expat update would be good

[Marco Atzeri]

On 05.03.2023 20:24, Brian Inglis via Cygwin wrote:
> [Xpost to cygwin in case apps not monitored]
> On 2023-03-05 08:00, Marco Atzeri via Cygwin-apps wrote:
>> On 13.02.2022 21:34, Brian Inglis wrote:
>>> [posting to apps to be less public]
>>> https://nvd.nist.gov/vuln/detail/CVE-2022-23990
>>> expat < 2.4.4
> 
>> ping ?
>> In addition the cmake import library have some issues also
> 
> Been a year since I hinted!
> 
> Fixed releases build okay for me 2.4.1/5/9 up to current 2.5.0.
> See:
> 
>      https://cygwin.com/cgi-bin2/jobs.cgi?id=5541
>      https://github.com/cygwin/scallywag/actions/runs/4337543797
> https://github.com/cygwin/scallywag/actions/runs/4337543797/jobs/7573650090
> 
> What are you seeing?
> 

building latest gdal I was forced to add a line on expact.c

$ grep private  /usr/lib/pkgconfig/expat.pc
Libs.private: -liconv

and move away
/usr/lib/make/expat-2.4.1

as the settings are wrong and cmake complains about missing files

$ grep -H "so.1" *.cmake
expat-noconfig.cmake:  IMPORTED_LOCATION_NOCONFIG 
"${_IMPORT_PREFIX}/lib/libexpat.so.1.8.1"
expat-noconfig.cmake:  IMPORTED_SONAME_NOCONFIG "libexpat.so.1"
expat-noconfig.cmake:list(APPEND _IMPORT_CHECK_FILES_FOR_expat::expat 
"${_IMPORT_PREFIX}/lib/libexpat.so.1.8.1" )


If Doug does not reply, are you considering to adopt expat ?

Regards
Marco