X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 4D8FD3858413
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1678082657;
	bh=9htP/e4SoMcqqBI48hsn6Ly8ZwIOJm8m/hueGMxwM7U=;
	h=Date:Subject:To:References:In-Reply-To:List-Id:List-Unsubscribe:
	List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:
	From;
	b=tT719XmyOGxWOOjTWAK4L4UhpCJLA+G5c5j6haJ8a4XYWpksQH4KEhG2GOCXIcWYx
	HGoZZy8aJZJkRw5VVn9VRdWOynnNp76VivleceXYgTM/Uul0QwzPE1meIcc+G55NE3
	cGx48QKvMcuQ0riyz0jWSFHiwe9PExBbOTHhjkmI=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.2 sourceware.org 31B7F3858C5F
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20210112; t=1678082609;
	h=content-transfer-encoding:in-reply-to:from:references:to
	:content-language:subject:user-agent:mime-version:date:message-id
	:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
	bh=JywjuqPPixb/zZS/lsQ6/xqvyvCW/moZsPLC90BG3CA=;
	b=iQZmJ5A2igfEPrFFJB9r2Wi2B+Zm10sGUSzxCQiSMbY7LkS9g7YKs4T4ufQVv0He0u
	1i6IuY/trxLZyPoD/cZn/PdopgOK4s8JVnERjp+dcUjBVQxnl2vt5RgqOTU6I8wKvrXA
	xgMR/GG4fiPB5QmQTE4CTHAiMQQV5QpVnZA92HZV362mh7oj/JGEGbIyHlrfU0mZJqRx
	T3JaqcroeXjN17PeDYEghYTUcaoGHt9goGPhaMnViuTNwf5e5LzqyiPesM0sRW260mZM
	zzH2nB3n0kE7axeAuWBacgn56wRNtKwDoSSwfOWnJ4S4Sze/G4GEDY2K7InSvKWpshLe
	yhNQ==
X-Gm-Message-State:	AO0yUKUhSnMOs3T8mEGauBUJEBy2wYaZ0tEKn3JaT4RFlcwAV2QGfzXF
	pFt2QV8lcDcV3c987IdvBE7Gv2Y/5wQ=
X-Google-Smtp-Source:	AK7set9/6KeLhwFytHfps3ZASf9yXJuT8OkZk/Sb87y85GpC7EBubxVhoo+Dp520PSXUCxg/zZhyUw==
X-Received:	by 2002:aa7:d342:0:b0:4ac:746e:2edf with SMTP id
	m2-20020aa7d342000000b004ac746e2edfmr8556446edr.9.1678082608753;
	Sun, 05 Mar 2023 22:03:28 -0800 (PST)
Message-ID:	<87f696ac-a6cd-e82c-656d-b7b4836a9019@gmail.com>
Date:	Mon, 6 Mar 2023 07:03:27 +0100
MIME-Version:	1.0
User-Agent:	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101
	Thunderbird/102.8.0
Subject:	Re: expat update would be good
To:	cygwin AT cygwin DOT com
References:	<ba8154f2-b404-6f7e-af3b-b8b1af35f990 AT SystematicSw DOT ab DOT ca>
	<de1678c2-e0a0-0cf2-3ff1-f0b558233ab5 AT gmail DOT com>
	<0042d2ab-c400-bd1c-2d67-6498e21d7237 AT Shaw DOT ca>
	<ffd8846a-e7bf-9470-1c1e-bc180895d853 AT gmail DOT com>
	<8233671e-fe1c-5bb1-fcf8-6a1504cab21e AT Shaw DOT ca>
In-Reply-To:	<8233671e-fe1c-5bb1-fcf8-6a1504cab21e@Shaw.ca>
X-Spam-Status:	No, score=0.2 required=5.0 tests=BAYES_00, BODY_8BITS,
	DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM,
	NICE_REPLY_A, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS,
	TXREP autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version:	SpamAssassin 3.4.6 (2021-04-09) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	Marco Atzeri via Cygwin <cygwin AT cygwin DOT com>
Reply-To:	Marco Atzeri <marco DOT atzeri AT gmail DOT com>
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>
X-MIME-Autoconverted:	from base64 to 8bit by delorie.com id 32664jDX029272

On 06.03.2023 00:08, Brian Inglis via Cygwin wrote:
> On 2023-03-05 13:25, Marco Atzeri via Cygwin wrote:
>> On 05.03.2023 20:24, Brian Inglis via Cygwin wrote:
>>> [Xpost to cygwin in case apps not monitored]
>>> On 2023-03-05 08:00, Marco Atzeri via Cygwin-apps wrote:
>>>> On 13.02.2022 21:34, Brian Inglis wrote:
>>>>> [posting to apps to be less public]
>>>>> https://nvd.nist.gov/vuln/detail/CVE-2022-23990
>>>>> expat < 2.4.4
>>>
>>>> ping ?
>>>> In addition the cmake import library have some issues also
>>>
>>> Been a year since I hinted!
>>>
>>> Fixed releases build okay for me 2.4.1/5/9 up to current 2.5.0.
>>> See:
>>>
>>>      https://cygwin.com/cgi-bin2/jobs.cgi?id=5541
>>>      https://github.com/cygwin/scallywag/actions/runs/4337543797
>>> https://github.com/cygwin/scallywag/actions/runs/4337543797/jobs/7573650090
>>>
>>> What are you seeing?
> 
>> building latest gdal I was forced to add a line on expact.c
>> $ grep private  /usr/lib/pkgconfig/expat.pc
>> Libs.private: -liconv
> 
> Do not see any need for libiconv/-devel in any expat? See attached.

I had the need building  gdal 3.6.2

> 
>> and move away
>> /usr/lib/make/expat-2.4.1
>> as the settings are wrong and cmake complains about missing files
>> $ grep -H "so.1" *.cmake
>> expat-noconfig.cmake:  IMPORTED_LOCATION_NOCONFIG 
>> "${_IMPORT_PREFIX}/lib/libexpat.so.1.8.1"
>> expat-noconfig.cmake:  IMPORTED_SONAME_NOCONFIG "libexpat.so.1"
>> expat-noconfig.cmake:list(APPEND _IMPORT_CHECK_FILES_FOR_expat::expat 
>> "${_IMPORT_PREFIX}/lib/libexpat.so.1.8.1" )
> 
> Fixed in 2.5.0 - see attached.
> 
>> If Doug does not reply, are you considering to adopt expat ?
> 
> No - I do not use it and do not maintain anything which uses it:
> 
> $ cygcheck-dep -qn libexpat{1,-devel} expat
>   libexpat1: is needed for ( avahi cmake dbus dbus-bash-completion 
> dri-drivers expat gdb git graphviz lftp libaprutil1 libexpat-devel 
> libfontconfig1 libgdal20 libgdal26 libgdal28 libgdal29 libgdal30 
> libgdal31 libgvc6 libwx_baseu2.8_0 perl-XML-Parser python27 python36 
> python37 python38 python39 rats subversion tcl-tcldot )
>   libexpat-devel: is needed for ( libfontconfig-devel )
>   expat: is needed for ( )
> 
> If Doug does not have time, you seem the most appropriate candidate, as 
> cmake, gdal, python maintainer, if you could manage? Or put out a CFA on 
> apps?
> 

I will likely do, but I was hoping in someone else.
I just took json-c another needed by gdal, and gdal
has a long list of dependency

> For testing your latest builds, just pull source, and change 
> VERSION=2.5.0, add LICENSE=MIT, and BUILD_REQUIRES="gettext-devel 
> docbook2X" in case the former is needed, as there are .Po files used: 
> not sure if po4a should also be added for other files?
> 

noted

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -