CVS commit: pkgsrc/textproc/expat

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon May 11 15:51:26 UTC 2026

Modified Files:
        pkgsrc/textproc/expat: Makefile distinfo

Log Message:
expat: updated to 2.8.1

Release 2.8.1 Sun May 10 2026

Security fixes:
CVE-2026-45186 -- Fix quadratic runtime from attribute name
collision checks that allowed denial of service attacks
through moderately sized crafted XML input (CWE-407).
Please note that a layer of compression around XML can
significantly reduce the minimum attack payload size.

Other changes:
Drop more casts related to `void *` that C99 does not need
xmlwf: Streamline use of `mmap`
Version info bumped from 13:0:12 (libexpat*.so.1.12.0)
to 13:1:12 (libexpat*.so.1.12.1); see https://verbump.de/
for what these numbers do


To generate a diff of this commit:
cvs rdiff -u -r1.64 -r1.65 pkgsrc/textproc/expat/Makefile
cvs rdiff -u -r1.58 -r1.59 pkgsrc/textproc/expat/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/textproc/expat/Makefile
diff -u pkgsrc/textproc/expat/Makefile:1.64 pkgsrc/textproc/expat/Makefile:1.65
--- pkgsrc/textproc/expat/Makefile:1.64 Sun Apr 26 19:45:59 2026
+++ pkgsrc/textproc/expat/Makefile      Mon May 11 15:51:26 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.64 2026/04/26 19:45:59 wiz Exp $
+# $NetBSD: Makefile,v 1.65 2026/05/11 15:51:26 adam Exp $
 
-DISTNAME=      expat-2.8.0
+DISTNAME=      expat-2.8.1
 CATEGORIES=    textproc
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=libexpat/}
 GITHUB_PROJECT=        libexpat

Index: pkgsrc/textproc/expat/distinfo
diff -u pkgsrc/textproc/expat/distinfo:1.58 pkgsrc/textproc/expat/distinfo:1.59
--- pkgsrc/textproc/expat/distinfo:1.58 Sun Apr 26 19:45:59 2026
+++ pkgsrc/textproc/expat/distinfo      Mon May 11 15:51:26 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.58 2026/04/26 19:45:59 wiz Exp $
+$NetBSD: distinfo,v 1.59 2026/05/11 15:51:26 adam Exp $
 
-BLAKE2s (expat-2.8.0.tar.gz) = 05adf140dc56fb856d2605a68da6e69f1f48b1eed258f3bfb38ea4e453daad16
-SHA512 (expat-2.8.0.tar.gz) = 08a9e48c880234e961734940c1b49c3d96ded511075086d27ba879a2c5efb6f62abb22d8533eb9916df7e467fc31d8b0535327e392707d263cbd82d892bbbb45
-Size (expat-2.8.0.tar.gz) = 811444 bytes
+BLAKE2s (expat-2.8.1.tar.gz) = f4b7e78afa9094b38f09bc2381ed97c776158b2722f54065f66d6a8a47863956
+SHA512 (expat-2.8.1.tar.gz) = 2b17c1210d7267bdd0bd98d3e093279c56487efec1f2ae725bbc87b834c3f7aa789791ddb89ee324d1a823dc4e65b2f0d1555afb95cc06d64d75821e565dfc8c
+Size (expat-2.8.1.tar.gz) = 812969 bytes