Bug 222893 - textproc/libxml2: update to 2.9.7
Summary: textproc/libxml2: update to 2.9.7
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: freebsd-gnome (Nobody)
URL:
Keywords:
Depends on: 224189
Blocks:
  Show dependency tree / graph
 
Reported: 2017-10-10 06:51 UTC by Walter Hop
Modified: 2017-12-13 14:53 UTC (History)
1 user (show)

See Also:
bugzilla: maintainer-feedback? (gnome)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Walter Hop 2017-10-10 06:51:49 UTC 
Our textproc/libxml2 in ports is at 2.9.4.

On Sep 4, 2.9.5 was released with some security fixes, from http://xmlsoft.org/news.html:

Security:
Detect infinite recursion in parameter entities (Nick Wellnhofer),
Fix handling of parameter-entity references (Nick Wellnhofer),
Disallow namespace nodes in XPointer ranges (Nick Wellnhofer),
Fix XPointer paths beginning with range-to (Nick Wellnhofer)

On Oct 6, 2.9.6 was released with some more fixes.

Since libxml2 may parse untrusted input, a port update would be very welcome.
Comment 1 commit-hook freebsd_committer freebsd_triage 2017-12-13 14:47:07 UTC 
A commit references this bug:

Author: swills
Date: Wed Dec 13 14:46:45 UTC 2017
New revision: 456210
URL: https://svnweb.freebsd.org/changeset/ports/456210

Log:
  textproc/libxml2: update to 2.9.7

  PR:		222893
  PR:		224189
  Reported by:	Walter Hop <walter@lifeforms.nl>
  Approved by:	gnome@ (kwm)
  Exp-run by:	antoine
  MFH:		2017Q4
  Security:	76e59f55-4f7a-4887-bcb0-11604004163a

Changes:
  head/textproc/libxml2/Makefile
  head/textproc/libxml2/distinfo
  head/textproc/libxml2/files/patch-d8083bf
Comment 2 commit-hook freebsd_committer freebsd_triage 2017-12-13 14:49:15 UTC 
A commit references this bug:

Author: swills
Date: Wed Dec 13 14:48:17 UTC 2017
New revision: 456211
URL: https://svnweb.freebsd.org/changeset/ports/456211

Log:
  MFH: r456210

  textproc/libxml2: update to 2.9.7

  PR:		222893
  PR:		224189
  Reported by:	Walter Hop <walter@lifeforms.nl>
  Approved by:	gnome@ (kwm)
  Exp-run by:	antoine
  Security:	76e59f55-4f7a-4887-bcb0-11604004163a
  Approved by:	ports-secteam (implicit)

Changes:
_U  branches/2017Q4/
  branches/2017Q4/textproc/libxml2/Makefile
  branches/2017Q4/textproc/libxml2/distinfo
  branches/2017Q4/textproc/libxml2/files/patch-d8083bf
Comment 3 Steve Wills freebsd_committer freebsd_triage 2017-12-13 14:53:17 UTC 
Updated and merged to quarterly, thanks for the heads up.