CVS commit: [pkgsrc-2023Q1] pkgsrc/textproc

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Sun Apr 16 14:52:36 UTC 2023

Modified Files:
        pkgsrc/textproc/libxml2 [pkgsrc-2023Q1]: Makefile Makefile.common
            distinfo
        pkgsrc/textproc/py-libxml2 [pkgsrc-2023Q1]: Makefile

Log Message:
Pullup ticket #6753 - requested by gutteridge
textproc/libxml2: security fix
textproc/py-libxml2: security fix

Revisions pulled up:
- textproc/libxml2/Makefile                                     1.169
- textproc/libxml2/Makefile.common                              1.20
- textproc/libxml2/distinfo                                     1.144
- textproc/py-libxml2/Makefile                                  1.85

---
   Module Name:    pkgsrc
   Committed By:   gutteridge
   Date:           Sat Apr 15 13:06:22 UTC 2023

   Modified Files:
           pkgsrc/textproc/libxml2: Makefile Makefile.common distinfo
           pkgsrc/textproc/py-libxml2: Makefile

   Log Message:
   libxml2 & py-libxml2: update to 2.10.4

   v2.10.4: Apr 11 2023

   ### Security

   - [CVE-2023-29469] Hashing of empty dict strings isn't deterministic
   - [CVE-2023-28484] Fix null deref in xmlSchemaFixupComplexType
   - schemas: Fix null-pointer-deref in xmlSchemaCheckCOSSTDerivedOK

   ### Regressions

   - SAX2: Ignore namespaces in HTML documents
   - io: Fix "buffer full" error with certain buffer sizes


To generate a diff of this commit:
cvs rdiff -u -r1.167 -r1.167.2.1 pkgsrc/textproc/libxml2/Makefile
cvs rdiff -u -r1.19 -r1.19.2.1 pkgsrc/textproc/libxml2/Makefile.common
cvs rdiff -u -r1.143 -r1.143.2.1 pkgsrc/textproc/libxml2/distinfo
cvs rdiff -u -r1.84 -r1.84.2.1 pkgsrc/textproc/py-libxml2/Makefile

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/textproc/libxml2/Makefile
diff -u pkgsrc/textproc/libxml2/Makefile:1.167 pkgsrc/textproc/libxml2/Makefile:1.167.2.1
--- pkgsrc/textproc/libxml2/Makefile:1.167      Fri Jan 27 14:49:37 2023
+++ pkgsrc/textproc/libxml2/Makefile    Sun Apr 16 14:52:36 2023
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.167 2023/01/27 14:49:37 jperkin Exp $
+# $NetBSD: Makefile,v 1.167.2.1 2023/04/16 14:52:36 bsiegert Exp $
 
 .include "../../textproc/libxml2/Makefile.common"
 
-PKGREVISION=   2
 COMMENT=       XML parser library from the GNOME project
 LICENSE=       modified-bsd
 

Index: pkgsrc/textproc/libxml2/Makefile.common
diff -u pkgsrc/textproc/libxml2/Makefile.common:1.19 pkgsrc/textproc/libxml2/Makefile.common:1.19.2.1
--- pkgsrc/textproc/libxml2/Makefile.common:1.19        Fri Jan 27 14:49:37 2023
+++ pkgsrc/textproc/libxml2/Makefile.common     Sun Apr 16 14:52:36 2023
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.19 2023/01/27 14:49:37 jperkin Exp $
+# $NetBSD: Makefile.common,v 1.19.2.1 2023/04/16 14:52:36 bsiegert Exp $
 #
 # used by textproc/libxml2/Makefile
 # used by textproc/py-libxml2/Makefile
 
-DISTNAME=      libxml2-2.10.3
+DISTNAME=      libxml2-2.10.4
 CATEGORIES=    textproc
 MASTER_SITES=  ${MASTER_SITE_GNOME:=sources/libxml2/${PKGVERSION_NOREV:R}/}
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/textproc/libxml2/distinfo
diff -u pkgsrc/textproc/libxml2/distinfo:1.143 pkgsrc/textproc/libxml2/distinfo:1.143.2.1
--- pkgsrc/textproc/libxml2/distinfo:1.143      Thu Jan 26 01:49:16 2023
+++ pkgsrc/textproc/libxml2/distinfo    Sun Apr 16 14:52:36 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.143 2023/01/26 01:49:16 gutteridge Exp $
+$NetBSD: distinfo,v 1.143.2.1 2023/04/16 14:52:36 bsiegert Exp $
 
-BLAKE2s (libxml2-2.10.3.tar.xz) = e46e6337acb5ff88e6206d1d61ee8b27d66c5f716c98e830c3504a01dc178ad6
-SHA512 (libxml2-2.10.3.tar.xz) = 33bb87ae9a45c475c3de09477e5d94840d8f687f893ef7839408bc7267e57611c4f2b863ed8ec819a4b5f1ebd6a122db9f6054c73bceed427d37f3e67f62620c
-Size (libxml2-2.10.3.tar.xz) = 2639908 bytes
+BLAKE2s (libxml2-2.10.4.tar.xz) = f54b22ffa245226395133ab4d172192d06ee88b1a4a9f700804bb26d7af757d0
+SHA512 (libxml2-2.10.4.tar.xz) = 792c1dceb098cd353a7eca4c46d31cce6310b2553d97fd3918cf0b94d93b2480759202036511bde36c24166236bd4616f57e79959eea9afe3f60614bdfe13094
+Size (libxml2-2.10.4.tar.xz) = 2643600 bytes
 SHA1 (patch-configure) = 3d73d05780562dccd5f9621d9e9f15f2d62cfa87
 SHA1 (patch-encoding.c) = 7fe0f67db061a2f46abe1c4b6b4d8a0402f82830
 SHA1 (patch-error.c) = 77561e820e0da96acb572378c2f2a0b9b84112e1

Index: pkgsrc/textproc/py-libxml2/Makefile
diff -u pkgsrc/textproc/py-libxml2/Makefile:1.84 pkgsrc/textproc/py-libxml2/Makefile:1.84.2.1
--- pkgsrc/textproc/py-libxml2/Makefile:1.84    Fri Jan 27 14:52:53 2023
+++ pkgsrc/textproc/py-libxml2/Makefile Sun Apr 16 14:52:36 2023
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.84 2023/01/27 14:52:53 jperkin Exp $
+# $NetBSD: Makefile,v 1.84.2.1 2023/04/16 14:52:36 bsiegert Exp $
 
 .include "../../textproc/libxml2/Makefile.common"
 
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
-PKGREVISION=   2
 
 COMMENT=       Python wrapper for libxml2
 LICENSE=       modified-bsd