On 06.03.2023 00:08, Brian Inglis via Cygwin wrote:
On 2023-03-05 13:25, Marco Atzeri via Cygwin wrote:
On 05.03.2023 20:24, Brian Inglis via Cygwin wrote:
[Xpost to cygwin in case apps not monitored]
On 2023-03-05 08:00, Marco Atzeri via Cygwin-apps wrote:
On 13.02.2022 21:34, Brian Inglis wrote:
[posting to apps to be less public]
https://nvd.nist.gov/vuln/detail/CVE-2022-23990
expat < 2.4.4
ping ?
In addition the cmake import library have some issues also
Been a year since I hinted!
Fixed releases build okay for me 2.4.1/5/9 up to current 2.5.0.
See:
https://cygwin.com/cgi-bin2/jobs.cgi?id=5541
https://github.com/cygwin/scallywag/actions/runs/4337543797
https://github.com/cygwin/scallywag/actions/runs/4337543797/jobs/7573650090
What are you seeing?
building latest gdal I was forced to add a line on expact.c
$ grep private /usr/lib/pkgconfig/expat.pc
Libs.private: -liconv
Do not see any need for libiconv/-devel in any expat? See attached.
I had the need building gdal 3.6.2
and move away
/usr/lib/make/expat-2.4.1
as the settings are wrong and cmake complains about missing files
$ grep -H "so.1" *.cmake
expat-noconfig.cmake: IMPORTED_LOCATION_NOCONFIG
"${_IMPORT_PREFIX}/lib/libexpat.so.1.8.1"
expat-noconfig.cmake: IMPORTED_SONAME_NOCONFIG "libexpat.so.1"
expat-noconfig.cmake:list(APPEND _IMPORT_CHECK_FILES_FOR_expat::expat
"${_IMPORT_PREFIX}/lib/libexpat.so.1.8.1" )
Fixed in 2.5.0 - see attached.
If Doug does not reply, are you considering to adopt expat ?
No - I do not use it and do not maintain anything which uses it:
$ cygcheck-dep -qn libexpat{1,-devel} expat
libexpat1: is needed for ( avahi cmake dbus dbus-bash-completion
dri-drivers expat gdb git graphviz lftp libaprutil1 libexpat-devel
libfontconfig1 libgdal20 libgdal26 libgdal28 libgdal29 libgdal30
libgdal31 libgvc6 libwx_baseu2.8_0 perl-XML-Parser python27 python36
python37 python38 python39 rats subversion tcl-tcldot )
libexpat-devel: is needed for ( libfontconfig-devel )
expat: is needed for ( )
If Doug does not have time, you seem the most appropriate candidate, as
cmake, gdal, python maintainer, if you could manage? Or put out a CFA on
apps?
I will likely do, but I was hoping in someone else.
I just took json-c another needed by gdal, and gdal
has a long list of dependency
For testing your latest builds, just pull source, and change
VERSION=2.5.0, add LICENSE=MIT, and BUILD_REQUIRES="gettext-devel
docbook2X" in case the former is needed, as there are .Po files used:
not sure if po4a should also be added for other files?
noted
--
Problem reports: https://cygwin.com/problems.html
FAQ: https://cygwin.com/faq/
Documentation: https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
