BSD Ports

textproc/expat2 2.9.0 MidnightBSD

XML 1.0 parser written in C

System
MidnightBSD
Repository
mports
Maintainer
[email protected]
Last update
Commit
f41d5a7a2c
License
mit
Categories
textproc

Description

Expat is an XML 1.0 parser written in C. It aims to be fully conforming. It is currently not a validating XML processor.

In the other systems

SystemPortVersion
MidnightBSDtextproc/expat22.9.0
FreeBSDtextproc/expat22.9.0
NetBSDtextproc/expat2.8.5
DragonFlytextproc/expat22.7.0
HardenedBSDtextproc/expat22.8.4
GhostBSDtextproc/expat22.8.4
OPNsensetextproc/expat22.8.2

Install

Binary package:

mport install expat

From mports:

cd /usr/mports/textproc/expat2 && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	expat>0:textproc/expat2
LIB_DEPENDS=	libexpat.so:textproc/expat2

Dependencies

As this port's Makefile names them.

Test 1

Configuration

Options name: textproc_expat

OptionDefaultDescription
DOCSoff
STATICoff
TESToff
USES
cpe libtool pathfix python:test tar:xz
Service scripts
none

Files

Manual pages 1
  • xmlwf(1)
pkg-plist 16
  • bin/xmlwf
  • include/expat.h
  • include/expat_config.h
  • include/expat_external.h
  • lib/cmake/expat-%%EXPAT_VERSION%%/expat-config-version.cmake
  • lib/cmake/expat-%%EXPAT_VERSION%%/expat-config.cmake
  • lib/cmake/expat-%%EXPAT_VERSION%%/expat-noconfig.cmake
  • lib/cmake/expat-%%EXPAT_VERSION%%/expat.cmake
  • lib/libexpat.a
  • lib/libexpat.so
  • lib/libexpat.so.1
  • lib/libexpat.so.1.13.0
  • libdata/pkgconfig/expat.pc
  • share/man/man1/xmlwf.1.gz
  • share/doc/expat/AUTHORS
  • share/doc/expat/changelog
distinfo 1
FileSizeSHA256
expat-2.9.0.tar.xz5340521e6371862cc31999b368c3b89b49994f0677e1bab5f1b2b85ae3741f5d803051
Master sites 1
  • https://github.com/libexpat/libexpat/releases/download/R_${DISTVERSION:S|.|_|g}/

Commit history 4

DateCommitCreditsLog message
f41d5a7a2c Lucas Holt textproc/expat2: update to 2.9.0 for security fixes (#1708)
## Summary - Update Expat from 2.8.5 to 2.9.0, which fixes CVE-2026-77214 and CVE-2026-102633. - Refresh distinfo and the versioned shared library plist entry. The SONAME remains `libexpat.so.1`. ## Validation - `bmake makesum`, `bmake patch`, `bmake`, `bmake fake`, `bmake package` - `bmake OPTIONS_OVERRIDE='DOCS TEST' WRKDIRPREFIX=/tmp/expat2-testbuild test` (1/1 upstream test target passed) - `bmake check-license`, `portlint -C` (0 fatal errors; maintainer mode advisory), `git diff --check` ## Summary by Sourcery Update Expat to the 2.9.0 security release. Bug Fixes: - Update Expat to 2.9.0 to incorporate fixes for CVE-2026-77214 and CVE-2026-102633. Enhancements: - Refresh package metadata for the new Expat release while retaining the existing SONAME. …
a5e89f4e3e Lucas Holt textproc/expat2: update to 2.8.5 (#1608)
Updates `textproc/expat2` from 2.8.4 to 2.8.5, to match the base system. ## Why 2.8.5 is a security release. It fixes **CVE-2026-93990** (CVSS 9.8): Expat didn't reject a UTF-16 high surrogate that isn't followed by a low surrogate, so malformed UTF-16 could reach the application. There are also a few bug fixes (an OOM-related memory leak, xmlwf output-close error handling, and alignment on CHERI). Upstream changelog: https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/Changes ## Changes - `DISTVERSION` 2.8.4 → 2.8.5, distinfo regenerated. The SHA256 matches the digest of the GitHub release asset. - pkg-plist: `lib/libexpat.so.1.12.4` → `lib/libexpat.so.1.12.5`. The libtool version goes from 13:4:12 to 13:5:12. The SONAME is still …
bd67cbad70 Lucas Holt textproc/expat2: update to 2.8.4 (#798)
Update Expat to upstream 2.8.4, which includes four security fixes. Validation: - bmake makesum - bmake patch, configure, build, fake, package - test-enabled clean build and make check - portlint -C (0 fatal errors) ## Summary by Sourcery Bug Fixes: - Update Expat to upstream version 2.8.4, incorporating its security fixes. Signed-off-by: Lucas Holt <[email protected]>
6b9a8612a4 Lucas Holt textproc/expat2: update to 2.8.3 (#740)
## Summary - update Expat from 2.8.2 to 2.8.3 - address CVE-2026-72522, an out-of-bounds read and resulting infinite loop in 16-bit character builds - update the packaged library filename to `libexpat.so.1.12.3` The ABI SONAME remains `libexpat.so.1`, so dependent port revision bumps are not required. Upstream's `COPYING` file is unchanged. ## Validation - `bmake makesum` - `bmake check-license` - `bmake clean patch build fake package test` - `WITH=TEST bmake clean test` (1 test suite passed, 0 failed) - `portlint -AC` (0 fatal errors; maintainer-mode warning only) - `readelf -d` confirmed SONAME `libexpat.so.1` ## Summary by Sourcery Update the expat2 port to the 2.8.3 release. New Features: - Ship Expat 2.8.3, including upstream fixes such as the out-of-bounds …