wireguard-openbsd/lib/libexpat/Changes, branch master

Update libexpat to 2.2.10. Relevant are only bug fixes #390 #395

2020-12-29T16:59:42Z

#398 #404 #405 and other changes #354 #355 #412. OK deraadt@

Update libexpat to 2.2.8. CVE-2019-15903 has been fixed earlier

2019-09-25T21:06:19Z

in our tree. Relevant is only bug fix #240. Most of the upstream diff is automated source format change. OK deraadt@

Update libexpat to 2.2.7. Relevant for OpenBSD is only the fix for

2019-06-29T00:33:59Z

CVE-2018-20843, a potential denial-of-service in libexpat due to high RAM and CPU usage. OK deraadt@

Update libexpat to 2.2.6. Relevant for OpenBSD is

2018-08-22T13:32:11Z

- Avoid doing arithmetic with NULL pointers in XML_GetBuffer - Fix 2.2.5 regression with suspend-resume while parsing a document like '' - Address compiler warnings - Fix miscellaneous typos

Update libexpat to 2.2.5. Changes for OpenBSD include a few bug

2017-11-02T13:40:57Z

fixes, no library bump needed. OK deraadt@

Update libexpat to 2.2.4. Fix copying partial UTF-8 characters.

2017-08-23T14:53:52Z

OK deraadt@

Update libexpat to 2.2.3. Only few changes affect OpenBSD.

2017-08-04T16:24:02Z

OK deraadt@

Update libexpat to 2.2.2. Fixes NULL parser dereference.

2017-07-19T20:24:07Z

no objections deraadt@

Update libexpat to version 2.2.1 which has some security fixes.

2017-06-30T11:25:29Z

- CVE-2017-9233 CVE-2016-9063 CVE-2016-5300 CVE-2016-4472 CVE-2016-0718 CVE-2015-2716 CVE-2015-1283 CVE-2012-6702 CVE-2012-0876 have been addressed. Not all of them affect OpenBSD as we had fixes before. - Upstream uses arc4random_buf(3) now. Delete all code for other entropy sources to make sure to compile the correct one. Our library already used arc4random(3) before. - The overflow fixes in rev 1.11 and 1.12 of lib/xmlparse.c have been commited upstream in a different way. Use the upstream code to make maintenance easier. - Although it should be ABI compatible, there is a new global symbol align_limit_to_full_utf8_characters. As it is in lib/internal.h, add a Symbols.map to restrict the export. Do not bump the shared library version. - Use the internal expat's siphash.h. ports build ajacoutot@; move ahead deraadt@

update libexpat to 2.1.1.

2016-05-09T19:32:01Z

ok deraadt@ (thanks to sebastian[@]pipping[.]org for information).