On 05.03.2023 20:24, Brian Inglis via Cygwin wrote:
[Xpost to cygwin in case apps not monitored]
On 2023-03-05 08:00, Marco Atzeri via Cygwin-apps wrote:
On 13.02.2022 21:34, Brian Inglis wrote:
[posting to apps to be less public]
https://nvd.nist.gov/vuln/detail/CVE-2022-23990
expat < 2.4.4

ping ?
In addition the cmake import library have some issues also

Been a year since I hinted!

Fixed releases build okay for me 2.4.1/5/9 up to current 2.5.0.
See:

     https://cygwin.com/cgi-bin2/jobs.cgi?id=5541
     https://github.com/cygwin/scallywag/actions/runs/4337543797
https://github.com/cygwin/scallywag/actions/runs/4337543797/jobs/7573650090

What are you seeing?


building latest gdal I was forced to add a line on expact.c

$ grep private  /usr/lib/pkgconfig/expat.pc
Libs.private: -liconv

and move away
/usr/lib/make/expat-2.4.1

as the settings are wrong and cmake complains about missing files

$ grep -H "so.1" *.cmake
expat-noconfig.cmake: IMPORTED_LOCATION_NOCONFIG "${_IMPORT_PREFIX}/lib/libexpat.so.1.8.1"
expat-noconfig.cmake:  IMPORTED_SONAME_NOCONFIG "libexpat.so.1"
expat-noconfig.cmake:list(APPEND _IMPORT_CHECK_FILES_FOR_expat::expat "${_IMPORT_PREFIX}/lib/libexpat.so.1.8.1" )


If Doug does not reply, are you considering to adopt expat ?

Regards
Marco

--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

Reply via email to