X-Recipient: archive-cygwin AT delorie DOT com DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 4D8FD3858413 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com; s=default; t=1678082657; bh=9htP/e4SoMcqqBI48hsn6Ly8ZwIOJm8m/hueGMxwM7U=; h=Date:Subject:To:References:In-Reply-To:List-Id:List-Unsubscribe: List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To: From; b=tT719XmyOGxWOOjTWAK4L4UhpCJLA+G5c5j6haJ8a4XYWpksQH4KEhG2GOCXIcWYx HGoZZy8aJZJkRw5VVn9VRdWOynnNp76VivleceXYgTM/Uul0QwzPE1meIcc+G55NE3 cGx48QKvMcuQ0riyz0jWSFHiwe9PExBbOTHhjkmI= X-Original-To: cygwin AT cygwin DOT com Delivered-To: cygwin AT cygwin DOT com DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 31B7F3858C5F X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1678082609; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=JywjuqPPixb/zZS/lsQ6/xqvyvCW/moZsPLC90BG3CA=; b=iQZmJ5A2igfEPrFFJB9r2Wi2B+Zm10sGUSzxCQiSMbY7LkS9g7YKs4T4ufQVv0He0u 1i6IuY/trxLZyPoD/cZn/PdopgOK4s8JVnERjp+dcUjBVQxnl2vt5RgqOTU6I8wKvrXA xgMR/GG4fiPB5QmQTE4CTHAiMQQV5QpVnZA92HZV362mh7oj/JGEGbIyHlrfU0mZJqRx T3JaqcroeXjN17PeDYEghYTUcaoGHt9goGPhaMnViuTNwf5e5LzqyiPesM0sRW260mZM zzH2nB3n0kE7axeAuWBacgn56wRNtKwDoSSwfOWnJ4S4Sze/G4GEDY2K7InSvKWpshLe yhNQ== X-Gm-Message-State: AO0yUKUhSnMOs3T8mEGauBUJEBy2wYaZ0tEKn3JaT4RFlcwAV2QGfzXF pFt2QV8lcDcV3c987IdvBE7Gv2Y/5wQ= X-Google-Smtp-Source: AK7set9/6KeLhwFytHfps3ZASf9yXJuT8OkZk/Sb87y85GpC7EBubxVhoo+Dp520PSXUCxg/zZhyUw== X-Received: by 2002:aa7:d342:0:b0:4ac:746e:2edf with SMTP id m2-20020aa7d342000000b004ac746e2edfmr8556446edr.9.1678082608753; Sun, 05 Mar 2023 22:03:28 -0800 (PST) Message-ID: <87f696ac-a6cd-e82c-656d-b7b4836a9019@gmail.com> Date: Mon, 6 Mar 2023 07:03:27 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.8.0 Subject: Re: expat update would be good Content-Language: it To: cygwin AT cygwin DOT com References:

<0042d2ab-c400-bd1c-2d67-6498e21d7237 AT Shaw DOT ca> <8233671e-fe1c-5bb1-fcf8-6a1504cab21e AT Shaw DOT ca> In-Reply-To: <8233671e-fe1c-5bb1-fcf8-6a1504cab21e@Shaw.ca> X-Spam-Status: No, score=0.2 required=5.0 tests=BAYES_00, BODY_8BITS, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, NICE_REPLY_A, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org X-BeenThere: cygwin AT cygwin DOT com X-Mailman-Version: 2.1.29 List-Id: General Cygwin discussions and problem reports List-Archive: List-Post: List-Help: List-Subscribe: , From: Marco Atzeri via Cygwin Reply-To: Marco Atzeri Content-Type: text/plain; charset="utf-8"; Format="flowed" Sender: "Cygwin" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from base64 to 8bit by delorie.com id 32664jDX029272 On 06.03.2023 00:08, Brian Inglis via Cygwin wrote: > On 2023-03-05 13:25, Marco Atzeri via Cygwin wrote: >> On 05.03.2023 20:24, Brian Inglis via Cygwin wrote: >>> [Xpost to cygwin in case apps not monitored] >>> On 2023-03-05 08:00, Marco Atzeri via Cygwin-apps wrote: >>>> On 13.02.2022 21:34, Brian Inglis wrote: >>>>> [posting to apps to be less public] >>>>> https://nvd.nist.gov/vuln/detail/CVE-2022-23990 >>>>> expat < 2.4.4 >>> >>>> ping ? >>>> In addition the cmake import library have some issues also >>> >>> Been a year since I hinted! >>> >>> Fixed releases build okay for me 2.4.1/5/9 up to current 2.5.0. >>> See: >>> >>> https://cygwin.com/cgi-bin2/jobs.cgi?id=5541 >>> https://github.com/cygwin/scallywag/actions/runs/4337543797 >>> https://github.com/cygwin/scallywag/actions/runs/4337543797/jobs/7573650090 >>> >>> What are you seeing? > >> building latest gdal I was forced to add a line on expact.c >> $ grep private /usr/lib/pkgconfig/expat.pc >> Libs.private: -liconv > > Do not see any need for libiconv/-devel in any expat? See attached. I had the need building gdal 3.6.2 > >> and move away >> /usr/lib/make/expat-2.4.1 >> as the settings are wrong and cmake complains about missing files >> $ grep -H "so.1" *.cmake >> expat-noconfig.cmake: IMPORTED_LOCATION_NOCONFIG >> "${_IMPORT_PREFIX}/lib/libexpat.so.1.8.1" >> expat-noconfig.cmake: IMPORTED_SONAME_NOCONFIG "libexpat.so.1" >> expat-noconfig.cmake:list(APPEND _IMPORT_CHECK_FILES_FOR_expat::expat >> "${_IMPORT_PREFIX}/lib/libexpat.so.1.8.1" ) > > Fixed in 2.5.0 - see attached. > >> If Doug does not reply, are you considering to adopt expat ? > > No - I do not use it and do not maintain anything which uses it: > > $ cygcheck-dep -qn libexpat{1,-devel} expat > libexpat1: is needed for ( avahi cmake dbus dbus-bash-completion > dri-drivers expat gdb git graphviz lftp libaprutil1 libexpat-devel > libfontconfig1 libgdal20 libgdal26 libgdal28 libgdal29 libgdal30 > libgdal31 libgvc6 libwx_baseu2.8_0 perl-XML-Parser python27 python36 > python37 python38 python39 rats subversion tcl-tcldot ) > libexpat-devel: is needed for ( libfontconfig-devel ) > expat: is needed for ( ) > > If Doug does not have time, you seem the most appropriate candidate, as > cmake, gdal, python maintainer, if you could manage? Or put out a CFA on > apps? > I will likely do, but I was hoping in someone else. I just took json-c another needed by gdal, and gdal has a long list of dependency > For testing your latest builds, just pull source, and change > VERSION=2.5.0, add LICENSE=MIT, and BUILD_REQUIRES="gettext-devel > docbook2X" in case the former is needed, as there are .Po files used: > not sure if po4a should also be added for other files? > noted -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation: https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple