CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2024/02/10 17:56:28
Modified files: lib/libexpat : Changes README.md expat_config.h shlib_version lib/libexpat/doc: reference.html lib/libexpat/lib: expat.h internal.h siphash.h winconfig.h xmlparse.c xmlrole.c xmlrole.h xmltok.c xmltok.h xmltok_impl.c lib/libexpat/tests: chardata.c memcheck.c minicheck.c minicheck.h runtests.c structdata.c lib/libexpat/tests/benchmark: benchmark.c Added files: lib/libexpat/examples: element_declarations.c lib/libexpat/tests: acc_tests.c acc_tests.h acc_tests_cxx.cpp alloc_tests.c alloc_tests.h alloc_tests_cxx.cpp basic_tests.c basic_tests.h basic_tests_cxx.cpp chardata_cxx.cpp common.c common.h common_cxx.cpp dummy.c dummy.h dummy_cxx.cpp handlers.c handlers.h handlers_cxx.cpp memcheck_cxx.cpp minicheck_cxx.cpp misc_tests.c misc_tests.h misc_tests_cxx.cpp ns_tests.c ns_tests.h ns_tests_cxx.cpp nsalloc_tests.c nsalloc_tests.h nsalloc_tests_cxx.cpp runtests_cxx.cpp structdata_cxx.cpp Log message: Update libexpat to version 2.6.0. This fixes CVE-2023-52425. OpenBSD is not affected by CVE-2023-52426. Relevant for OpenBSD are security fixes #789 #814, bug fixes #753 #812 #813, other changes #771 #788 #764 #765, and examples, docs, compiler warnings, clang-tidy, tests. Only a minor library bump is necessary, this has been discussed with tb@ guenther@ kettenis@. OK deraadt@