Received: by mail.netbsd.org (Postfix, from userid 605) id B4D8D84E6F; Sun, 16 Apr 2023 14:52:38 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id E505F84CEF for ; Sun, 16 Apr 2023 14:52:37 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id D0YAAfnmCm2F for ; Sun, 16 Apr 2023 14:52:37 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 1925584CD7 for ; Sun, 16 Apr 2023 14:52:37 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 12A2DFA85; Sun, 16 Apr 2023 14:52:37 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_168165675792240" MIME-Version: 1.0 Date: Sun, 16 Apr 2023 14:52:37 +0000 From: "Benny Siegert" Subject: CVS commit: [pkgsrc-2023Q1] pkgsrc/textproc To: pkgsrc-changes@NetBSD.org Reply-To: bsiegert@netbsd.org X-Mailer: log_accum Message-Id: <20230416145237.12A2DFA85@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_168165675792240 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: bsiegert Date: Sun Apr 16 14:52:36 UTC 2023 Modified Files: pkgsrc/textproc/libxml2 [pkgsrc-2023Q1]: Makefile Makefile.common distinfo pkgsrc/textproc/py-libxml2 [pkgsrc-2023Q1]: Makefile Log Message: Pullup ticket #6753 - requested by gutteridge textproc/libxml2: security fix textproc/py-libxml2: security fix Revisions pulled up: - textproc/libxml2/Makefile 1.169 - textproc/libxml2/Makefile.common 1.20 - textproc/libxml2/distinfo 1.144 - textproc/py-libxml2/Makefile 1.85 --- Module Name: pkgsrc Committed By: gutteridge Date: Sat Apr 15 13:06:22 UTC 2023 Modified Files: pkgsrc/textproc/libxml2: Makefile Makefile.common distinfo pkgsrc/textproc/py-libxml2: Makefile Log Message: libxml2 & py-libxml2: update to 2.10.4 v2.10.4: Apr 11 2023 ### Security - [CVE-2023-29469] Hashing of empty dict strings isn't deterministic - [CVE-2023-28484] Fix null deref in xmlSchemaFixupComplexType - schemas: Fix null-pointer-deref in xmlSchemaCheckCOSSTDerivedOK ### Regressions - SAX2: Ignore namespaces in HTML documents - io: Fix "buffer full" error with certain buffer sizes To generate a diff of this commit: cvs rdiff -u -r1.167 -r1.167.2.1 pkgsrc/textproc/libxml2/Makefile cvs rdiff -u -r1.19 -r1.19.2.1 pkgsrc/textproc/libxml2/Makefile.common cvs rdiff -u -r1.143 -r1.143.2.1 pkgsrc/textproc/libxml2/distinfo cvs rdiff -u -r1.84 -r1.84.2.1 pkgsrc/textproc/py-libxml2/Makefile Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_168165675792240 Content-Disposition: inline Content-Length: 3095 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/textproc/libxml2/Makefile diff -u pkgsrc/textproc/libxml2/Makefile:1.167 pkgsrc/textproc/libxml2/Makefile:1.167.2.1 --- pkgsrc/textproc/libxml2/Makefile:1.167 Fri Jan 27 14:49:37 2023 +++ pkgsrc/textproc/libxml2/Makefile Sun Apr 16 14:52:36 2023 @@ -1,8 +1,7 @@ -# $NetBSD: Makefile,v 1.167 2023/01/27 14:49:37 jperkin Exp $ +# $NetBSD: Makefile,v 1.167.2.1 2023/04/16 14:52:36 bsiegert Exp $ .include "../../textproc/libxml2/Makefile.common" -PKGREVISION= 2 COMMENT= XML parser library from the GNOME project LICENSE= modified-bsd Index: pkgsrc/textproc/libxml2/Makefile.common diff -u pkgsrc/textproc/libxml2/Makefile.common:1.19 pkgsrc/textproc/libxml2/Makefile.common:1.19.2.1 --- pkgsrc/textproc/libxml2/Makefile.common:1.19 Fri Jan 27 14:49:37 2023 +++ pkgsrc/textproc/libxml2/Makefile.common Sun Apr 16 14:52:36 2023 @@ -1,9 +1,9 @@ -# $NetBSD: Makefile.common,v 1.19 2023/01/27 14:49:37 jperkin Exp $ +# $NetBSD: Makefile.common,v 1.19.2.1 2023/04/16 14:52:36 bsiegert Exp $ # # used by textproc/libxml2/Makefile # used by textproc/py-libxml2/Makefile -DISTNAME= libxml2-2.10.3 +DISTNAME= libxml2-2.10.4 CATEGORIES= textproc MASTER_SITES= ${MASTER_SITE_GNOME:=sources/libxml2/${PKGVERSION_NOREV:R}/} EXTRACT_SUFX= .tar.xz Index: pkgsrc/textproc/libxml2/distinfo diff -u pkgsrc/textproc/libxml2/distinfo:1.143 pkgsrc/textproc/libxml2/distinfo:1.143.2.1 --- pkgsrc/textproc/libxml2/distinfo:1.143 Thu Jan 26 01:49:16 2023 +++ pkgsrc/textproc/libxml2/distinfo Sun Apr 16 14:52:36 2023 @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.143 2023/01/26 01:49:16 gutteridge Exp $ +$NetBSD: distinfo,v 1.143.2.1 2023/04/16 14:52:36 bsiegert Exp $ -BLAKE2s (libxml2-2.10.3.tar.xz) = e46e6337acb5ff88e6206d1d61ee8b27d66c5f716c98e830c3504a01dc178ad6 -SHA512 (libxml2-2.10.3.tar.xz) = 33bb87ae9a45c475c3de09477e5d94840d8f687f893ef7839408bc7267e57611c4f2b863ed8ec819a4b5f1ebd6a122db9f6054c73bceed427d37f3e67f62620c -Size (libxml2-2.10.3.tar.xz) = 2639908 bytes +BLAKE2s (libxml2-2.10.4.tar.xz) = f54b22ffa245226395133ab4d172192d06ee88b1a4a9f700804bb26d7af757d0 +SHA512 (libxml2-2.10.4.tar.xz) = 792c1dceb098cd353a7eca4c46d31cce6310b2553d97fd3918cf0b94d93b2480759202036511bde36c24166236bd4616f57e79959eea9afe3f60614bdfe13094 +Size (libxml2-2.10.4.tar.xz) = 2643600 bytes SHA1 (patch-configure) = 3d73d05780562dccd5f9621d9e9f15f2d62cfa87 SHA1 (patch-encoding.c) = 7fe0f67db061a2f46abe1c4b6b4d8a0402f82830 SHA1 (patch-error.c) = 77561e820e0da96acb572378c2f2a0b9b84112e1 Index: pkgsrc/textproc/py-libxml2/Makefile diff -u pkgsrc/textproc/py-libxml2/Makefile:1.84 pkgsrc/textproc/py-libxml2/Makefile:1.84.2.1 --- pkgsrc/textproc/py-libxml2/Makefile:1.84 Fri Jan 27 14:52:53 2023 +++ pkgsrc/textproc/py-libxml2/Makefile Sun Apr 16 14:52:36 2023 @@ -1,9 +1,8 @@ -# $NetBSD: Makefile,v 1.84 2023/01/27 14:52:53 jperkin Exp $ +# $NetBSD: Makefile,v 1.84.2.1 2023/04/16 14:52:36 bsiegert Exp $ .include "../../textproc/libxml2/Makefile.common" PKGNAME= ${PYPKGPREFIX}-${DISTNAME} -PKGREVISION= 2 COMMENT= Python wrapper for libxml2 LICENSE= modified-bsd --_----------=_168165675792240--