textproc/libxslt: security update to 1.1.45 PR: 289213fbf9f05fe9
libxslt -- multiple vulnerabilitiesentered 2025-07-12
XML stylesheet transformation library
xmlsoft:libxslt from the portpkg audit reports nothing for this version.no CVE referenced
textproc/libxslt: security update to 1.1.45 PR: 289213fbf9f05fe9
textproc/libxslt: remove deprecation notice and expire date There has been a new upstream maintainer since the deprecation notice was added. It will take some time for said new maintainer to get up to speed with the codebase and test any incoming patches. The software is still generally considered vulnerable as of this commit. PR: 28921385fe8f8303
textproc/libxml2, textproc/libxslt: vulnerable Note that libxslt is vulnerable, unfixed, and without maintainer. Two of four vulnerabilities have been fixed. Note that libxml2 in our ports is vulnerable and there is no upstream release fixing these bugs, they need cherry-picks. Deprecate textproc/xmlto and textproc/minixmlto, which both depend on the unmaintained and vulnerable libxslt. I have filed https://pagure.io/xmlto/issue/15 to ask the xmlto upstream to switch to different XML/XSLT libraries. Two issues are undisclosed and do not seem to have a CVE assigned yet. Security: CVE-2025-6021 Security: CVE-2025-6170 Security: CVE-2025-7424 Security: CVE-2025-7425 Security: CVE-2025-49794 Security: CVE-2025-49795 Security: CVE-2025-49795 Security: https://gitlab.gnome.org/GNOME/libxml2/-/issues/913 Security: https://gitlab.gnome.org/GNOME/libxml2/-/issues/926 Security: https://gitlab.gnome.org/GNOME/libxml2/-/issues/931 Security: https://gitlab.gnome.org/GNOME/libxml2/-/issues/932 Security: https://gitlab.gnome.org/GNOME/libxml2/-/issues/933 Security: https://gitlab.gnome.org/GNOME/libxml2/-/issues/935 Security: https://gitlab.gnome.org/GNOME/libxml2/-/issues/941 Security: https://gitlab.gnome.org/GNOME/libxslt/-/issues/139 Security: https://gitlab.gnome.org/GNOME/libxslt/-/issues/140 Security: https://gitlab.gnome.org/GNOME/libxslt/-/issues/144 Security: https://gitlab.gnome.org/GNOME/libxslt/-/issues/148 Security: https://gitlab.gnome.org/Teams/Releng/security/-/wikis/2025#libxml2-and-libxslt Security: https://www.openwall.com/lists/oss-security/2025/06/16/6dceb46fc8a
libxml2: chase libxml soversion bump3068854dd0
Mk/bsd.sites.mk: Simplify MASTER_SITES= GNOME Since GNOME changes their numbering, in some Makefile MASTER_SITES= GNOME is more complex. This patch simplify for users. Differential Revision: https://reviews.freebsd.org/D43183a0ce779c88
textproc/libxslt: COPYING no longer present in tarball
${WRKSRC}/Copyright has always contained the appropriate licence terms.
Reported by: vvd
Pointy-hat to: vishwind59194b114textproc/libxslt: update to 1.1.43 Changelog: https://gitlab.gnome.org/GNOME/libxslt/-/blob/v1.1.43/NEWS Fixes CVE-2024-55549 and CVE-2025-24855 Upstream have disabled CRYPTO and (new OPTION) PLUGINS by default, as they will be removed in a future version, but the port continues to have them enabled by default until at least the next update. Reported by: ngie Security: a96cd659-303e-11f0-94b5-54ee755069b5 PR: 28678211d181b834
textproc/libxslt: update to 1.1.42 Changelog: https://gitlab.gnome.org/GNOME/libxslt/-/blob/v1.1.42/NEWS PR: 279741 Reported by: diizzy exp-run by: antoine53b8e45250
textproc/libxslt: Moved man to share/man Approved by: portmgr (blanket)8708343871
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
textproc/libxslt: update to 1.1.37 maintenance release (+) Changelog: https://gitlab.gnome.org/GNOME/libxslt/-/releases/v1.1.370c08d892f6
textproc/libxslt: update to 1.1.36 release (+) Changelog: https://gitlab.gnome.org/GNOME/libxslt/-/tags/v1.1.36e4d2bcd725
textproc: remove 'Created by' lines A big Thank You to the original contributors of these ports: * "Choe, Cheng-Dae" whitekid * - * <glewis@FreeBSD.org> * <koshy@india.hp.com> * Aaron Dalton <aaron@FreeBSD.org> * Aaron Dalton <aaron@daltons.ca> * Aaron Straup Cope * Aaron Straup Cope <ascope@cpan.org> * Ache * Adam Herzog <adam@herzogdesigns.com> * Adam Weinberger <adamw@FreeBSD.org> * Ade Lovett <ade@FreeBSD.org> * Akinori MUSHA aka knu <knu@FreeBSD.org> * Akinori MUSHA aka knu <knu@idaemons.org> * Alan Eldridge <alane@FreeBSD.org> * Alex Dupre <ale@FreeBSD.org> * Alex Kapranoff <kappa@FreeBSD.org.ua> * Alexander Logvinov <ports@logvinov.com> * Alexander Nedotsukov <bland@FreeBSD.org> * Alexander Zhuravlev <zaa@zaa.pp.ru> * Alexander@Leidinger.net * Alexandre Biancalana <ale@biancalanas.net> * Alexey Dokuchaev <danfe@FreeBSD.org> * Alexis Praga <alexis.praga@free.fr> * Andreas Heil <ah@linux-hq.de> * Andrei V. Shetuhin <reki@reki.ru> * Andrej Zverev <andrey.zverev@electro-com.ru> * Andrew <andrew@ugh.net.au> * Andrew Humphrey <ahumphrey@realestate.com.au> * Andrew Lewis <freeghb@gmail.com> * Andrew Pantyukhin <infofarmer@FreeBSD.org> * Andrew Romero <melanhit@gmail.com> * Andrey Kostenko <andrey@kostenko.name> * Andrey Zakhvatov * Andrey Zakhvatov <andy@FreeBSD.org> * Anes Mukhametov <anes@anes.su> * Antoine Brodin <antoine@FreeBSD.org> * Anton Berezin <tobez@FreeBSD.org> * Anton Berezin <tobez@tobez.org> * Anton Yudin <toha@toha.org.ua> * Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>) * Ashish SHUKLA <wahjava@gmail.com> * Autrijus Tang <autrijus@autrijus.org> * Babak Farrokhi <farrokhi@FreeBSD.org> * Ben Haga <tuxsuximus@hotmail.com> * Ben Woods <woodsb02@FreeBSD.org> * Benno Rice <benno@jeamland.net> * Bill "I hate Perl" Fumerola * Bill Brinzer <bill.brinzer@gmail.com> * Bill Fumerola <billf@chc-chimes.com> * Bill Swingle <unfurl@FreeBSD.org> * Bob Eager <rde@ml1.org.uk> * Boris Samorodov <bsam@FreeBSD.org> * Brian Candler <B.Candler@pobox.com> * Brion Moss <brion@queeg.com> * Carlos J Puga Medina <cpm@fbsd.es> * Carlos J. Puga Medina <cpm@FreeBSD.org> * Cezary Morga <cm@therek.net> * Cheng-Lung Sung <clsung@FreeBSD.org> * Cheng-Lung Sung <clsung@dragon2.net> * Chris D. Faulhaber <jedgar@fxp.org> * Chris Hutchinson <portmaster@bsdforge.com> * Christoper Key <cjk32@cam.ac.uk> * Clemens Zauner <czauner+ports@onlineloop.com> * Cyrille Lefevre <clefevre@citeweb.net> * Dan Langille <dvl@FreeBSD.org> * Daniel Roethlisberger <daniel@roe.ch> * Danilo G. Baio <dbaio@FreeBSD.org> * David Bremner <bremner@unb.ca> * David O'Brien (obrien@FreeBSD.org) * David Sze <dsze@alumni.uwaterloo.ca> * Denis Pokataev <catone@cpan.org> * Dennis Herrmann <dhn@FreeBSD.org> * Dereckson <dereckson@gmail.com> * Dikshie * Dikshie <dikshie@sfc.wide.ad.jp> * Dima Sivachenko <demon@gpad.ac.ru> * Dirk Froemberg <dirk@FreeBSD.org> * Ditesh Shashikant Gathani <ditesh@gathani.org> * Dmitry Morozovsky <marck@FreeBSD.org> * Dmitry Sivachenko <demon@FreeBSD.org> * Dom Mitchell <dom@happygiraffe.net> * Don Croyle <croyle@gelemna.org> * Donald Burr <dburr@FreeBSD.org> * Douglas Thrift <douglas@douglasthrift.net> * Dru Lavigne <dru@FreeBSD.org> * Dryice Liu <dryice@dryice.name> * Ed Schouten <ed@FreeBSD.org> * Edward Tomasz Napierala <trasz@FreeBSD.org> * Elvis Chiang <elvis@sslab.cs.ccu.edu.tw> * Emanuel Haupt <ehaupt@FreeBSD.org> * Emanuel Haupt <ehaupt@critical.ch> * Eric A. Griff <eric@talesfromthereal.com> * Eric Freeman <freebsdports@chillibear.com> * Erik Greenwald <erik@smluc.org> * Ernst de Haan <znerd@FreeBSD.org> * Erwin Lansing <erwin@FreeBSD.org> * Espen Tagestad <espen@tagestad.no> * Eugene Furs <justas@mbank.lv> * Felippe de Meirelles Motta <lippemail@gmail.com> * Felix Palmen <felix@palmen-it.de> * Fernan Aguero <fernan@iib.unsam.edu.ar> * Filip Parag <filip@parag.rs> * Foxfair Hu <foxfair@FreeBSD.org> * Freddie Cash <fcash@sd73.bc.ca> * Frederic Culot <culot@FreeBSD.org> * Frederic Dubuy <fdubuy@free.fr> * Gabor Kovesdan <gabor@FreeBSD.org> * Garrett Rooney <rooneg@electricjellyfish.net> * Gasol Wu <gasol.wu@gmail.com> * Gea-Suan Lin <gslin@gslin.org> * Geoffroy Desvernay <dgeo@centrale-marseille.fr> * George Hartzell <hartzell@fruitfly.org> * Gerald Pfeifer <gerald@pfeifer.com> * Gerrit Beine <gerrit.beine@gmx.de> * Glenn Trewitt <glenn@trewitt.org> * Goran Tal <goran.tal@gmail.com> * Graham Todd <gtodd@bellanet.org> * Greg Larkin <glarkin@FreeBSD.org> * Greg Lewis <glewis@FreeBSD.org> * Grzegorz Blach <gblach@FreeBSD.org> * Guangyuan Yang <ygy@FreeBSD.org> * Hansjoerg Pehofer <hansjoerg.pehofer@uibk.ac.at> * Henrik Motakef <henrik.motakef@web.de> * Henry Hu <henry.hu.sh@gmail.com> * Herve Quiroz <herve.quiroz@esil.univ-mrs.fr> * Herve Quiroz <hq@FreeBSD.org> * Hiroki Sato <hrs@FreeBSD.org> * Horia Racoviceanu <horia@racoviceanu.com> * Hye-Shik Chang <perky@fallin.lv> * Ian Vaudrey <i.vaudrey@bigfoot.com> * Ilya A. Arkhipov <rum1cro@yandex.ru> * Jaap Boender <jaapb@kerguelen.org> * James Earl * James Flemer <jflemer@alum.rpi.edu> * James Raftery <james@now.ie> * Jason Burgess <dev@fenux.net> * Jason Helfman <jgh@FreeBSD.org> * Jean-Baptiste Quenot <jb.quenot@caraldi.com> * Jean-Yves Lefort <jylefort@brutele.be> * Jeff Putsch <jdputsch@comcast.net> * Jeremy Shaffner <jeremy@external.org> * Jie Gao <gaoj@cpsc.ucalgary.ca> * Jim Mock <jim@FreeBSD.org> * Jin-Shan Tseng <tjs@cdpa.nsysu.edu.tw> * Joe Marcus Clarke <marcus@FreeBSD.org> * Johann Visagie <johann@egenetics.com> * Johann Visagie <wjv@FreeBSD.org> * Johannes Jost Meixner <xmj@FreeBSD.org> * Johannes Meixner <johannes@perceivon.net> * John MacFarlane <jgm@berkeley.edu> * John Marino <marino@FreeBSD.org> * Jonathan Chen <jonc@chen.org.nz> * Jos Backus <josb@cncdsl.com> * Joseph Koshy <jkoshy@FreeBSD.org> * Josh Gilliam <josh@quick.net> * Jov <amutu@amutu.com> * Jui-Nan Lin <jnlin@csie.nctu.edu.tw> * Julien Laffaye <kimelto@gmail.com> * Jun Kuriyama <kuriyama@opt.phys.waseda.ac.jp> * Jyun-Yan You <jyyou@cs.nctu.edu.tw> * KANOU Hiroki <kanou@khdd.net> * KIMURA Yasuhiro <yasu@utahime.org> * KIRIYAMA Kazuhiko <kiri@FreeBSD.org> * Ka Ho Ng <khng300@gmail.com> * Kay Lehmann <kay_lehmann@web.de> * Kevin Lo <kevlo@FreeBSD.org> * Kimura Fuyuki <fuyuki@hadaly.org> * Kimura Fuyuki <fuyuki@mj.0038.net> * Kimura Fuyuki <fuyuki@nigredo.org> * Konstantin Menshikov <kostjnspb@yandex.ru> * Koop Mast <kwm@FreeBSD.org> * Kouichi ABE (WALL) <kouichi@mysticwall.com> * Kris Kennaway <kris@FreeBSD.org> * Kris Moore <kmoore@FreeBSD.org> * Kuan-Chung Chiu <buganini@gmail.com> * Kubilay Kocak <koobs@FreeBSD.org> * Kurt Lidl <kurt.lidl@cello.com> * Lars Balker Rasmussen <lbr@FreeBSD.org> * Lars Engels <lme@FreeBSD.org> * Lars Thegler <lars@thegler.dk> * Lars Thegler <lth@FreeBSD.org> * Leland Wang <llwang@infor.org> * Leo Kim <leo@florida.sarang.net> * Lev Serebryakov <lev@serebryakov.spb.ru> * Li-Wen Hsu <lwhsu@FreeBSD.org> * Loic Pefferkorn <loic-freebsd@loicp.eu> * MANTANI Nobutaka <nobutaka@FreeBSD.org> * MIHIRA Yoshiro <sanpei@FreeBSD.org> * Marcin Cieslak * Marcin Jessa <yazzy@yazzy.org> * Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org> * Mark Pulford <mark@kyne.com.au> * Mark R V Murray <mark@grondar.za> * Martin Kammerhofer * Martin Matuska <mm@FreeBSD.org> * Martin Wilke <miwi@FreeBSD.org> * Marwan Burelle <marwan.burelle@lri.fr * Masahiro Teramoto <markun@onohara.to> * Mathieu Arnold <m@absolight.net> * Matt Mills <matt_mills@btopenworld.com> * Matthew Fuller <fullermd@over-yonder.net> * Matthew Seaman * Matthias Fechner <mfechner@FreeBSD.org> * Mauricio Herrera Cuadra <mauricio@arareko.net> * Max Baryshnikov <mephius@gmail.com> * Max N. Boyarov <m.boyarov@gmail.com> * Maxim Sobolev <sobomax@FreeBSD.org> * Meno Abels <meno.abels@adviser.com> * Michael Johnson <ahze@FreeBSD.org> * Michael Johnson <ahze@ahze.net> * Michael Moll <kvedulv@kvedulv.de> * Michael Ranner <michael@ranner.eu> * Michael Schout <mschout@gkg.net> * Mike Bristow <mike@urgle.com> * Mikhail Teterin <mi@aldan.algebra.com> * Moggie <moggie@elasticmind.net> * Mykola Dzham <freebsd@levsha.org.ua> * Naram Qashat <cyberbotx@cyberbotx.com> * Neil Booth * Nicola Stanislao Vitale <nivit@FreeBSD.org * Nicola Stanislao Vitale <nivit@FreeBSD.org> * Nicola Vitale <nivit@FreeBSD.org> * Nicola Vitale <nivit@email.it> * Nik Clayton <nik@FreeBSD.org> * Nikola Lecic <nikola.lecic@anthesphoria.net> * Nosov Artem <chip-set@mail.ru> * Oleg Mamontov <oleg@mamontov.net> * Oliver Braun <obraun@informatik.unibw-muenchen.de> * Oliver Eikemeier <eikemeier@fillmore-labs.com> * Oliver Lehmann (oliver@FreeBSD.org) * Olivier Duchateau * Olivier Duchateau <olivierd@FreeBSD.org> * Olivier Girard <Olivier.Girard@univ-angers.fr> * Patrick Li <pat@databits.net> * Patrick Powell <papowell@astart.com> * Pav Lucistnik <pav@FreeBSD.org> * Pav Lucistnik <pav@oook.cz> * Pavel Timofeev <timp87@gmail.com> * Pawel Pekala <pawel@FreeBSD.org> * Pedro Giffuni * Pedro Giffuni <pfg@FreeBSD.org> * Pete Fritchman <petef@databits.net> * Peter Johnson <johnson.peter@gmail.com> * Peter Pentchev <roam@FreeBSD.org> * Peter Schuller <peter.schuller@infidyne.com> * Petteri Valkonen <petteri.valkonen@iki.fi> * Pietro Cerutti <gahr@gahr.ch> * Piotr Kubaj <pkubaj@anongoth.pl> * Piotr Rybicki <meritus@innervision.pl> * Po-Chuan Hsieh <sunpoet@FreeBSD.org> * Radim Kolar <hsn@sanatana.dharma> * Rainer Hurling <rhurlin@gwdg.de> * Rene Ladan <rene@FreeBSD.org> * René Ladan <rene@freebsd.org> * Richard Gallamore <ultima@FreeBSD.org> * Rick van der Zwet <info@rickvanderzwet.nl> * Robert Gogolok <gogo@cs.uni-sb.de> * Rod Taylor <ports@rbt.ca> * Rodrigo OSORIO <rodrigo@FreeBSD.org> * Roger Leigh <rleigh@codelibre.net> * Rong-En Fan <rafan@infor.org> * Rusmir Dusko <nemysis@FreeBSD.org> * Russell Cloran <russell@rucus.ru.ac.za> * Russell Jackson <raj@csub.edu> * Ryan Steinmetz <zi@FreeBSD.org> * Samuel Tardieu <sam@inf.enst.fr> * Sascha Holzleiter <sascha@root-login.org> * Scott Sanders <scott@jssjr.com> * Seamus Venasse <svenasse@polaris.ca> * Serge Gagnon <ser_gagnon@sympatico.ca> * Sergei Kolobov <sergei@kolobov.com> * Sergei Vyshenski <svysh.fbsd@gmail.com> * Sergey A. Osokin <osa@FreeBSD.org> * Sergey Skvortsov <skv@FreeBSD.org> * Sergey Skvortsov <skv@protey.ru> * Shen Chun-Hsing <statue@freebsd.netlab.cse.yzu.edu.tw> * Shinsuke Matsui <smatsui@karashi.org> * Silvio Ap Silva aka kanazuchi <alvolivre@live.com> * Simon 'corecode' Schubert <corecode@corecode.ath.cx> * Simon Olofsson <simon@olofsson.de> * Soeren Boll Overgaard <boll@tolkien.dk> * Sofian Brabez <sbz@FreeBSD.org> * Stanislav Svirid <count@211.ru> * Stefan Esser <se@FreeBSD.org> * Stefan Pauly <stefan@fh-mainz.de> * Stefan Walter <sw@gegenunendlich.de> * Stephen Montgomery-Smith <stephen@math.missouri.edu> * Stephen Roznowski (sjr@home.com) * Stephon Chen <stephon@gmail.com> * Steve Wills <swills@FreeBSD.org> * Steve Wills <swills@rubick> * Steven Kreuzer <skreuzer@FreeBSD.org> * Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org> * Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net> * Sven R <freebsd@hackacad.net> * Sébastien Santoro <dereckson@gmail.com> * TAKAHASHI Kaoru <kaoru@kaisei.org> * TAKATSU Tomonari <tota@FreeBSD.org> * TAKATSU Tomonari <tota@rtfm.jp> * TERAMOTO Masahiro <markun@onohara.to> * Thierry Thomas <thierry@FreeBSD.org> * Thierry Thomas <thierry@pompo.net> * Thomas Gellekum <tg@FreeBSD.org> * Thorsten Greiner <thorsten.greiner@web.de> * Tilman Linneweh <arved@FreeBSD.org> * Timothy Beyer <beyert@cs.ucr.edu> * Timur Bakeyev <bat@cpan.org> * Timur I. Bakeyev <timur@gnome.org> * Toby Allsopp <toby@mi6.gen.nz> * Tom Judge <tj@FreeBSD.org> * Tom Judge <tom@tomjudge.com> * Tom Sparks <tsparks@appliedops.net> * Tomoyuki Sakurai <cherry@trombik.org> * Torsten Zuehlsdorff <ports@toco-domains.de> * Torsten Zuehlsdorff <tz@FreeBSD.org> * Travis Campbell <hcoyote@ghostar.org> * Tsung-Han Yeh <snowfly@yuntech.edu.tw> * Ulrich Spoerlein <uqs@FreeBSD.org> * Ulrich Spoerlein <uspoerlein@gmail.com> * Uwe Pierau <uwe.pierau@tu-clausthal.de> * Vadim Vatlin * Vany <ivan@serezhkin.com> * Vasek Balcar <vasek@ti.cz> * Veniamin Gvozdikov <vg@FreeBSD.org> * Vidar Karlsen <vidar@karlsen.tech> * Vivek Khera <vivek@khera.org> * Volker Stolz <vs@FreeBSD.org> * Vsevolod Stakhov <vsevolod@highsecure.ru> * Waitman Gobble <waitman@waitman.net> * Wen Heping <wen@FreeBSD.org> * Wen Heping <wenheping@gmail.com> * Wen Heping<wen@FreeBSD.org> * Will Andrews <will@FreeBSD.org> * William Grzybowski <wg@FreeBSD.org> * Xavier Humbert <xavier@amdh.fr> * Xin LI <delphij@FreeBSD.org> * Yarema <yds@CoolRat.org> * Yarema <yds@Necessitu.de> * Yen-Ming Lee <leeym@FreeBSD.org> * Yen-Ming Lee <leeym@cae.ce.ntu.edu.tw> * Yi-Jheng Lin <yzlin@cs.nctu.edu.tw> * Ying-Chieh Liao <ijliao@FreeBSD.org> * Ying-Chieh Liao <ijliao@csie.nctu.edu.tw> * Yinghong Liu <relaxbsd@gmail.com> * Yinghong.Liu <relaxbsd@gmail.com> * Yoshiro MIHIRA <sanpei@sanpei.org> * Yoshiro MIHIRA <sanpei@yy.cs.keio.ac.jp> * Yuan-Chung Hsiao <ychsiao@ychsiao.org> * Yukihiro Nakai <Nakai@technologist.com> * Yuri Pankov <yuri.pankov@gmail.com> * Yuri Victorovich <yuri@rawbw.com> * Zane C. Bowers-Hadley <vvelox@vvelox.net> * Zeus Panchenko <zeus@gnu.org.ua> * Zhen REN <bg1tpt@gmail.com> * Zhihao Yuan <lichray@gmail.com> * ache * andreas@marvin.robin.de * andrey@kostenko.name * anholt@FreeBSD.org * antoine@FreeBSD.org * arved * b.f. <bf@FreeBSD.org> * bf@FreeBSD.org * brett@peloton.physics.montana.edu * buganini@gmail.com * chinsan * chinsan <chinsan.tw@gmail.com> * chinsan <chinsan@mail2000.com.tw> * clsung * clsung@dragon2.net * dannyman <dannyman@tellme.com> * dd * domi@saargate.de * eivind * eric * faber@lunabase.org * fenner * fenner@FreeBSD.org * gahr * gugabsd <gugabsd@mundounix.com.br> * gurkan@phys.ethz.ch * ijliao * jabley@automagic.org * janos.mohacsi@bsd.hu * jfieber * jkoshy * john@zoner.org * jupengfei <jupengfei@gmail.com> * kai * kevit * king@v2project.com * kuriyama * lars.eggert@gmx.net * lbartoletti <lbartoletti@FreeBSD.org> * lofi@FreeBSD.org * lth@FreeBSD.org * mainland@apeiron.net * mandree@FreeBSD.org * markm@FreeBSD.org * meyser@xenet.de * mike * milki <milki@rescomp.berkeley.edu> * nectar * nik * nivit@users.sourceforge.net * nork@FreeBSD.org * paulh@logicsquad.net * petef@databits.net * peter.schuller@infidyne.com * philip@p6m7g8.com * ports@c0decafe.net * reed@pugetsoundtechnology.com * rfarmer@predatorlabs.net * risner@stdio.com * scheidell@secnap.net * shige * skreuzer * snowchyld * steve * sumikawa@FreeBSD.org * sumikawa@kame.net * thierry@pompo.net * tj@FreeBSD.org * trasz * trevor * vanilla * wen@FreeBSD.org * wosch * znerd@FreeBSD.org With hat: portmgr5cf7e35e86
textproc/{,py-}libxml2: switch back to autotools
See notes in Makefile and linked PRs.
While here, disable the ICU option by default. CFLAGS for libicu
are passed to libxml2's consumers when the option is enabled. As
icu's API is not stable between versions, PORTREVISION bumps can
get missed.
Additionally, properly exclude all OPTIONS from py-libxml2 and
prevent do-configure from unnecessarily running.
Co-authored-by: diizzy
PR: 262853, 262940, 262877
Approved by: fluffy (mentor)57dd5abd60devel/icu: update to 71.1 Changes: https://github.com/unicode-org/icu/releases/tag/release-71-1 Reported by: GitHub (watch releases) PR: 262654 Exp-run by: antoine Approved by: fluffy268cee3b02
textproc/libxslt: switch back to autotools Many ports use xsltproc as a BUILD_DEPENDS. CMake itself unconditionally depends on ftp/curl, for which certain options can pull in dependencies using xsltproc to build. While here: - DIST_SUBDIR to gnome - add devel/icu LIB_DEPENDS PR: 262853 Pointy-hat to: diizzy Approved by: fluffy (mentor) Differential Revision: https://reviews.freebsd.org/D34705c35c6fc30a
textproc/libxml2: bump all dependencies This should make sure that all dependent ports will pick up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246247c7db751
textproc/libxslt: Update to 1.1.35 and migrate to CMake Changelog: https://gitlab.gnome.org/GNOME/libxslt/-/releases#v1.1.35 I'd like to thank both tcberner and mandree for reviewing, suggesting improvements and helping out in general. I'd also like thank antoine for doing exp-runs. PR: 262288 Reviewed by: tcberner, mandree Approved by: desktop (tcberner) Differential Revision: https://reviews.freebsd.org/D34384 Exp-run by: antoine8c8cb32a53
textproc/libxslt: Unbreak the build after textproc/libxml2 changes. Reported by: arrowd8afcf305cb
textproc/libxslt: Backport compatibility patches. These patches are required for the new textproc/libxml2. PR: 256617 Reviewed by: arrowd Tested by: arrowd3d6deee359
Remove # $FreeBSD$ from Makefiles.305f148f48
In preparation of the update of glib remove the -reference ports Those ports mainly concern old Gnome2 libraries, the behaviour of this infra is not compatible with the meson build system (being used in newer version) the documentation is provided otherwise in the other version6b5e7cdc84
textproc/libxslt: fix formatting of xsltproc(1) PR: 243345 Submitted by: Walter Schwarzenfeld <w.schwarzenfeld@utanet.at> Reported by: Lorenzo Salvadore <salvadore@freebsd.org>0972cd3358
textproc/libxslt: update to 1.1.34 PR: 241853 Exp-run by: antoine Approved by: kwmf55f173987
Create desktop@ as maintainer of some shared desktop ports This idea has been around for quite some time. Time to make it happen. In order to share the load on the ports required by multiple desktop environments start to share the responsibility of maintainership. This is the initial list that came to mind, but we can probably extend it, to include another handful of ports. WWW: https://wiki.freebsd.org/DesktopTeam Mailing List: https://lists.freebsd.org/mailman/listinfo/freebsd-desktop Approved by: swills, kwm (gnome), madpilot (xfce) Differential Revision: https://reviews.freebsd.org/D223895bed1dc473
textproc/libxslt: Update to 1.1.33 [1], fix CVE-2019-11068 [2] PR: 239166 [1] PR: 238049 [2] Submitted by: egypcio [2] Exp-run by: antoine [1] Obtained from: https://gitlab.gnome.org/GNOME/libxslt/commit/e03553605b45c88f0b4b2980adfbbb8f6fca2fd6 [2]ec4e4d59c7
textproc/libxml2: Update to 2.9.9 [1] While here, fix a bug in libxslt triggered by the libxml2 update PR: 235713 [1] PR: 238522 Exp-run by: antoine Reported by: kunda <chitty_cloud@me.com> [1] Reviewed by: kwm [1] [2] Obtained from: https://gitlab.gnome.org/GNOME/libxslt/commit/5b0965010abf274f7a3a1291d16dde34c167e8a78a749f4712
Update to 1.1.3213bd23951f
Switch some MASTER_SITES from http/ftp to https. Also some cleanup of dead entries. PR: 226203 Submitted by: Sam H Sponsored by: Absolight37677d32e3
Remove libxslt.so.2 and libexslt.so.8 compatibility links that were added in r374303 to prevent massive PORTREVISION bumps. Bump dependent ports that have not been bumped since.5c1d05b7a4
Do not use post-stage. Use post-install instead. The only reason to use post-stage is because the port needs to do "things" at a later time, like some plist manipulation. While there, fold post-install in do-install targets when they are defined. PR: 214780 Submitted by: mat Exp-run by: antoine Sponsored by: Absolight8b4093cba5
textproc/libxslt: Update to 1.1.29 Changelog: https://git.gnome.org/browse/libxslt/commit/NEWS?id=9a1b3ddf6034aa2f6a30b4b7ea4bfc3c4037cd58 Absent from the Changelog are the CVEs Google discovered, CVE-2016-1683 and CVE-2016-1684. This library needs to be updated to ensure www/chromium is no longer vulnerable to these CVEs. Additionally the changelog notes a fix for CVE-2015-7995, but we solved that previously with a patch to the port. PR: 210298 MFH: 2016Q2 Security: CVE-2016-1683 Security: CVE-2016-16840c017ca3e1
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.
With hat: portmgr
Sponsored by: Absolight597afc47baFix CVE-2015-7995 Obtained from: libxslt upstream MFH: 2015Q4 Security: ecc268f2-8fc2-11e5-918c-bcaec565249cdc7551db29
Add patch to support the --maxvars argument in xsltproc. Submitted by: wblock@ Obtained from: libxslt upstream.45817f8667
- Add CPE info Approved by: portmgr blanketd8943937d1
security/libgcrypt: 1.6.1 -> 1.6.2, bump depends
Changes:
- src/sexp.c (do_vsexp_sscan): Return error for invalid args.
- cipher/md.c (_gcry_md_info): Fix a segv in case of calling
with wrong parameters.
- cipher/primegen.c (_gcry_generate_elg_prime): Change to return an
error code, possible NULL deref in call to prime generator.
- cipher/dsa.c (generate): Take care of new return code.
- cipher/elgamal.c (generate): Change to return an error code. Take
care of _gcry_generate_elg_prime return code.
- ecc: Support the non-standard 0x40 compression flag for EdDSA.
- mpi: Extend the internal mpi_get_buffer.
- mpi: Fix regression for powerpc-apple-darwin detection.
- Fix bug inhibiting the use of the sentinel attribute in src/gcrypt.h.in
- Fix building for the x32 target without asm modules in
mpi/generic/mpi-asm-defs.h: Use a fixed value for the x32 ABI.
- Fix ARM assembly when building __PIC__
- mpi: Fix a subtle bug setting spurious bits with in mpi_set_bit.
* mpi/mpi-bit.c (_gcry_mpi_set_bit, _gcry_mpi_set_highbit): Clear
allocated but not used bits before resizing.
* tests/t-mpi-bits.c (set_bit_with_resize): New.
- Use internal malloc function in fips.c.
* src/fips.c (check_binary_integrity): s/gcry_malloc/xtrymalloc/.
- pubkey: Re-map all deprecated RSA algo numbers.
- cipher: Fix possible NULL dereference in cipher/md.c for being NULL.
- Fix ARMv6 detection when CFLAGS modify target CPU architecture.
PR: 193264
Approved by: cpm@fbsd.es (maintainer)cba03c03e1Replace USES=libtool:oldver with USES=libtool or USES=libtool:keepla in the 32 ports that still use it. Bump PORTREVISION on their dependent ports except the ones that depend on these: audio/libogg audio/libvorbis devel/pcre ftp/curl graphics/jpeg graphics/libart_lgpl graphics/tiff textproc/expat2 textproc/libxslt In these cases the same trick as in the recent gettext update is used. The ports install a symlink with the old library version. When enough of their dependent ports have had regular updates the remaining ones can get a PORTREVISION bump and the links can be removed. Also remove the devel/pcre dependency from USE_GNOME=glib20. It causes over 2200 packages to depend on devel/pcre while less than 200 actually link with it. The glib20 package still depends on devel/pcre so this should not make a difference for ports with USE_GNOME=glib20. Also, libdata/pkgconfig/glib-2.0.pc lists pcre as a private library so USE_GNOME=glib20 should not propagate it. PR: 195724 Exp-run by: antoine Approved by: portmgr (antoine)60945f0277
Unbreak py-libxslta40c6c50b5
Simplify plistce89cc9fa0
security/libgcrypt: 1.5.3_3 -> 1.6.1 - Update to 1.6.1 - Remove some unneeded patches - Fix pkg-plist - report configure bug upstream https://bugs.g10code.com/gnupg/issue1668 - report API breakage downstream and find that MacPorts had the same issue https://rt.cpan.org/Ticket/Display.html?id=97201 - bump PORTREVISION for dependent ports (approx. 100 ports) - Thanks to exp-run by antoine@ to find ports that break - patch ports that would otherwise break security/shishi with PR 192164 is already committed [1] devel/ccrtp [2] editors/abiword [3] security/p5-Crypt-GCrypt PR: 191256, 192162 [1], 192163 [2], 192166 [3] Submitted by: Carlos Jacobo Puga Medina <cjpugmed@gmail.com> Approved by: maintainer timeout, antoine (exp-run), portmgr (implicit)b95d127471
Rename all patches that contain '::' as a path separator, and use '__' instead.08a006d08a
Rename textproc/ patch-xy patches to reflect the files they modify.0438fc26f0
Switch to USES=libtool Strip binaries PR: ports/188978 Submitted by: tijl Approved by: kwm (gnome)a36be56561
Bump portrevision for libxml2 shlib change.ed04a3f9a7
- Stage support - Convert to USESc97ab62e12
Add NO_STAGE all over the place in preparation for the staging support (cat: textproc)0068f2d47f
Put faster site first [1], while here add http mirror. PR: ports/178523 [1] Submitted by: Kubilay Kocak <koobs.freebsd@gmail.com>b7e4747e7a
Chase security/libgcrypt update2898e3fa0c