Bug 279043 - textproc/libxml2: Update to 2.11.8
Summary: textproc/libxml2: Update to 2.11.8
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Daniel Engberg
URL: https://gitlab.gnome.org/GNOME/libxml...
Keywords:
Depends on:
Blocks:
 
Reported: 2024-05-16 20:54 UTC by Daniel Engberg
Modified: 2024-05-26 07:15 UTC (History)
3 users (show)

See Also:
tcberner: maintainer-feedback+
antoine: exp-run+

Attachments
Patch for libxml2 (891 bytes, patch)
2024-05-16 20:54 UTC, Daniel Engberg 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Daniel Engberg freebsd_committer freebsd_triage 2024-05-16 20:54:25 UTC 
Created attachment 250706 [details]
Patch for libxml2

Compile and runtime tested on FreeBSD 14.0-RELEASE (amd64) (make, make check-plist, make test)
Poudriere testport OK 14.0-RELEASE (amd64)
Poudriere testport OK 13.2-RELEASE (amd64)
Comment 1 Daniel Engberg freebsd_committer freebsd_triage 2024-05-16 20:55:12 UTC 
Hi,

I'd like to request an exp-run (a small one I've run locally looks fine)

Best regards,
Daniel
Comment 2 Yokomichi 2024-05-19 03:49:56 UTC 
libxml2 2.11.8 fixes a CVE: 
[CVE-2024-34459] Fix buffer overread with xmllint --htmlout 
So I also request an exp-run.

changelog: 
https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.8
Comment 3 Antoine Brodin freebsd_committer freebsd_triage 2024-05-20 06:40:35 UTC 
Exp-run looks fine
Comment 4 Tobias C. Berner freebsd_committer freebsd_triage 2024-05-22 05:08:20 UTC 
Lgtm, thanks.
Comment 5 commit-hook freebsd_committer freebsd_triage 2024-05-26 07:10:51 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=d3ef7b30bd225abb397346cc50204dd3a90227fd

commit d3ef7b30bd225abb397346cc50204dd3a90227fd
Author:     Daniel Engberg <diizzy@FreeBSD.org>
AuthorDate: 2024-05-26 07:01:49 +0000
Commit:     Daniel Engberg <diizzy@FreeBSD.org>
CommitDate: 2024-05-26 07:09:15 +0000

    textproc/libxml2: Update to 2.11.8

    Fixes CVE-2024-34459

    Reference:
    https://www.cve.org/CVERecord?id=CVE-2024-34459

    Changelog:
    https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.8

    PR:             279043
    Approved by:    desktop (tcberner)
    Sponsored by:   Blinkinblox
    Exp-run by:     antoine

 textproc/libxml2/Makefile | 2 +-
 textproc/libxml2/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)
Comment 6 Daniel Engberg freebsd_committer freebsd_triage 2024-05-26 07:15:01 UTC 
Thanks!