CVS commit: [pkgsrc-2022Q1] pkgsrc/textproc/libxml2

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Fri May 20 12:56:56 UTC 2022

Modified Files:
        pkgsrc/textproc/libxml2 [pkgsrc-2022Q1]: Makefile.common distinfo

Log Message:
Pullup ticket #6633 - requested by gutteridge
textproc/libxml2: security fix

Revisions pulled up:
- textproc/libxml2/Makefile                                     1.164
- textproc/libxml2/Makefile.common                              1.16
- textproc/libxml2/distinfo                                     1.141
- textproc/py-libxml2/Makefile                                  1.81

---
   Module Name:    pkgsrc
   Committed By:   gutteridge
   Date:           Fri May  6 00:55:55 UTC 2022

   Modified Files:
           pkgsrc/textproc/libxml2: Makefile Makefile.common distinfo
           pkgsrc/textproc/py-libxml2: Makefile

   Log Message:
   libxml2: update to 2.9.14, includes security fixes

   v2.9.14: May 02 2022:
      - Security:
     [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
     Fix potential double-free in xmlXPtrStringRangeFunction
     Fix memory leak in xmlFindCharEncodingHandler
     Normalize XPath strings in-place
     Prevent integer-overflow in htmlSkipBlankChars() and xmlSkipBlankChars()
       (David Kilzer)
     Fix leak of xmlElementContent (David Kilzer)

      - Bug fixes:
     Fix parsing of subtracted regex character classes
     Fix recursion check in xinclude.c
     Reset last error in xmlCleanupGlobals
     Fix certain combinations of regex range quantifiers
     Fix range quantifier on subregex

      - Improvements:
     Fix recovery from invalid HTML start tags

      - Build system, portability:
     Define LFS macros before including system headers
     Initialize XPath floating-point globals
     configure: check for icu DEFS (James Hilliard)
     configure.ac: produce tar.xz only (GNOME policy) (David Seifert)
     CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
     Fix build with older Python versions
     Fix --without-valid build


To generate a diff of this commit:
cvs rdiff -u -r1.15 -r1.15.2.1 pkgsrc/textproc/libxml2/Makefile.common
cvs rdiff -u -r1.140 -r1.140.2.1 pkgsrc/textproc/libxml2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/textproc/libxml2/Makefile.common
diff -u pkgsrc/textproc/libxml2/Makefile.common:1.15 pkgsrc/textproc/libxml2/Makefile.common:1.15.2.1
--- pkgsrc/textproc/libxml2/Makefile.common:1.15        Sat Mar 12 07:33:22 2022
+++ pkgsrc/textproc/libxml2/Makefile.common     Fri May 20 12:56:56 2022
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.15 2022/03/12 07:33:22 kim Exp $
+# $NetBSD: Makefile.common,v 1.15.2.1 2022/05/20 12:56:56 bsiegert Exp $
 #
 # used by textproc/libxml2/Makefile
 # used by textproc/py-libxml2/Makefile
 
-DISTNAME=      libxml2-2.9.13
+DISTNAME=      libxml2-2.9.14
 CATEGORIES=    textproc
 MASTER_SITES=  ${MASTER_SITE_GNOME:=sources/libxml2/${PKGVERSION_NOREV:R}/}
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/textproc/libxml2/distinfo
diff -u pkgsrc/textproc/libxml2/distinfo:1.140 pkgsrc/textproc/libxml2/distinfo:1.140.2.1
--- pkgsrc/textproc/libxml2/distinfo:1.140      Sat Mar 12 07:33:22 2022
+++ pkgsrc/textproc/libxml2/distinfo    Fri May 20 12:56:56 2022
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.140 2022/03/12 07:33:22 kim Exp $
+$NetBSD: distinfo,v 1.140.2.1 2022/05/20 12:56:56 bsiegert Exp $
 
-BLAKE2s (libxml2-2.9.13.tar.xz) = 9732a7ca21df7ae1ee823ea08f182c0f1e2e52c5019fc0900eff925d2101d761
-SHA512 (libxml2-2.9.13.tar.xz) = fc51980cb9222bd3b5242f73d28b55fa15a80e68e52e1c45274f1eda11500ed385853209edb3b2a1f06b9de0be304c159a9bd898c7d84b0899eacb00723d98b5
-Size (libxml2-2.9.13.tar.xz) = 3243336 bytes
+BLAKE2s (libxml2-2.9.14.tar.xz) = 0d3a2a64a9f0253171fd0adfa1eb3c28997f92c306aa3668e787e0b71b4ca654
+SHA512 (libxml2-2.9.14.tar.xz) = d08e6cafb289c499fdc5b3a12181e032a34f7a249bc66758859f964d3e71e19fd69be79921e1a9d8ab1e692d15b13f5fae95eeb10c3236974d89e218f5107606
+Size (libxml2-2.9.14.tar.xz) = 3129968 bytes
 SHA1 (patch-Makefile.in) = 4e3a3c20ce388de040b865dab73b0190ed6bdf0a
 SHA1 (patch-catalog.c) = 34afe787f6012b460a85be993048e133907a1621
 SHA1 (patch-configure) = 3b4cbb36602c11fe73ba1a6e327fd4810b835380