[fink-core] Expat at Fink / Expat 2.2.0 has been released

Hi there! Just a quick heads up that Expat 2.2.0 has been released and your distro could be among the very first to ship it According to [1], the Fink project is missing out on Expat 2.1.1 and several important security fixes already, 5 vulnerabilities with CVEs as it seems. If there is need fo

Re: [fink-core] Expat at Fink / Expat 2.2.0 has been released

Hi! On 22.06.2016 17:59, Alexander Hansen wrote: > The fink-core list is fine for both regular updates and security issues. Excellent. > I’ve put packaging up > at https://sourceforge.net/p/fink/package-submissions/4702/ for evaluation. Many thanks! Best Sebastian --

[fink-core] Expat CVE-2016-0718 regression fix

[2] https://github.com/gentoo/gentoo/commit/16a87b549461e49ac8b7915d892d4d8ca187c1b1 >From 3e6190e433479e56f8c1e5adc1198b3c86b15577 Mon Sep 17 00:00:00 2001 From: Sebastian Pipping Date: Sun, 17 Jul 2016 20:22:29 +0200 Subject: [PATCH] Fix regression introduced by patch to CVE-2016-0718 (bug #539) T

[fink-core] Expat 2.2.1 with security fixes has been released

Hi! I'm contacting you because Expat 2.2.1 -- containing security fixes -- has just been released. For details please check the change log, online at https://github.com/libexpat/libexpat/blob/master/expat/Changes . Best Sebastian -

[fink-core] Expat 2.2.2 released

Dear Expat maintainers, Expat 2.2.2 has been released. It fixes a few rough egdes that you reported with 2.2.1 and should help reduce the number of downstream patches. The change log is up at [1]. Please report bugs for anything new that you run into. Best Sebastian [1] https://github.co

[fink-core] Expat 2.2.3 released

Hi! Just a quick note that Expat 2.2.3 has been released. On Linux, extracting entropy for Hash DoS protection no longer blocks, which affected D-Bus and systems that are low on entropy early in the boot process. For more details, please check the change log [1]. Best Sebastian [1] https:

[fink-core] Expat 2.2.4 released

Hello everyone, Expat 2.2.4 [1] has just been released. It features one major bugfix regarding files encoded as UTF-8, and build system changes. Those of you building a XML_UNICODE copy named libexpatw.so, please see see [2] for notes on a suggested transition (and the Gentoo ebuild [3] applying

[fink-core] Expat 2.2.5 released

Hi everyone, Expat 2.2.5 has been released. It fixes miscellaneous bugs. For more details, please check the changelog [1]. Best Sebastian [1] https://github.com/libexpat/libexpat/blob/master/expat/Changes -- Check

[fink-core] Expat 2.2.6 released

Hi everyone! I would like to let you know that Expat 2.2.6 has just been released. Besides improvements to the build system, 2.2.6 is a bugfix release. For more details please check the change log at [1]. If you happen to have patches for Expat that are still required with 2.2.6, please send the

[fink-core] Expat 2.2.7 with security fixes has been released / CVE-2018-20843

Hello everyone! Sorry for the noise if you heard about the release of 2.2.7 about a week ago through some other channel and maybe even took action, already! To be quick, there is one DoS fix — for CVE-2018-20843 [1] — and misc build system fixes. The change log with details is up at [2]. If yo

[fink-core] Expat 2.2.8 with security fixes has been released / CVE-2019-15903

Hello everyone! To be quick, there is one heap buffer over-read DoS fix — for CVE-2019-15903 [1] —, two other bugfixes, and build system fixes. The change log with details is up at [2]. I don't expect use of the new configure option --enable-xml-attr-info in packaging anywhere, it's disabled ev

[fink-core] Expat 2.3.0 has been released

Hello everyone! Expat 2.3.0 — simplified — brings… - bugfixes, - improvements to both build systems, and - improvements to xmlwf usability. Please see the changelog at [1] for more details. If you have patches for Expat that are still required with version 2.3.0, please send them my w