[Bug 291316] textproc/libxml2: Update to 2.15.1

[email protected]
Newsgroups gmane.os.freebsd.devel.gnome
Message-ID <[email protected]/bugzilla/>
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291316

--- Comment #60 from [email protected] ---
A commit in branch main references this bug:

URL:
https://cgit.FreeBSD.org/ports/commit/?id=fc6c145ef01c3418d7db4e7be89310d3f6225171

commit fc6c145ef01c3418d7db4e7be89310d3f6225171
Author:     Charlie Li <[email protected]>
AuthorDate: 2026-01-27 02:13:49 +0000
Commit:     Charlie Li <[email protected]>
CommitDate: 2026-01-27 02:34:39 +0000

    textproc/libxml2: really update to 2.15.1

    Changelog: https://gitlab.gnome.org/GNOME/libxml2/-/blob/2.15/NEWS

    Notably, all documentation generation requires a circular dependency
    on textproc/libxslt. While the API documentation, in HTML, lives
    on the upstream site [0], the man pages are now pre-rendered manually.

    Also includes an upstream commit addressing unsafe pointer usage
    in XPath, leading to security bugs in consumers like libxslt
    (CVE-2025-10911). [1]

    Mark the -python child port DEPRECATED without expiration date since
    upstream has not provided a firm one yet, particularly the release
    schedule for the next major version 2.16.

    [0] https://gnome.pages.gitlab.gnome.org/libxml2/html/index.html
    [1]
https://gitlab.gnome.org/GNOME/libxml2/-/commit/0e50b31902cdb1eb242eb361c123e9e033b2af87

    Event: Snowstorm Special January 2026
    With hat: desktop
    PR: 291316

 textproc/libxml2-python/Makefile           |  13 +-
 textproc/libxml2/Makefile                  |  40 +-
 textproc/libxml2/distinfo                  |   8 +-
 textproc/libxml2/files/xml2-config.1 (new) |  32 ++
 textproc/libxml2/files/xmlcatalog.1 (new)  | 355 ++++++++++++++++
 textproc/libxml2/files/xmllint.1 (new)     | 656 +++++++++++++++++++++++++++++
 textproc/libxml2/pkg-plist                 |  64 +--
 7 files changed, 1083 insertions(+), 85 deletions(-)

-- 
You are receiving this mail because:
You are on the CC list for the bug.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.