[Bug 291316] textproc/libxml2: Update to 2.15.1

[email protected]
Newsgroups gmane.os.freebsd.devel.gnome
Message-ID <[email protected]/bugzilla/>
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291316

--- Comment #62 from [email protected] ---
A commit in branch 2026Q1 references this bug:

URL:
https://cgit.FreeBSD.org/ports/commit/?id=87a0c21fa5687cc9020f2a94c02fef2721e8f1d9

commit 87a0c21fa5687cc9020f2a94c02fef2721e8f1d9
Author:     Charlie Li <[email protected]>
AuthorDate: 2026-01-27 02:13:49 +0000
Commit:     Charlie Li <[email protected]>
CommitDate: 2026-01-27 02:43:01 +0000

    textproc/libxml2: update to 2.15.1

    Changelog: https://gitlab.gnome.org/GNOME/libxml2/-/blob/2.15/NEWS

    Notably, all documentation generation requires a circular dependency
    on textproc/libxslt. While the API documentation, in HTML, lives
    on the upstream site [0], the man pages are now pre-rendered manually.

    Also includes an upstream commit addressing unsafe pointer usage
    in XPath, leading to security bugs in consumers like libxslt
    (CVE-2025-10911). [1]

    Mark the -python child port DEPRECATED without expiration date since
    upstream has not provided a firm one yet, particularly the release
    schedule for the next major version 2.16.

    [0] https://gnome.pages.gitlab.gnome.org/libxml2/html/index.html
    [1]
https://gitlab.gnome.org/GNOME/libxml2/-/commit/0e50b31902cdb1eb242eb361c123e9e033b2af87

    Event: Snowstorm Special January 2026
    With hat: desktop
    PR: 291316

    (cherry picked from commit fc6c145ef01c3418d7db4e7be89310d3f6225171)

 textproc/libxml2-python/Makefile           |  13 +-
 textproc/libxml2/Makefile                  |  40 +-
 textproc/libxml2/distinfo                  |   8 +-
 textproc/libxml2/files/xml2-config.1 (new) |  32 ++
 textproc/libxml2/files/xmlcatalog.1 (new)  | 355 ++++++++++++++++
 textproc/libxml2/files/xmllint.1 (new)     | 656 +++++++++++++++++++++++++++++
 textproc/libxml2/pkg-plist                 |  64 +--
 7 files changed, 1083 insertions(+), 85 deletions(-)

-- 
You are receiving this mail because:
You are on the CC list for the bug.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.