CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

textproc/libxml22.15.4

XML parser library for GNOME

Maintainer
desktop@FreeBSD.org
Packages
libxml2 2.15.4
Upstream
up to date
CPE
xmlsoft:libxml2 from the port
WWW
http://xmlsoft.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (21)

VuXML entries whose affected range this version has left.

Commits (287)

Gleb Popov (arrowd) · 2.15.4
textproc/libxml2: Update to 2.15.4

Reported by:	portscout!
951fa95724
Charlie Li (vishwin) · 2.15.3
textproc/libxml2: update to 2.15.3

Changelog: https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.15.3/NEWS

Use pre-generated man pages added starting 2.15.2

Reported by: diizzy
PR: 294696
433bef0946
Gleb Popov (arrowd) · 2.15.2_1
textproc/libxml2: Plug a memory leak with a patch from upstream

PR:		294260
Reported by:	diizzy
bef6f87fa1
Charlie Li (vishwin) · 2.15.2
textproc/libxml2: update to 2.15.2

Changelog: https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.15.2/NEWS
0734d7476a
Matthias Andree (mandree) · 2.15.1_1
textproc/libxml2: bump PORTREVISION to force rebuild

FreeBSD-ports-latest - for FreeBSD 15 - currently carries packages
that have the libxml2-core package as a dependency (and the
libxml2-core).

Bump PORTREVISION to force the package builder to resynch onto ports
where there is no libxml2-core package, to reduce confusion.

(2026Q1 is unaffected, it did not have this change.)
06690d6429
Charlie Li (vishwin) · 2.15.1
textproc/libxml2: really update to 2.15.1

Changelog: https://gitlab.gnome.org/GNOME/libxml2/-/blob/2.15/NEWS

Notably, all documentation generation requires a circular dependency
on textproc/libxslt. While the API documentation, in HTML, lives
on the upstream site [0], the man pages are now pre-rendered manually.

Also includes an upstream commit addressing unsafe pointer usage
in XPath, leading to security bugs in consumers like libxslt
(CVE-2025-10911). [1]

Mark the -python child port DEPRECATED without expiration date since
upstream has not provided a firm one yet, particularly the release
schedule for the next major version 2.16.

[0] https://gnome.pages.gitlab.gnome.org/libxml2/html/index.html
[1] https://gitlab.gnome.org/GNOME/libxml2/-/commit/0e50b31902cdb1eb242eb361c123e9e033b2af87

Event: Snowstorm Special January 2026
With hat: desktop
PR: 291316
fc6c145ef0
Charlie Li (vishwin) · 2.14.6
Revert "textproc/libxml2*: update to 2.15.1, split -core"

The design of this update was repeatedly rejected in the linked PR
with a prescribed different design. This commit is therefore
unauthorised.

This reverts commit 099bd713e09ebdd02d73fde770c50706f980404f.

With hat: desktop (textproc/libxml2), gnome (USES=gnome)
PR: 291316
5137742117
Matthias Andree (mandree)
textproc/libxml2*: update to 2.15.1, split -core

libxml2 now requires xsltproc from libxslt to build,
yet libxslt depends on libxml2,
so we need to break a dependency cycle.
documentation needed to be split out to a separate port.

libxml2 has therefore been split into two ports,
* libxml2 builds the documentation (unless disabled),
* library and executables in libxml2-core.

Pull in one contributor patch suggested by the former libxml2 maintainer
to address one downstream security issue in recent libxslt versions.

This should address arrowd@'s hint that installing libxml2 should
provide a full-featured package.

While here, deprecate libxml2-python according to upstream plans, we
have very few users in the ports tree, and expire end of 2026Q1.

PR:		291316
099bd713e0
Sergey A. Osokin (osa) · 2.14.6
textproc/libxml2: update from 2.14.5 to 2.14.6

PR:	290022
1111c97475
Sergey A. Osokin (osa) · 2.14.5
textproc/libxml2: security update from 2.14.4 to 2.14.5

Approved by:	arrowd (desktop, maintainer)
PR:		288242
411d77c093
Zsolt Udvari (uzsolt) · 2.14.4_1
textproc/libxml2: Fix cmake file

The port's cmake file is wrong because there is an unclosed
if-statement.
Can check with 'cmake -P test-libxml2.cmake' where the content of
test-libxml2.cmake is:
include("/usr/local/lib/cmake/libxml2/libxml2-config.cmake")

The test's result is:
CMake Error at /usr/local/lib/cmake/libxml2/libxml2-config.cmake:53 (if):
  Flow control statements are not properly nested.
Call Stack (most recent call first):
  test-libxml2.cmake:1 (include)

Approved by:	portmgr (blanket, trivial runtime fix)
e02b2ca451
Charlie Li (vishwin) · 2.14.4
textproc/libxml2: update to 2.14.4

Changelog: https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.14.4/NEWS

textproc/py-libxml2 child port is moved to textproc/libxml2-python
to match the Python package name upstream specified; it now USES=python
to build after do-configure. Consumers adjusted to match.

Includes two bug-fix commits.

PR: 279705
571565734d
Charlie Li (vishwin) · 2.11.9_1
textproc/libxml2: backport upstream commits fixing CVEs

[CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
[CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
[CVE-2025-32414] python: Read at most len/4 characters.

PR: 287391
fb3e1d5f3d
Charlie Li (vishwin) · 2.11.9
Revert "textproc/libxml2: Update to 2.14.4"

Commit goes way beyond strictly security purposes and is not approved
by desktop@.

PR: 279705

This reverts commit a18dfb61a2c96a01f9536d70ad0f69390981833d.
9010c59d1c
Daniel Engberg (diizzy) · 2.14.4
textproc/libxml2: Update to 2.14.4

Fixes multiple CVEs:
CVE-2025-32415
CVE-2025-32414
CVE-2025-27113
CVE-2025-24928
CVE-2024-56171

Changelog: https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.4

Backport upstream commits:
19de8b47b1fe4b87b06bc6b89f5ee9697870a0ad
5700d989cc18889e1601c651ad69a41af8b32073
d3e33dc214276498e73b61188be02b2863c9670a
cf52139b4170be13b51b62da11c208dc66e6eff0
356542324fa439de544b5e419b91ae68d42c306c

References:
https://gitlab.gnome.org/GNOME/libxml2/-/commit/19de8b47b1fe4b87b06bc6b89f5ee9697870a0ad
https://gitlab.gnome.org/GNOME/libxml2/-/commit/5700d989cc18889e1601c651ad69a41af8b32073
https://gitlab.gnome.org/GNOME/libxml2/-/commit/d3e33dc214276498e73b61188be02b2863c9670a
https://gitlab.gnome.org/GNOME/libxml2/-/commit/cf52139b4170be13b51b62da11c208dc66e6eff0
https://gitlab.gnome.org/GNOME/libxml2/-/commit/356542324fa439de544b5e419b91ae68d42c306c

PR:		279705, 287391
Approved by:	ports-sec (tz) via PR 287391
Exp-runs by:	antoine (previous iterations)
a18dfb61a2
Baptiste Daroussin (bapt) · 2.11.9
Mk/bsd.sites.mk: Simplify MASTER_SITES= GNOME

Since GNOME changes their numbering, in some Makefile MASTER_SITES= GNOME is
more complex. This patch simplify for users.

Differential Revision:		https://reviews.freebsd.org/D43183
a0ce779c88
Don Lewis (truckman) · 2.11.9
textproc/py-pylibxml2: rm patch that scans garbage

Remove a local patch that scans stack garbage for a pattern and then uses
the pointer after the array has been filled with actual data.  This can
cause random segfaults.

The patch is under textproc/libxml2, but the patched file is only used by
textproc/py-pylibxml2.

The UTF-8 issue this was intended to fix was fixed upstream in a more
comprehensive way in 2.11.0 with this commit:
https://gitlab.gnome.org/GNOME/libxml2/-/commit/76c6da420923f2721a2e16adfcef8707a2454a1b

PR:		286439 279034
Approved by:	desktop (makc)
Tested by:	vvd
MFH:		2025Q2
d5b2d60fc7
Daniel Engberg (diizzy) · 2.11.9
textproc/libxml2: Update to 2.11.9

Fixes CVE-2024-40896

Changelog: https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.9

PR:		281350
Approved by:	desktop (fluffy)
Exp-run by:	antoine
9441ca687e
Daniel Engberg (diizzy) · 2.11.8
textproc/libxml2: Update to 2.11.8

Fixes CVE-2024-34459

Reference:
https://www.cve.org/CVERecord?id=CVE-2024-34459

Changelog:
https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.8

PR:		279043
Approved by:	desktop (tcberner)
Sponsored by:	Blinkinblox
Exp-run by:	antoine
d3ef7b30bd
Jason E. Hale (jhale) · 2.11.7
py-libxml2: Byte compile

This eliminates annoying fs-violation errors, notably from
textproc/itstool and textproc/gtk-doc where the byte code is generated
at build time instead of already having been generated by py-libxml2.

It is still peculiar to me that these files are dumped directly into
PYTHON_SITELIBDIR and don't have a subdirectory of their own.
Worth investigating, but hierachical changes are obviously more
intrusive and beyond this scope.
bb5ef640ea
Daniel Engberg (diizzy) · 2.11.7
textproc/libxml2: Update to 2.11.7

Fixes CVE-2024-25062

Reference:
https://www.cve.org/CVERecord?id=CVE-2024-25062

Changelog: https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.7

PR:		276900
Approved by:	desktop (fluffy)
Sponsored by:	Blinkinblox
Exp-run by:	antoine
195a96e9cc
Daniel Engberg (diizzy) · 2.11.6
textproc/libxml2: Update to 2.11.6

Changelog: https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.11.6/NEWS

PR:		273210
Reviewed by:	fluffy
Approved by:	desktop (arrowd)
Exp-run by:	antoine
25e6f68a66
Jan Beich (jbeich) · 2.10.4_2
devel/icu: update to 74.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-74-1
Reported by:	GitHub (watch releases)
PR:		274317
Exp-run by:	antoine (incomplete)
Approved by:	fluffy
e55b80195e
Dimitry Andric (dim) · 2.10.4_1
textproc/libxml2: fix build with lld 17

Many symbols in the linker version script libxml2.syms are only defined
when --with-xptr-locs is enabled at configure time. Since version
scripts do not support conditionals, suppress errors with lld >= 17 due
to these undefined symbols.

PR:		273789
MFH:		2023Q3
Approved by:	blanket (for desktop and kde)
b259f84ad7
Dima Panov (fluffy) · 2.10.4
textproc/libxml2: restore accidentally deleted PORTREVISION?= line
6e94e52ae7
Dima Panov (fluffy) · 2.10.4
textproc/libxml2: update to 2.10.14 security release (+)

- [CVE-2023-29469] Hashing of empty dict strings isn't deterministic
- [CVE-2023-28484] Fix null deref in xmlSchemaFixupComplexType
- schemas: Fix null-pointer-deref in xmlSchemaCheckCOSSTDerivedOK

- SAX2: Ignore namespaces in HTML documents
- io: Fix "buffer full" error with certain buffer sizes

PR:		270906
Security:	0bd7f07b-dc22-11ed-bf28-589cfc0f81b0

Sponsored by:	Serenity Cybersecurity, LLC
acd6567eec
Jan Beich (jbeich) · 2.10.3_2
devel/icu: update to 73.1

- Temporarily switch to GitHub auto archive (release artifacts are N/A atm)

Changes:	https://github.com/unicode-org/icu/releases/tag/release-73-1
Reported by:	GitHub (watch releases)
PR:		270422
Exp-run by:	antoine
f1f1a8be88
Jan Beich (jbeich) · 2.10.3_1
devel/icu: update to 72.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-72-1
Reported by:	GitHub (watch releases)
PR:		266582
Exp-run by:	antoine
dfe25d73e7
Dima Panov (fluffy) · 2.10.3
textproc/libxml2: update to 2.10.3 security release (+)

* [CVE-2022-40304] Fix dict corruption caused by entity reference cycles
* [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
* Fix overflow check in SAX2.c

Changelog:	https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.3
MFH:		2022Q4
def7c5c7f4
Stefan Eßer (se) · 2.10.2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.10.2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dima Panov (fluffy) · 2.10.2
textproc/libxml2: update to 2.10.2 maintenance release (+)

Changelog:	https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.2
dbbe3ed0b7
Dima Panov (fluffy) · 2.10.1
textproc/libxml2: update to 2.10.1 release (+)

Changelog:	https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.0 \
		https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.1
8697e0292a
Dima Panov (fluffy) · 2.9.14
textproc/libxml2: update to 2.9.14 maintenance release (+)

Changelog:	https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.9.14
b4f7a63546
Tobias C. Berner (tcberner) · 2.9.13_2
textproc: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  "Choe, Cheng-Dae" whitekid
  *  -
  *  <glewis@FreeBSD.org>
  *  <koshy@india.hp.com>
  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Aaron Dalton <aaron@daltons.ca>
  *  Aaron Straup Cope
  *  Aaron Straup Cope <ascope@cpan.org>
  *  Ache
  *  Adam Herzog <adam@herzogdesigns.com>
  *  Adam Weinberger <adamw@FreeBSD.org>
  *  Ade Lovett <ade@FreeBSD.org>
  *  Akinori MUSHA aka knu <knu@FreeBSD.org>
  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Alan Eldridge <alane@FreeBSD.org>
  *  Alex Dupre <ale@FreeBSD.org>
  *  Alex Kapranoff <kappa@FreeBSD.org.ua>
  *  Alexander Logvinov <ports@logvinov.com>
  *  Alexander Nedotsukov <bland@FreeBSD.org>
  *  Alexander Zhuravlev <zaa@zaa.pp.ru>
  *  Alexander@Leidinger.net
  *  Alexandre Biancalana <ale@biancalanas.net>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Alexis Praga <alexis.praga@free.fr>
  *  Andreas Heil <ah@linux-hq.de>
  *  Andrei V. Shetuhin <reki@reki.ru>
  *  Andrej Zverev <andrey.zverev@electro-com.ru>
  *  Andrew <andrew@ugh.net.au>
  *  Andrew Humphrey <ahumphrey@realestate.com.au>
  *  Andrew Lewis <freeghb@gmail.com>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrew Romero <melanhit@gmail.com>
  *  Andrey Kostenko <andrey@kostenko.name>
  *  Andrey Zakhvatov
  *  Andrey Zakhvatov <andy@FreeBSD.org>
  *  Anes Mukhametov <anes@anes.su>
  *  Antoine Brodin <antoine@FreeBSD.org>
  *  Anton Berezin <tobez@FreeBSD.org>
  *  Anton Berezin <tobez@tobez.org>
  *  Anton Yudin <toha@toha.org.ua>
  *  Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>)
  *  Ashish SHUKLA <wahjava@gmail.com>
  *  Autrijus Tang <autrijus@autrijus.org>
  *  Babak Farrokhi <farrokhi@FreeBSD.org>
  *  Ben Haga <tuxsuximus@hotmail.com>
  *  Ben Woods <woodsb02@FreeBSD.org>
  *  Benno Rice <benno@jeamland.net>
  *  Bill "I hate Perl" Fumerola
  *  Bill Brinzer <bill.brinzer@gmail.com>
  *  Bill Fumerola <billf@chc-chimes.com>
  *  Bill Swingle <unfurl@FreeBSD.org>
  *  Bob Eager <rde@ml1.org.uk>
  *  Boris Samorodov <bsam@FreeBSD.org>
  *  Brian Candler <B.Candler@pobox.com>
  *  Brion Moss <brion@queeg.com>
  *  Carlos J Puga Medina <cpm@fbsd.es>
  *  Carlos J. Puga Medina <cpm@FreeBSD.org>
  *  Cezary Morga <cm@therek.net>
  *  Cheng-Lung Sung <clsung@FreeBSD.org>
  *  Cheng-Lung Sung <clsung@dragon2.net>
  *  Chris D. Faulhaber <jedgar@fxp.org>
  *  Chris Hutchinson <portmaster@bsdforge.com>
  *  Christoper Key <cjk32@cam.ac.uk>
  *  Clemens Zauner <czauner+ports@onlineloop.com>
  *  Cyrille Lefevre <clefevre@citeweb.net>
  *  Dan Langille <dvl@FreeBSD.org>
  *  Daniel Roethlisberger <daniel@roe.ch>
  *  Danilo G. Baio <dbaio@FreeBSD.org>
  *  David Bremner <bremner@unb.ca>
  *  David O'Brien (obrien@FreeBSD.org)
  *  David Sze <dsze@alumni.uwaterloo.ca>
  *  Denis Pokataev <catone@cpan.org>
  *  Dennis Herrmann <dhn@FreeBSD.org>
  *  Dereckson <dereckson@gmail.com>
  *  Dikshie
  *  Dikshie <dikshie@sfc.wide.ad.jp>
  *  Dima Sivachenko <demon@gpad.ac.ru>
  *  Dirk Froemberg <dirk@FreeBSD.org>
  *  Ditesh Shashikant Gathani <ditesh@gathani.org>
  *  Dmitry Morozovsky <marck@FreeBSD.org>
  *  Dmitry Sivachenko <demon@FreeBSD.org>
  *  Dom Mitchell <dom@happygiraffe.net>
  *  Don Croyle <croyle@gelemna.org>
  *  Donald Burr <dburr@FreeBSD.org>
  *  Douglas Thrift <douglas@douglasthrift.net>
  *  Dru Lavigne <dru@FreeBSD.org>
  *  Dryice Liu <dryice@dryice.name>
  *  Ed Schouten <ed@FreeBSD.org>
  *  Edward Tomasz Napierala <trasz@FreeBSD.org>
  *  Elvis Chiang <elvis@sslab.cs.ccu.edu.tw>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@critical.ch>
  *  Eric A. Griff <eric@talesfromthereal.com>
  *  Eric Freeman <freebsdports@chillibear.com>
  *  Erik Greenwald <erik@smluc.org>
  *  Ernst de Haan <znerd@FreeBSD.org>
  *  Erwin Lansing <erwin@FreeBSD.org>
  *  Espen Tagestad <espen@tagestad.no>
  *  Eugene Furs <justas@mbank.lv>
  *  Felippe de Meirelles Motta <lippemail@gmail.com>
  *  Felix Palmen <felix@palmen-it.de>
  *  Fernan Aguero <fernan@iib.unsam.edu.ar>
  *  Filip Parag <filip@parag.rs>
  *  Foxfair Hu <foxfair@FreeBSD.org>
  *  Freddie Cash <fcash@sd73.bc.ca>
  *  Frederic Culot <culot@FreeBSD.org>
  *  Frederic Dubuy <fdubuy@free.fr>
  *  Gabor Kovesdan <gabor@FreeBSD.org>
  *  Garrett Rooney <rooneg@electricjellyfish.net>
  *  Gasol Wu <gasol.wu@gmail.com>
  *  Gea-Suan Lin <gslin@gslin.org>
  *  Geoffroy Desvernay <dgeo@centrale-marseille.fr>
  *  George Hartzell <hartzell@fruitfly.org>
  *  Gerald Pfeifer <gerald@pfeifer.com>
  *  Gerrit Beine <gerrit.beine@gmx.de>
  *  Glenn Trewitt <glenn@trewitt.org>
  *  Goran Tal <goran.tal@gmail.com>
  *  Graham Todd <gtodd@bellanet.org>
  *  Greg Larkin <glarkin@FreeBSD.org>
  *  Greg Lewis <glewis@FreeBSD.org>
  *  Grzegorz Blach <gblach@FreeBSD.org>
  *  Guangyuan Yang <ygy@FreeBSD.org>
  *  Hansjoerg Pehofer <hansjoerg.pehofer@uibk.ac.at>
  *  Henrik Motakef <henrik.motakef@web.de>
  *  Henry Hu <henry.hu.sh@gmail.com>
  *  Herve Quiroz <herve.quiroz@esil.univ-mrs.fr>
  *  Herve Quiroz <hq@FreeBSD.org>
  *  Hiroki Sato <hrs@FreeBSD.org>
  *  Horia Racoviceanu <horia@racoviceanu.com>
  *  Hye-Shik Chang <perky@fallin.lv>
  *  Ian Vaudrey <i.vaudrey@bigfoot.com>
  *  Ilya A. Arkhipov <rum1cro@yandex.ru>
  *  Jaap Boender <jaapb@kerguelen.org>
  *  James Earl
  *  James Flemer <jflemer@alum.rpi.edu>
  *  James Raftery <james@now.ie>
  *  Jason Burgess <dev@fenux.net>
  *  Jason Helfman <jgh@FreeBSD.org>
  *  Jean-Baptiste Quenot <jb.quenot@caraldi.com>
  *  Jean-Yves Lefort <jylefort@brutele.be>
  *  Jeff Putsch <jdputsch@comcast.net>
  *  Jeremy Shaffner <jeremy@external.org>
  *  Jie Gao <gaoj@cpsc.ucalgary.ca>
  *  Jim Mock <jim@FreeBSD.org>
  *  Jin-Shan Tseng <tjs@cdpa.nsysu.edu.tw>
  *  Joe Marcus Clarke <marcus@FreeBSD.org>
  *  Johann Visagie <johann@egenetics.com>
  *  Johann Visagie <wjv@FreeBSD.org>
  *  Johannes Jost Meixner <xmj@FreeBSD.org>
  *  Johannes Meixner <johannes@perceivon.net>
  *  John MacFarlane <jgm@berkeley.edu>
  *  John Marino <marino@FreeBSD.org>
  *  Jonathan Chen <jonc@chen.org.nz>
  *  Jos Backus <josb@cncdsl.com>
  *  Joseph Koshy <jkoshy@FreeBSD.org>
  *  Josh Gilliam <josh@quick.net>
  *  Jov <amutu@amutu.com>
  *  Jui-Nan Lin <jnlin@csie.nctu.edu.tw>
  *  Julien Laffaye <kimelto@gmail.com>
  *  Jun Kuriyama <kuriyama@opt.phys.waseda.ac.jp>
  *  Jyun-Yan You <jyyou@cs.nctu.edu.tw>
  *  KANOU Hiroki <kanou@khdd.net>
  *  KIMURA Yasuhiro <yasu@utahime.org>
  *  KIRIYAMA Kazuhiko <kiri@FreeBSD.org>
  *  Ka Ho Ng <khng300@gmail.com>
  *  Kay Lehmann <kay_lehmann@web.de>
  *  Kevin Lo <kevlo@FreeBSD.org>
  *  Kimura Fuyuki <fuyuki@hadaly.org>
  *  Kimura Fuyuki <fuyuki@mj.0038.net>
  *  Kimura Fuyuki <fuyuki@nigredo.org>
  *  Konstantin Menshikov <kostjnspb@yandex.ru>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Kouichi ABE (WALL) <kouichi@mysticwall.com>
  *  Kris Kennaway <kris@FreeBSD.org>
  *  Kris Moore <kmoore@FreeBSD.org>
  *  Kuan-Chung Chiu <buganini@gmail.com>
  *  Kubilay Kocak <koobs@FreeBSD.org>
  *  Kurt Lidl <kurt.lidl@cello.com>
  *  Lars Balker Rasmussen <lbr@FreeBSD.org>
  *  Lars Engels <lme@FreeBSD.org>
  *  Lars Thegler <lars@thegler.dk>
  *  Lars Thegler <lth@FreeBSD.org>
  *  Leland Wang <llwang@infor.org>
  *  Leo Kim <leo@florida.sarang.net>
  *  Lev Serebryakov <lev@serebryakov.spb.ru>
  *  Li-Wen Hsu <lwhsu@FreeBSD.org>
  *  Loic Pefferkorn <loic-freebsd@loicp.eu>
  *  MANTANI Nobutaka <nobutaka@FreeBSD.org>
  *  MIHIRA Yoshiro <sanpei@FreeBSD.org>
  *  Marcin Cieslak
  *  Marcin Jessa <yazzy@yazzy.org>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Pulford <mark@kyne.com.au>
  *  Mark R V Murray <mark@grondar.za>
  *  Martin Kammerhofer
  *  Martin Matuska <mm@FreeBSD.org>
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Marwan Burelle <marwan.burelle@lri.fr
  *  Masahiro Teramoto <markun@onohara.to>
  *  Mathieu Arnold <m@absolight.net>
  *  Matt Mills <matt_mills@btopenworld.com>
  *  Matthew Fuller <fullermd@over-yonder.net>
  *  Matthew Seaman
  *  Matthias Fechner <mfechner@FreeBSD.org>
  *  Mauricio Herrera Cuadra <mauricio@arareko.net>
  *  Max Baryshnikov <mephius@gmail.com>
  *  Max N. Boyarov <m.boyarov@gmail.com>
  *  Maxim Sobolev <sobomax@FreeBSD.org>
  *  Meno Abels <meno.abels@adviser.com>
  *  Michael Johnson <ahze@FreeBSD.org>
  *  Michael Johnson <ahze@ahze.net>
  *  Michael Moll <kvedulv@kvedulv.de>
  *  Michael Ranner <michael@ranner.eu>
  *  Michael Schout <mschout@gkg.net>
  *  Mike Bristow <mike@urgle.com>
  *  Mikhail Teterin <mi@aldan.algebra.com>
  *  Moggie <moggie@elasticmind.net>
  *  Mykola Dzham <freebsd@levsha.org.ua>
  *  Naram Qashat <cyberbotx@cyberbotx.com>
  *  Neil Booth
  *  Nicola Stanislao Vitale <nivit@FreeBSD.org
  *  Nicola Stanislao Vitale <nivit@FreeBSD.org>
  *  Nicola Vitale <nivit@FreeBSD.org>
  *  Nicola Vitale <nivit@email.it>
  *  Nik Clayton <nik@FreeBSD.org>
  *  Nikola Lecic <nikola.lecic@anthesphoria.net>
  *  Nosov Artem <chip-set@mail.ru>
  *  Oleg Mamontov <oleg@mamontov.net>
  *  Oliver Braun <obraun@informatik.unibw-muenchen.de>
  *  Oliver Eikemeier <eikemeier@fillmore-labs.com>
  *  Oliver Lehmann (oliver@FreeBSD.org)
  *  Olivier Duchateau
  *  Olivier Duchateau <olivierd@FreeBSD.org>
  *  Olivier Girard <Olivier.Girard@univ-angers.fr>
  *  Patrick Li <pat@databits.net>
  *  Patrick Powell <papowell@astart.com>
  *  Pav Lucistnik <pav@FreeBSD.org>
  *  Pav Lucistnik <pav@oook.cz>
  *  Pavel Timofeev <timp87@gmail.com>
  *  Pawel Pekala <pawel@FreeBSD.org>
  *  Pedro Giffuni
  *  Pedro Giffuni <pfg@FreeBSD.org>
  *  Pete Fritchman <petef@databits.net>
  *  Peter Johnson <johnson.peter@gmail.com>
  *  Peter Pentchev <roam@FreeBSD.org>
  *  Peter Schuller <peter.schuller@infidyne.com>
  *  Petteri Valkonen <petteri.valkonen@iki.fi>
  *  Pietro Cerutti <gahr@gahr.ch>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Piotr Rybicki <meritus@innervision.pl>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Radim Kolar <hsn@sanatana.dharma>
  *  Rainer Hurling <rhurlin@gwdg.de>
  *  Rene Ladan <rene@FreeBSD.org>
  *  René Ladan <rene@freebsd.org>
  *  Richard Gallamore <ultima@FreeBSD.org>
  *  Rick van der Zwet <info@rickvanderzwet.nl>
  *  Robert Gogolok <gogo@cs.uni-sb.de>
  *  Rod Taylor <ports@rbt.ca>
  *  Rodrigo OSORIO <rodrigo@FreeBSD.org>
  *  Roger Leigh <rleigh@codelibre.net>
  *  Rong-En Fan <rafan@infor.org>
  *  Rusmir Dusko <nemysis@FreeBSD.org>
  *  Russell Cloran <russell@rucus.ru.ac.za>
  *  Russell Jackson <raj@csub.edu>
  *  Ryan Steinmetz <zi@FreeBSD.org>
  *  Samuel Tardieu <sam@inf.enst.fr>
  *  Sascha Holzleiter <sascha@root-login.org>
  *  Scott Sanders <scott@jssjr.com>
  *  Seamus Venasse <svenasse@polaris.ca>
  *  Serge Gagnon <ser_gagnon@sympatico.ca>
  *  Sergei Kolobov <sergei@kolobov.com>
  *  Sergei Vyshenski <svysh.fbsd@gmail.com>
  *  Sergey A. Osokin <osa@FreeBSD.org>
  *  Sergey Skvortsov <skv@FreeBSD.org>
  *  Sergey Skvortsov <skv@protey.ru>
  *  Shen Chun-Hsing <statue@freebsd.netlab.cse.yzu.edu.tw>
  *  Shinsuke Matsui <smatsui@karashi.org>
  *  Silvio Ap Silva aka kanazuchi <alvolivre@live.com>
  *  Simon 'corecode' Schubert <corecode@corecode.ath.cx>
  *  Simon Olofsson <simon@olofsson.de>
  *  Soeren Boll Overgaard <boll@tolkien.dk>
  *  Sofian Brabez <sbz@FreeBSD.org>
  *  Stanislav Svirid <count@211.ru>
  *  Stefan Esser <se@FreeBSD.org>
  *  Stefan Pauly <stefan@fh-mainz.de>
  *  Stefan Walter <sw@gegenunendlich.de>
  *  Stephen Montgomery-Smith <stephen@math.missouri.edu>
  *  Stephen Roznowski (sjr@home.com)
  *  Stephon Chen <stephon@gmail.com>
  *  Steve Wills <swills@FreeBSD.org>
  *  Steve Wills <swills@rubick>
  *  Steven Kreuzer <skreuzer@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
  *  Sven R <freebsd@hackacad.net>
  *  Sébastien Santoro <dereckson@gmail.com>
  *  TAKAHASHI Kaoru <kaoru@kaisei.org>
  *  TAKATSU Tomonari <tota@FreeBSD.org>
  *  TAKATSU Tomonari <tota@rtfm.jp>
  *  TERAMOTO Masahiro <markun@onohara.to>
  *  Thierry Thomas <thierry@FreeBSD.org>
  *  Thierry Thomas <thierry@pompo.net>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  Thorsten Greiner <thorsten.greiner@web.de>
  *  Tilman Linneweh <arved@FreeBSD.org>
  *  Timothy Beyer <beyert@cs.ucr.edu>
  *  Timur Bakeyev <bat@cpan.org>
  *  Timur I. Bakeyev <timur@gnome.org>
  *  Toby Allsopp <toby@mi6.gen.nz>
  *  Tom Judge <tj@FreeBSD.org>
  *  Tom Judge <tom@tomjudge.com>
  *  Tom Sparks <tsparks@appliedops.net>
  *  Tomoyuki Sakurai <cherry@trombik.org>
  *  Torsten Zuehlsdorff <ports@toco-domains.de>
  *  Torsten Zuehlsdorff <tz@FreeBSD.org>
  *  Travis Campbell <hcoyote@ghostar.org>
  *  Tsung-Han Yeh <snowfly@yuntech.edu.tw>
  *  Ulrich Spoerlein <uqs@FreeBSD.org>
  *  Ulrich Spoerlein <uspoerlein@gmail.com>
  *  Uwe Pierau <uwe.pierau@tu-clausthal.de>
  *  Vadim Vatlin
  *  Vany <ivan@serezhkin.com>
  *  Vasek Balcar <vasek@ti.cz>
  *  Veniamin Gvozdikov <vg@FreeBSD.org>
  *  Vidar Karlsen <vidar@karlsen.tech>
  *  Vivek Khera <vivek@khera.org>
  *  Volker Stolz <vs@FreeBSD.org>
  *  Vsevolod Stakhov <vsevolod@highsecure.ru>
  *  Waitman Gobble <waitman@waitman.net>
  *  Wen Heping <wen@FreeBSD.org>
  *  Wen Heping <wenheping@gmail.com>
  *  Wen Heping<wen@FreeBSD.org>
  *  Will Andrews <will@FreeBSD.org>
  *  William Grzybowski <wg@FreeBSD.org>
  *  Xavier Humbert <xavier@amdh.fr>
  *  Xin LI <delphij@FreeBSD.org>
  *  Yarema <yds@CoolRat.org>
  *  Yarema <yds@Necessitu.de>
  *  Yen-Ming Lee <leeym@FreeBSD.org>
  *  Yen-Ming Lee <leeym@cae.ce.ntu.edu.tw>
  *  Yi-Jheng Lin <yzlin@cs.nctu.edu.tw>
  *  Ying-Chieh Liao <ijliao@FreeBSD.org>
  *  Ying-Chieh Liao <ijliao@csie.nctu.edu.tw>
  *  Yinghong Liu <relaxbsd@gmail.com>
  *  Yinghong.Liu <relaxbsd@gmail.com>
  *  Yoshiro MIHIRA <sanpei@sanpei.org>
  *  Yoshiro MIHIRA <sanpei@yy.cs.keio.ac.jp>
  *  Yuan-Chung Hsiao <ychsiao@ychsiao.org>
  *  Yukihiro Nakai <Nakai@technologist.com>
  *  Yuri Pankov <yuri.pankov@gmail.com>
  *  Yuri Victorovich <yuri@rawbw.com>
  *  Zane C. Bowers-Hadley <vvelox@vvelox.net>
  *  Zeus Panchenko <zeus@gnu.org.ua>
  *  Zhen REN <bg1tpt@gmail.com>
  *  Zhihao Yuan <lichray@gmail.com>
  *  ache
  *  andreas@marvin.robin.de
  *  andrey@kostenko.name
  *  anholt@FreeBSD.org
  *  antoine@FreeBSD.org
  *  arved
  *  b.f. <bf@FreeBSD.org>
  *  bf@FreeBSD.org
  *  brett@peloton.physics.montana.edu
  *  buganini@gmail.com
  *  chinsan
  *  chinsan <chinsan.tw@gmail.com>
  *  chinsan <chinsan@mail2000.com.tw>
  *  clsung
  *  clsung@dragon2.net
  *  dannyman <dannyman@tellme.com>
  *  dd
  *  domi@saargate.de
  *  eivind
  *  eric
  *  faber@lunabase.org
  *  fenner
  *  fenner@FreeBSD.org
  *  gahr
  *  gugabsd <gugabsd@mundounix.com.br>
  *  gurkan@phys.ethz.ch
  *  ijliao
  *  jabley@automagic.org
  *  janos.mohacsi@bsd.hu
  *  jfieber
  *  jkoshy
  *  john@zoner.org
  *  jupengfei <jupengfei@gmail.com>
  *  kai
  *  kevit
  *  king@v2project.com
  *  kuriyama
  *  lars.eggert@gmx.net
  *  lbartoletti <lbartoletti@FreeBSD.org>
  *  lofi@FreeBSD.org
  *  lth@FreeBSD.org
  *  mainland@apeiron.net
  *  mandree@FreeBSD.org
  *  markm@FreeBSD.org
  *  meyser@xenet.de
  *  mike
  *  milki <milki@rescomp.berkeley.edu>
  *  nectar
  *  nik
  *  nivit@users.sourceforge.net
  *  nork@FreeBSD.org
  *  paulh@logicsquad.net
  *  petef@databits.net
  *  peter.schuller@infidyne.com
  *  philip@p6m7g8.com
  *  ports@c0decafe.net
  *  reed@pugetsoundtechnology.com
  *  rfarmer@predatorlabs.net
  *  risner@stdio.com
  *  scheidell@secnap.net
  *  shige
  *  skreuzer
  *  snowchyld
  *  steve
  *  sumikawa@FreeBSD.org
  *  sumikawa@kame.net
  *  thierry@pompo.net
  *  tj@FreeBSD.org
  *  trasz
  *  trevor
  *  vanilla
  *  wen@FreeBSD.org
  *  wosch
  *  znerd@FreeBSD.org

With hat:	portmgr
5cf7e35e86
Charlie Li (vishwin) · 2.9.13_2
textproc/{,py-}libxml2: switch back to autotools

See notes in Makefile and linked PRs.

While here, disable the ICU option by default. CFLAGS for libicu
are passed to libxml2's consumers when the option is enabled. As
icu's API is not stable between versions, PORTREVISION bumps can
get missed.

Additionally, properly exclude all OPTIONS from py-libxml2 and
prevent do-configure from unnecessarily running.

Co-authored-by: diizzy
PR: 262853, 262940, 262877
Approved by: fluffy (mentor)
57dd5abd60
Jan Beich (jbeich) · 2.9.13_1
devel/icu: update to 71.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-71-1
Reported by:	GitHub (watch releases)
PR:		262654
Exp-run by:	antoine
Approved by:	fluffy
268cee3b02
Daniel Engberg (diizzy) · 2.9.13
textproc/libxml2: Update to 2.9.13 and migrate to CMake

Depend on ICU and (lib)readline to follow other distros

Changelog: https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.13

I'd like to thank both tcberner and mandree for reviewing,
suggesting improvements and helping out in general. I'd also like
thank antoine for doing exp-runs.

PR:		262288
Reviewed by:	tcberner, mandree
Approved by:	desktop (tcberner)
Differential Revision:	https://reviews.freebsd.org/D34338
Exp-run by:	antoine
a13ec21cd7
Tobias Kortkamp (tobik) · 2.9.12
*: Clean up some things

- Fix typos
- Remove nop or unreferenced variables
- Clean up commented PORTREVISION
- Add missing USES

Reported by:	portscan
91e9ee8c70
Gleb Popov (arrowd) · 2.9.12
textproc/libxml2: Update to 2.9.12

PR:		256436
Reviewed by:	arrowd
Tested by:	arrowd
4c0c936fe9
Tobias C. Berner (tcberner) · 2.9.10_4
textproc/libxml2: add upstream fix for CVE-2021-3541

This is relapted to parameter entities expansion and following
the line of the billion laugh attack. Somehow in that path the
counting of parameters was missed and the normal algorithm based
on entities "density" was useless.

PR:		256094
Obtained from:	https://gitlab.gnome.org/GNOME/libxml2/-/commit/8598060bacada41a0eb09d95c97744ff4e428f8e
Security:	CVE-2021-3541
83889bd687
Adriaan de Groot (adridg) · 2.9.10_3
textproc/libxml2: fix build with VALIDATION option off

Grab two commits from upstream that fix the build when
--no-valid is passed to configure; in the ports build
that translates to the VALIDATION option turned off.
These come straight from GNOME GitLab, although I've
bunged them into one patch-* file.

Not bumping PORTREVISION, since with this option off
it would never have built, and with the option on
the resulting package is unchanged.

PR:		253596
cd8e694917
Mathieu Arnold (mat) · 2.9.10_3
Remove # $FreeBSD$ from Makefiles.
305f148f48
Tobias C. Berner (tcberner) · 2.9.10_3
textproc/libxml2: rename VALID option to VALIDATION

- The option name could under some circumctances lead to issues
  with the VALID_CATEGOIRES variable of the ports framework.
- Simply rename the option, to something similar.

PR:		252933
Submitted by:	andrew@tao11.riddles.org.uk
178e71ea61
Tobias C. Berner (tcberner) · 2.9.10_2
textproc/libxml2: ship patches via files/ due to gitlab

- gitlab has a tendency to change checksum of patches due to metadata changes
- switch to including the patches in the tree directly instead of using PATCH_FILES

PR:             251040
Submitted by:   daniel.engberg.lists@pyret.net
Reported by:    David Armstrong <bink19th@pm.me>
d56eb40d13
Dima Panov (fluffy) · 2.9.10_1
textproc/libxml2: backport python 3.9.x support

No PORTREVISION bump, py-libxml2 was always unbuildable with py39

With hat:	desktop
Obtained from:	libxml2 repo
6edea31670
Tobias C. Berner (tcberner) · 2.9.10_1
textproc/libxml2: Multiple vulnerabilities

Includes upstreams fixes for

	* CVE-2019-20388
	* CVE-2020-7595
	* CVE-2020-24977

PR:		249386
Submitted by:	daniel.engberg.lists@pyret.net
MFH:		2020Q3
eec5dd6f57
Baptiste Daroussin (bapt) · 2.9.10
In preparation of the update of glib remove the -reference ports

Those ports mainly concern old Gnome2 libraries, the behaviour of this infra
is not compatible with the meson build system (being used in newer version)
the documentation is provided otherwise in the other version
6b5e7cdc84
Antoine Brodin (antoine) · 2.9.10
Unbreak py-libxml2
cbae7b6938
Tobias C. Berner (tcberner) · 2.9.10
textproc/libxml2: Remove gmake dependency

- remove dependency on gmake in textproc/libxml2 and textproc/libxml2-reference

PR:		243346
Submitted by:	daniel.engberg.lists@pyret.net
02493639a9