ== X-Gm-Message-State: AO0yUKUhSnMOs3T8mEGauBUJEBy2wYaZ0tEKn3JaT4RFlcwAV2QGfzXF pFt2QV8lcDcV3c987IdvBE7Gv2Y/5wQ= X-Google-Smtp-Source: AK7set9/6KeLhwFytHfps3ZASf9yXJuT8OkZk/Sb87y85GpC7EBubxVhoo+Dp520PSXUCxg/zZhyUw== X-Received: by 2002:aa7:d342:0:b0:4ac:746e:2edf with SMTP id m2-20020aa7d342000000b004ac746e2edfmr8556446edr.9.1678082608753; Sun, 05 Mar 2023 22:03:28 -0800 (PST) Received: from ?IPV6:2001:a61:12a9:1801:4116:8d32:4e73:815e? ([2001:a61:12a9:1801:4116:8d32:4e73:815e]) by smtp.gmail.com with ESMTPSA id d27-20020a50f69b000000b004acb696a0f6sm4578558edn.91.2023.03.05.22.03.27 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 05 Mar 2023 22:03:28 -0800 (PST) Message-ID: <87f696ac-a6cd-e82c-656d-b7b4836a9019@gmail.com> Date: Mon, 6 Mar 2023 07:03:27 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.8.0 Subject: Re: expat update would be good Content-Language: it To: cygwin@cygwin.com References: <0042d2ab-c400-bd1c-2d67-6498e21d7237@Shaw.ca> <8233671e-fe1c-5bb1-fcf8-6a1504cab21e@Shaw.ca> From: Marco Atzeri In-Reply-To: <8233671e-fe1c-5bb1-fcf8-6a1504cab21e@Shaw.ca> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Spam-Status: No, score=0.2 required=5.0 tests=BAYES_00,BODY_8BITS,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,NICE_REPLY_A,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On 06.03.2023 00:08, Brian Inglis via Cygwin wrote: > On 2023-03-05 13:25, Marco Atzeri via Cygwin wrote: >> On 05.03.2023 20:24, Brian Inglis via Cygwin wrote: >>> [Xpost to cygwin in case apps not monitored] >>> On 2023-03-05 08:00, Marco Atzeri via Cygwin-apps wrote: >>>> On 13.02.2022 21:34, Brian Inglis wrote: >>>>> [posting to apps to be less public] >>>>> https://nvd.nist.gov/vuln/detail/CVE-2022-23990 >>>>> expat < 2.4.4 >>> >>>> ping ? >>>> In addition the cmake import library have some issues also >>> >>> Been a year since I hinted! >>> >>> Fixed releases build okay for me 2.4.1/5/9 up to current 2.5.0. >>> See: >>> >>>      https://cygwin.com/cgi-bin2/jobs.cgi?id=5541 >>>      https://github.com/cygwin/scallywag/actions/runs/4337543797 >>> https://github.com/cygwin/scallywag/actions/runs/4337543797/jobs/7573650090 >>> >>> What are you seeing? > >> building latest gdal I was forced to add a line on expact.c >> $ grep private  /usr/lib/pkgconfig/expat.pc >> Libs.private: -liconv > > Do not see any need for libiconv/-devel in any expat? See attached. I had the need building gdal 3.6.2 > >> and move away >> /usr/lib/make/expat-2.4.1 >> as the settings are wrong and cmake complains about missing files >> $ grep -H "so.1" *.cmake >> expat-noconfig.cmake:  IMPORTED_LOCATION_NOCONFIG >> "${_IMPORT_PREFIX}/lib/libexpat.so.1.8.1" >> expat-noconfig.cmake:  IMPORTED_SONAME_NOCONFIG "libexpat.so.1" >> expat-noconfig.cmake:list(APPEND _IMPORT_CHECK_FILES_FOR_expat::expat >> "${_IMPORT_PREFIX}/lib/libexpat.so.1.8.1" ) > > Fixed in 2.5.0 - see attached. > >> If Doug does not reply, are you considering to adopt expat ? > > No - I do not use it and do not maintain anything which uses it: > > $ cygcheck-dep -qn libexpat{1,-devel} expat >  libexpat1: is needed for ( avahi cmake dbus dbus-bash-completion > dri-drivers expat gdb git graphviz lftp libaprutil1 libexpat-devel > libfontconfig1 libgdal20 libgdal26 libgdal28 libgdal29 libgdal30 > libgdal31 libgvc6 libwx_baseu2.8_0 perl-XML-Parser python27 python36 > python37 python38 python39 rats subversion tcl-tcldot ) >  libexpat-devel: is needed for ( libfontconfig-devel ) >  expat: is needed for ( ) > > If Doug does not have time, you seem the most appropriate candidate, as > cmake, gdal, python maintainer, if you could manage? Or put out a CFA on > apps? > I will likely do, but I was hoping in someone else. I just took json-c another needed by gdal, and gdal has a long list of dependency > For testing your latest builds, just pull source, and change > VERSION=2.5.0, add LICENSE=MIT, and BUILD_REQUIRES="gettext-devel > docbook2X" in case the former is needed, as there are .Po files used: > not sure if po4a should also be added for other files? > noted