https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291316

--- Comment #62 from [email protected] ---
A commit in branch 2026Q1 references this bug:

URL:
https://cgit.FreeBSD.org/ports/commit/?id=87a0c21fa5687cc9020f2a94c02fef2721e8f1d9

commit 87a0c21fa5687cc9020f2a94c02fef2721e8f1d9
Author:     Charlie Li <[email protected]>
AuthorDate: 2026-01-27 02:13:49 +0000
Commit:     Charlie Li <[email protected]>
CommitDate: 2026-01-27 02:43:01 +0000

    textproc/libxml2: update to 2.15.1

    Changelog: https://gitlab.gnome.org/GNOME/libxml2/-/blob/2.15/NEWS

    Notably, all documentation generation requires a circular dependency
    on textproc/libxslt. While the API documentation, in HTML, lives
    on the upstream site [0], the man pages are now pre-rendered manually.

    Also includes an upstream commit addressing unsafe pointer usage
    in XPath, leading to security bugs in consumers like libxslt
    (CVE-2025-10911). [1]

    Mark the -python child port DEPRECATED without expiration date since
    upstream has not provided a firm one yet, particularly the release
    schedule for the next major version 2.16.

    [0] https://gnome.pages.gitlab.gnome.org/libxml2/html/index.html
    [1]
https://gitlab.gnome.org/GNOME/libxml2/-/commit/0e50b31902cdb1eb242eb361c123e9e033b2af87

    Event: Snowstorm Special January 2026
    With hat: desktop
    PR: 291316

    (cherry picked from commit fc6c145ef01c3418d7db4e7be89310d3f6225171)

 textproc/libxml2-python/Makefile           |  13 +-
 textproc/libxml2/Makefile                  |  40 +-
 textproc/libxml2/distinfo                  |   8 +-
 textproc/libxml2/files/xml2-config.1 (new) |  32 ++
 textproc/libxml2/files/xmlcatalog.1 (new)  | 355 ++++++++++++++++
 textproc/libxml2/files/xmllint.1 (new)     | 656 +++++++++++++++++++++++++++++
 textproc/libxml2/pkg-plist                 |  64 +--
 7 files changed, 1083 insertions(+), 85 deletions(-)

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Reply via email to