Accepting request 1031257 from devel:libraries:c_c++

OBS-URL: https://build.opensuse.org/request/show/1031257
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/expat?expand=0&rev=70

expat-2.4.9.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:6e8c0728fe5c7cd3f93a6acce43046c5e4736c7b4b68e032e9350daa0efc0354
-size 459284

expat-2.4.9.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEEy43nCpDPv2w79cxWliYqz/vTrsYFAmMp1wEACgkQliYqz/vT
-rsaXDxAAqRARLP+yOmmhEyTA88yGemIPQnZ+7dYiOLBCxIlTOTwxGAIRHZqiJnG/
-yZte1IE80b7RVGsoEo+bumRBio8RB1B+kLmfWU/KmKsGKoarTGXj9KjCwybDLwo5
-VFEbYLfsVc6BdrXeTs3gwYM11e95p+y5HQiIBOYr6dXkgzg+NRyfj0o7hjg8gbhN
-fDES6MgWhtZQyIvBLGCoU9juFYefvrshmvSh4q2wzzfpw9COH6zOcmh0rqtHsvRT
-GR1YwQGl0v+vlFcRBpLIadw3/0mjjrl1gBcmdqL7wIsFVajMcV50sk6C5kSlKYe4
-37tKo2Kc8Ci687m9wfS5fdBN/oj11LG24xwBeJILrZbUxwE6lX071uy81qqv9NiJ
-RrbupIfXJXas/h16/2HdwkI4yWt+AoVmiZAYApF1xXyfiLHiOEyzQ2wSwYTb3GH0
-OaWLsUk6RWPDK1a/MNHIgX5PFDC5LH5/MlNS59MscvOQHkdrvOIjNw7pg93Zh2jY
-wLWdxDqiZUMGj3Q8f0iRksl4lAkg+xRT7mCBqRMXxZs6/iq7cgRaMBRqwyLHZOUB
-/9w97mLHM+hHLzCDMCGj4kcanPhWaNtdiPNyhxGT+pMAc7czNVxIALCuzX6ntwfn
-9Fr1aJJ5B5tUMGXohqL4ltHt75gSL+LgxRojwJSSLIN24WSXJJk=
-=7F5I
------END PGP SIGNATURE-----

expat-2.5.0.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=UAN0
+-----END PGP SIGNATURE-----

expat.changes

@@ -1,3 +1,30 @@
+-------------------------------------------------------------------
+Wed Oct 26 06:19:38 UTC 2022 - David Anes <david.anes@suse.com>
+
+- Update to 2.5.0: (bsc#1204708)
+  * Security fixes:
+    - CVE-2022-43680 -- Fix heap use-after-free after overeager 
+      destruction of a shared DTD in function 
+      XML_ExternalEntityParserCreate in out-of-memory situations.
+      Expected impact is denial of service or potentially arbitrary
+      code execution.
+  * Bug fixes:
+    - Fix curruption from undefined entities
+    - Fix case when parsing was suspended while processing nested
+      entities
+    - Stop leaking opening tag bindings after a closing tag mismatch 
+      error where a parser is reset through XML_ParserReset and then
+      reused to parse
+    - CMake: Fix generation of pkg-config file
+    - MinGW|CMake: Fix static library name
+  * Other changes:
+    - Protect header expat_config.h from multiple inclusion
+    - examples: Make use of XML_GetBuffer and be more consistent
+      across examples
+    - Address compiler warnings
+    - Version info bumped from 9:9:8 to 9:10:8; see 
+      https://verbump.de/ for what these numbers do
+
 -------------------------------------------------------------------
 Tue Sep 20 15:54:12 UTC 2022 - David Anes <david.anes@suse.com>
 

expat.spec

@@ -16,9 +16,9 @@
 #
 
 
-%global unversion 2_4_9
+%global unversion 2_5_0
 Name:           expat
-Version:        2.4.9
+Version:        2.5.0
 Release:        0
 Summary:        XML Parser Toolkit
 License:        MIT