Bug 264437 - security/vuxml: Cannot validate entry: error: xmlAddEntity: invalid redeclaration of predefined entity
Summary: security/vuxml: Cannot validate entry: error: xmlAddEntity: invalid redeclara...
Status: Open
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Some People
Assignee: Ports Security Team
URL: https://blog.sonarsource.com/horde-we...
Keywords: needs-qa, security
Depends on:
Blocks:
 
Reported: 2022-06-03 16:04 UTC by Thierry Thomas
Modified: 2022-10-14 11:32 UTC (History)
2 users (show)

See Also:
bugzilla: maintainer-feedback? (ports-secteam)

Attachments
CVE-2022-30287 for phpxx-horde-turba (2.50 KB, patch)
2022-06-03 16:04 UTC, Thierry Thomas 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Thierry Thomas freebsd_committer freebsd_triage 2022-06-03 16:04:26 UTC 
Created attachment 234423 [details]
CVE-2022-30287 for phpxx-horde-turba

Trying to run `make validate' after applying the attached patch for a vulnerability in Turba displays the following error:

xmllint -noent /usr/ports/security/vuxml/vuln.xml > /usr/ports/security/vuxml/vuln-flat.xml
/bin/sh /usr/ports/security/vuxml/files/tidy.sh "/usr/ports/security/vuxml/files/tidy.xsl" "/usr/ports/security/vuxml/vuln-flat.xml" > "/usr/ports/security/vuxml/vuln.xml.tidy"
>>> Validating...
/usr/local/bin/xmllint --valid --noout /usr/ports/security/vuxml/vuln-flat.xml
error : xmlAddEntity: invalid redeclaration of predefined entity
error : xmlAddEntity: invalid redeclaration of predefined entity
>>> Successful.
Checking if tidy differs...
... seems okay
Checking for space/tab...
... seems okay
/usr/local/bin/python3.8 /usr/ports/security/vuxml/files/extra-validation.py /usr/ports/security/vuxml/vuln-flat.xml

I guess that this is caused by an error in my entry, but I cannot spot it…

Could you please fix it and commit it?
Comment 1 Kubilay Kocak freebsd_committer freebsd_triage 2022-06-03 23:38:24 UTC 
@Thierry Please link relevent ports issue ID's (if any)
Comment 2 Thierry Thomas freebsd_committer freebsd_triage 2022-06-04 06:03:07 UTC 
(In reply to Kubilay Kocak from comment #1)
Some work-arounds have been proposed, but upstream has not yet released an official fix.