Sun Apr 16 14:52:36 2023 UTC ()

Pullup ticket #6753 - requested by gutteridge
textproc/libxml2: security fix
textproc/py-libxml2: security fix

Revisions pulled up:
- textproc/libxml2/Makefile                                     1.169
- textproc/libxml2/Makefile.common                              1.20
- textproc/libxml2/distinfo                                     1.144
- textproc/py-libxml2/Makefile                                  1.85

---
   Module Name:    pkgsrc
   Committed By:   gutteridge
   Date:           Sat Apr 15 13:06:22 UTC 2023

   Modified Files:
           pkgsrc/textproc/libxml2: Makefile Makefile.common distinfo
           pkgsrc/textproc/py-libxml2: Makefile

   Log Message:
   libxml2 & py-libxml2: update to 2.10.4

   v2.10.4: Apr 11 2023

   ### Security

   - [CVE-2023-29469] Hashing of empty dict strings isn't deterministic
   - [CVE-2023-28484] Fix null deref in xmlSchemaFixupComplexType
   - schemas: Fix null-pointer-deref in xmlSchemaCheckCOSSTDerivedOK

   ### Regressions

   - SAX2: Ignore namespaces in HTML documents
   - io: Fix "buffer full" error with certain buffer sizes


(bsiegert)

diff -r1.167 -r1.167.2.1 pkgsrc/textproc/libxml2/Makefile
diff -r1.19 -r1.19.2.1 pkgsrc/textproc/libxml2/Makefile.common
diff -r1.143 -r1.143.2.1 pkgsrc/textproc/libxml2/distinfo
diff -r1.84 -r1.84.2.1 pkgsrc/textproc/py-libxml2/Makefile

--- pkgsrc/textproc/libxml2/Makefile 2023/01/27 14:49:37 1.167
+++ pkgsrc/textproc/libxml2/Makefile 2023/04/16 14:52:36 1.167.2.1

@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.167 2023/01/27 14:49:37 jperkin Exp $
+# $NetBSD: Makefile,v 1.167.2.1 2023/04/16 14:52:36 bsiegert Exp $
 
 .include "../../textproc/libxml2/Makefile.common"
 
-PKGREVISION=	2
 COMMENT=	XML parser library from the GNOME project
 LICENSE=	modified-bsd

--- pkgsrc/textproc/libxml2/Makefile.common 2023/01/27 14:49:37 1.19
+++ pkgsrc/textproc/libxml2/Makefile.common 2023/04/16 14:52:36 1.19.2.1

@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.19 2023/01/27 14:49:37 jperkin Exp $
+# $NetBSD: Makefile.common,v 1.19.2.1 2023/04/16 14:52:36 bsiegert Exp $
 #
 # used by textproc/libxml2/Makefile
 # used by textproc/py-libxml2/Makefile
 
-DISTNAME=	libxml2-2.10.3
+DISTNAME=	libxml2-2.10.4
 CATEGORIES=	textproc
 MASTER_SITES=	${MASTER_SITE_GNOME:=sources/libxml2/${PKGVERSION_NOREV:R}/}
 EXTRACT_SUFX=	.tar.xz

--- pkgsrc/textproc/libxml2/distinfo 2023/01/26 01:49:16 1.143
+++ pkgsrc/textproc/libxml2/distinfo 2023/04/16 14:52:36 1.143.2.1

@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.143 2023/01/26 01:49:16 gutteridge Exp $
+$NetBSD: distinfo,v 1.143.2.1 2023/04/16 14:52:36 bsiegert Exp $
 
-BLAKE2s (libxml2-2.10.3.tar.xz) = e46e6337acb5ff88e6206d1d61ee8b27d66c5f716c98e830c3504a01dc178ad6
-SHA512 (libxml2-2.10.3.tar.xz) = 33bb87ae9a45c475c3de09477e5d94840d8f687f893ef7839408bc7267e57611c4f2b863ed8ec819a4b5f1ebd6a122db9f6054c73bceed427d37f3e67f62620c
-Size (libxml2-2.10.3.tar.xz) = 2639908 bytes
+BLAKE2s (libxml2-2.10.4.tar.xz) = f54b22ffa245226395133ab4d172192d06ee88b1a4a9f700804bb26d7af757d0
+SHA512 (libxml2-2.10.4.tar.xz) = 792c1dceb098cd353a7eca4c46d31cce6310b2553d97fd3918cf0b94d93b2480759202036511bde36c24166236bd4616f57e79959eea9afe3f60614bdfe13094
+Size (libxml2-2.10.4.tar.xz) = 2643600 bytes
 SHA1 (patch-configure) = 3d73d05780562dccd5f9621d9e9f15f2d62cfa87
 SHA1 (patch-encoding.c) = 7fe0f67db061a2f46abe1c4b6b4d8a0402f82830
 SHA1 (patch-error.c) = 77561e820e0da96acb572378c2f2a0b9b84112e1

--- pkgsrc/textproc/py-libxml2/Makefile 2023/01/27 14:52:53 1.84
+++ pkgsrc/textproc/py-libxml2/Makefile 2023/04/16 14:52:36 1.84.2.1

@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.84 2023/01/27 14:52:53 jperkin Exp $
+# $NetBSD: Makefile,v 1.84.2.1 2023/04/16 14:52:36 bsiegert Exp $
 
 .include "../../textproc/libxml2/Makefile.common"
 
 PKGNAME=	${PYPKGPREFIX}-${DISTNAME}
-PKGREVISION=	2
 
 COMMENT=	Python wrapper for libxml2
 LICENSE=	modified-bsd