CVS commit: pkgsrc/textproc/libxslt

["Nia Alarie" <nia%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   nia
Date:           Mon May 26 10:54:49 UTC 2025

Modified Files:
        pkgsrc/textproc/libxslt: Makefile Makefile.common distinfo

Log Message:
libxslt: Update to 1.1.43

This release fixes:

- [CVE-2025-24855] Fix use-after-free of XPath context node
- [CVE-2024-55549] Fix UAF related to excluded namespaces

This release disables plugins and gcrypt support by default with
the intention of removing them in a future release. For now, keep
these enabled in pkgsrc so that these fixes can be backported without
breaking compatibility.

The remainder of the changes seem to be code cleanup.


To generate a diff of this commit:
cvs rdiff -u -r1.140 -r1.141 pkgsrc/textproc/libxslt/Makefile
cvs rdiff -u -r1.11 -r1.12 pkgsrc/textproc/libxslt/Makefile.common
cvs rdiff -u -r1.74 -r1.75 pkgsrc/textproc/libxslt/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/textproc/libxslt/Makefile
diff -u pkgsrc/textproc/libxslt/Makefile:1.140 pkgsrc/textproc/libxslt/Makefile:1.141
--- pkgsrc/textproc/libxslt/Makefile:1.140      Thu Apr 17 21:52:36 2025
+++ pkgsrc/textproc/libxslt/Makefile    Mon May 26 10:54:49 2025
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.140 2025/04/17 21:52:36 wiz Exp $
+# $NetBSD: Makefile,v 1.141 2025/05/26 10:54:49 nia Exp $
 
 PKGREVISION= 4
 .include "Makefile.common"
@@ -38,6 +38,10 @@ CONFIGURE_ARGS+=     LIBGCRYPT_CONFIG=${CROS
 CONFIGURE_ARGS+=       XML_CONFIG=${CROSS_DESTDIR:Q}${LOCALBASE:Q}/bin/xml2-config
 .endif
 
+# matching old build system defaults
+CONFIGURE_ARGS+=       --with-crypto
+CONFIGURE_ARGS+=       --with-plugins
+
 .include "../../security/libgcrypt/buildlink3.mk"
 BUILDLINK_API_DEPENDS.libxml2+=        libxml2>=2.6.27
 .include "../../textproc/libxml2/buildlink3.mk"

Index: pkgsrc/textproc/libxslt/Makefile.common
diff -u pkgsrc/textproc/libxslt/Makefile.common:1.11 pkgsrc/textproc/libxslt/Makefile.common:1.12
--- pkgsrc/textproc/libxslt/Makefile.common:1.11        Sun Jul  7 15:19:32 2024
+++ pkgsrc/textproc/libxslt/Makefile.common     Mon May 26 10:54:49 2025
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.11 2024/07/07 15:19:32 gutteridge Exp $
+# $NetBSD: Makefile.common,v 1.12 2025/05/26 10:54:49 nia Exp $
 #
 # used by textproc/libxslt/Makefile
 # used by textproc/py-libxslt/Makefile
 
-DISTNAME=      libxslt-1.1.42
+DISTNAME=      libxslt-1.1.43
 CATEGORIES=    textproc
 MASTER_SITES=  ${MASTER_SITE_GNOME:=sources/libxslt/${PKGVERSION_NOREV:R}/}
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/textproc/libxslt/distinfo
diff -u pkgsrc/textproc/libxslt/distinfo:1.74 pkgsrc/textproc/libxslt/distinfo:1.75
--- pkgsrc/textproc/libxslt/distinfo:1.74       Sun Jul  7 15:19:32 2024
+++ pkgsrc/textproc/libxslt/distinfo    Mon May 26 10:54:49 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.74 2024/07/07 15:19:32 gutteridge Exp $
+$NetBSD: distinfo,v 1.75 2025/05/26 10:54:49 nia Exp $
 
-BLAKE2s (libxslt-1.1.42.tar.xz) = 6a61c55bd5ac6cbbfd058eb85759e357c7c167aa5c84825d713e9a00dbaaae70
-SHA512 (libxslt-1.1.42.tar.xz) = 02a2189b6cd65fa1fb929fc0e6868bc046bdd8827849f0048cdf9267ed9450745158cef0f2713a833e28fb520b312ff86dc5754dd423ce768c457bfd8812bdc7
-Size (libxslt-1.1.42.tar.xz) = 1573668 bytes
+BLAKE2s (libxslt-1.1.43.tar.xz) = f5b46cbf27816b93b69f155844d0d08e7b1a2c35b5836012fa48e07f9a347435
+SHA512 (libxslt-1.1.43.tar.xz) = 96110b0397a8f5791f489127574e2143845feb61bea0581d7b7e3c1101fd0718483bae81a7ce417b971bd678293bfd95daddad0dadd3e256c87d41a69faed85a
+Size (libxslt-1.1.43.tar.xz) = 1518364 bytes