From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-ed1-x52f.google.com (mail-ed1-x52f.google.com [IPv6:2a00:1450:4864:20::52f]) by sourceware.org (Postfix) with ESMTPS id 56C0E3858D1E for ; Sun, 5 Mar 2023 20:25:20 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 56C0E3858D1E Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com Received: by mail-ed1-x52f.google.com with SMTP id cw28so30631963edb.5 for ; Sun, 05 Mar 2023 12:25:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1678047919; h=content-transfer-encoding:in-reply-to:from:content-language :references:to:subject:user-agent:mime-version:date:message-id:from :to:cc:subject:date:message-id:reply-to; bh=SceQGgItvSh5k+VEPRiUCuzIeiYsHomRPHOyHz0CgfQ=; b=IfnTtbjD1BG/LgPsvN0BidTwd1a6YOQgJoxnoI1A2F9+AnT+zYQ7jQGNBkSZEssoeW wP9ZauLIlu8x42ePomScm9nQyqIRWNBDViyRaGnkMK3B5LlnyS6yxPeW5CTzz49XfXTz LTMxtpcbPFQeui01/hrr3dtbRkUfInUYQBDpQlrNhzJxMVuoxF3K5JgQDr9VDPkhQzFt AmhLn8fdUDmcMOqaut3pyeIHMPOTjQXpRTFhyDAGckRpmaBtWL484+V+JfLSr7MvSgcO 1TcTKmiRX3G6vC+Gfonii2wl02zJpUhpxNoixWDjaSGHvwavMQAKO1tM4rLdxtVKH4sf 1hNQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1678047919; h=content-transfer-encoding:in-reply-to:from:content-language :references:to:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=SceQGgItvSh5k+VEPRiUCuzIeiYsHomRPHOyHz0CgfQ=; b=uxAxHn5xaohdDksBghTnKqnKtC/QbEVlx1PUjG+2Y3NtHG3l9aHdh6oZMlmVg6OwEd IfQ2GlxzXzEtRUaLLYLBpxLu2Ld3EwzkfH1F2NF2IzXhRpk3h1yRUKrmsVij2d/84ZEG H19vslImUcBKb8fdURus+k7qZy/6M9vmuTzqMG60oxPqFA/7c+7wyhxghaAqEHTLXLvx qEnGXdZnJ9OGuCGd9fhvK64w05ZZJ5ptzxPGJCJyDhGP874yJqWqupL91LTimrgZYNS4 mV8JBWBLkpDPYTdolY+EKzTW+hhwc0vOdmDp7RwkgWpgCfK5K6oygEy1RTNGEB2yFLR3 2z2A== X-Gm-Message-State: AO0yUKX17w+EdM9II2VLCNcs0Jx8DCoOmhtCIbDN2fwO9UB3YW7vL88E 1Do3Qe8pp67FjbhkXNZbIChdtnQrPkc= X-Google-Smtp-Source: AK7set/Y1G1KKKvO093vAt3u7GeUKi+PmA5Op4gPgDC2RzLCFv4DuKdJ6o9fGieBYobdhjE03CpceQ== X-Received: by 2002:aa7:ce05:0:b0:4ac:bab1:feee with SMTP id d5-20020aa7ce05000000b004acbab1feeemr7244107edv.24.1678047918705; Sun, 05 Mar 2023 12:25:18 -0800 (PST) Received: from ?IPV6:2001:a61:12a9:1801:b850:a448:885b:ed0d? ([2001:a61:12a9:1801:b850:a448:885b:ed0d]) by smtp.gmail.com with ESMTPSA id q1-20020a50c341000000b004bbb691a334sm4180319edb.2.2023.03.05.12.25.18 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 05 Mar 2023 12:25:18 -0800 (PST) Message-ID: Date: Sun, 5 Mar 2023 21:25:17 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.8.0 Subject: Re: expat update would be good To: cygwin@cygwin.com References: <0042d2ab-c400-bd1c-2d67-6498e21d7237@Shaw.ca> Content-Language: it From: Marco Atzeri In-Reply-To: <0042d2ab-c400-bd1c-2d67-6498e21d7237@Shaw.ca> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Spam-Status: No, score=0.2 required=5.0 tests=BAYES_00,BODY_8BITS,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,NICE_REPLY_A,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On 05.03.2023 20:24, Brian Inglis via Cygwin wrote: > [Xpost to cygwin in case apps not monitored] > On 2023-03-05 08:00, Marco Atzeri via Cygwin-apps wrote: >> On 13.02.2022 21:34, Brian Inglis wrote: >>> [posting to apps to be less public] >>> https://nvd.nist.gov/vuln/detail/CVE-2022-23990 >>> expat < 2.4.4 > >> ping ? >> In addition the cmake import library have some issues also > > Been a year since I hinted! > > Fixed releases build okay for me 2.4.1/5/9 up to current 2.5.0. > See: > >     https://cygwin.com/cgi-bin2/jobs.cgi?id=5541 >     https://github.com/cygwin/scallywag/actions/runs/4337543797 > https://github.com/cygwin/scallywag/actions/runs/4337543797/jobs/7573650090 > > What are you seeing? > building latest gdal I was forced to add a line on expact.c $ grep private /usr/lib/pkgconfig/expat.pc Libs.private: -liconv and move away /usr/lib/make/expat-2.4.1 as the settings are wrong and cmake complains about missing files $ grep -H "so.1" *.cmake expat-noconfig.cmake: IMPORTED_LOCATION_NOCONFIG "${_IMPORT_PREFIX}/lib/libexpat.so.1.8.1" expat-noconfig.cmake: IMPORTED_SONAME_NOCONFIG "libexpat.so.1" expat-noconfig.cmake:list(APPEND _IMPORT_CHECK_FILES_FOR_expat::expat "${_IMPORT_PREFIX}/lib/libexpat.so.1.8.1" ) If Doug does not reply, are you considering to adopt expat ? Regards Marco