SHA256
3
0
forked from pool/expat
expat/expat-2.4.9.tar.xz.asc

17 lines
833 B
Plaintext
Raw Normal View History

Accepting request 1005005 from home:david.anes:branches:devel:libraries:c_c++ - update to 2.4.9: (bsc#1203438) * Security fixes: - CVE-2022-40674 -- Heap use-after-free vulnerability in function doContent. Expected impact is denial of service or potentially arbitrary code execution. * Bug fixes: - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0 - docs: Fix documentation on effect of switch XML_DTD on symbol visibility in doc/reference.html * Other changes: - MinGW: Make fix-xmltest-log.sh drop more Wine bug output - Autotools: Sync CMake templates with CMake 3.22 - CMake: Migrate from use of CMAKE_*_POSTFIX to dedicated variables EXPAT_*_POSTFIX to stop affecting other projects - Windows|CMake: Add missing -DXML_STATIC to test runners and fuzzers - Windows|CMake: Render .def file from a template to fix linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON - MinGW|CMake: Apply MSVC .def file when linking - MinGW|CMake: Sync library name with GNU Autotools, i.e. produce libexpat-1.dll rather than libexpat.dll by default. Filename libexpat.dll.a is unaffected. - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in toolchain file "cmake/mingw-toolchain.cmake" to avoid error "windres: Command not found" on e.g. Ubuntu 20.04 - CMake: Unify inconsistent use of set() and option() in context of public build time options to take need for set(.. FORCE) in projects using Expat by means of add_subdirectory(..) off Expat's users' shoulders OBS-URL: https://build.opensuse.org/request/show/1005005 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/expat?expand=0&rev=100
2022-09-20 18:16:20 +02:00
-----BEGIN PGP SIGNATURE-----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=7F5I
-----END PGP SIGNATURE-----