[Midnightbsd-cvs] [MidnightBSD/mports] 6b9a86: textproc/expat2: update to 2.8.3 (#740)

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 6b9a8612a4b71336a15d13cf407407d80b0b05da
      https://github.com/MidnightBSD/mports/commit/6b9a8612a4b71336a15d13cf407407d80b0b05da
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-11 (Tue, 11 Aug 2026)

  Changed paths:
    M textproc/expat2/Makefile
    M textproc/expat2/distinfo
    M textproc/expat2/pkg-plist

  Log Message:
  -----------
  textproc/expat2: update to 2.8.3 (#740)

## Summary

- update Expat from 2.8.2 to 2.8.3
- address CVE-2026-72522, an out-of-bounds read and resulting infinite
loop in 16-bit character builds
- update the packaged library filename to `libexpat.so.1.12.3`

The ABI SONAME remains `libexpat.so.1`, so dependent port revision bumps
are not required. Upstream's `COPYING` file is unchanged.

## Validation

- `bmake makesum`
- `bmake check-license`
- `bmake clean patch build fake package test`
- `WITH=TEST bmake clean test` (1 test suite passed, 0 failed)
- `portlint -AC` (0 fatal errors; maintainer-mode warning only)
- `readelf -d` confirmed SONAME `libexpat.so.1`

## Summary by Sourcery

Update the expat2 port to the 2.8.3 release.

New Features:
- Ship Expat 2.8.3, including upstream fixes such as the out-of-bounds
read and infinite loop issue on 16-bit character builds.

Enhancements:
- Adjust port metadata to track the new distfile version and packaged
shared library filename while keeping the ABI SONAME unchanged.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications