CVS commit: [pkgsrc-2025Q1] pkgsrc/textproc/libxslt

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Mon May 26 14:17:00 UTC 2025

Modified Files:
        pkgsrc/textproc/libxslt [pkgsrc-2025Q1]: Makefile Makefile.common
            distinfo

Log Message:
Pullup ticket #6967 - requested by nia
textproc/libxslt: Security fix

Revisions pulled up:
- textproc/libxslt/Makefile                                     1.141
- textproc/libxslt/Makefile.common                              1.12
- textproc/libxslt/distinfo                                     1.75

---
   Module Name: pkgsrc
   Committed By:        nia
   Date:                Mon May 26 10:54:49 UTC 2025

   Modified Files:
        pkgsrc/textproc/libxslt: Makefile Makefile.common distinfo

   Log Message:
   libxslt: Update to 1.1.43

   This release fixes:

   - [CVE-2025-24855] Fix use-after-free of XPath context node
   - [CVE-2024-55549] Fix UAF related to excluded namespaces

   This release disables plugins and gcrypt support by default with
   the intention of removing them in a future release. For now, keep
   these enabled in pkgsrc so that these fixes can be backported without
   breaking compatibility.

   The remainder of the changes seem to be code cleanup.


To generate a diff of this commit:
cvs rdiff -u -r1.137 -r1.137.2.1 pkgsrc/textproc/libxslt/Makefile
cvs rdiff -u -r1.11 -r1.11.6.1 pkgsrc/textproc/libxslt/Makefile.common
cvs rdiff -u -r1.74 -r1.74.6.1 pkgsrc/textproc/libxslt/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/textproc/libxslt/Makefile
diff -u pkgsrc/textproc/libxslt/Makefile:1.137 pkgsrc/textproc/libxslt/Makefile:1.137.2.1
--- pkgsrc/textproc/libxslt/Makefile:1.137      Sun Feb  9 00:28:20 2025
+++ pkgsrc/textproc/libxslt/Makefile    Mon May 26 14:17:00 2025
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.137 2025/02/09 00:28:20 rillig Exp $
+# $NetBSD: Makefile,v 1.137.2.1 2025/05/26 14:17:00 maya Exp $
 
 PKGREVISION= 3
 .include "Makefile.common"
@@ -38,6 +38,10 @@ CONFIGURE_ARGS+=     LIBGCRYPT_CONFIG=${CROS
 CONFIGURE_ARGS+=       XML_CONFIG=${CROSS_DESTDIR:Q}${LOCALBASE:Q}/bin/xml2-config
 .endif
 
+# matching old build system defaults
+CONFIGURE_ARGS+=       --with-crypto
+CONFIGURE_ARGS+=       --with-plugins
+
 .include "../../security/libgcrypt/buildlink3.mk"
 BUILDLINK_API_DEPENDS.libxml2+=        libxml2>=2.6.27
 .include "../../textproc/libxml2/buildlink3.mk"

Index: pkgsrc/textproc/libxslt/Makefile.common
diff -u pkgsrc/textproc/libxslt/Makefile.common:1.11 pkgsrc/textproc/libxslt/Makefile.common:1.11.6.1
--- pkgsrc/textproc/libxslt/Makefile.common:1.11        Sun Jul  7 15:19:32 2024
+++ pkgsrc/textproc/libxslt/Makefile.common     Mon May 26 14:17:00 2025
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.11 2024/07/07 15:19:32 gutteridge Exp $
+# $NetBSD: Makefile.common,v 1.11.6.1 2025/05/26 14:17:00 maya Exp $
 #
 # used by textproc/libxslt/Makefile
 # used by textproc/py-libxslt/Makefile
 
-DISTNAME=      libxslt-1.1.42
+DISTNAME=      libxslt-1.1.43
 CATEGORIES=    textproc
 MASTER_SITES=  ${MASTER_SITE_GNOME:=sources/libxslt/${PKGVERSION_NOREV:R}/}
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/textproc/libxslt/distinfo
diff -u pkgsrc/textproc/libxslt/distinfo:1.74 pkgsrc/textproc/libxslt/distinfo:1.74.6.1
--- pkgsrc/textproc/libxslt/distinfo:1.74       Sun Jul  7 15:19:32 2024
+++ pkgsrc/textproc/libxslt/distinfo    Mon May 26 14:17:00 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.74 2024/07/07 15:19:32 gutteridge Exp $
+$NetBSD: distinfo,v 1.74.6.1 2025/05/26 14:17:00 maya Exp $
 
-BLAKE2s (libxslt-1.1.42.tar.xz) = 6a61c55bd5ac6cbbfd058eb85759e357c7c167aa5c84825d713e9a00dbaaae70
-SHA512 (libxslt-1.1.42.tar.xz) = 02a2189b6cd65fa1fb929fc0e6868bc046bdd8827849f0048cdf9267ed9450745158cef0f2713a833e28fb520b312ff86dc5754dd423ce768c457bfd8812bdc7
-Size (libxslt-1.1.42.tar.xz) = 1573668 bytes
+BLAKE2s (libxslt-1.1.43.tar.xz) = f5b46cbf27816b93b69f155844d0d08e7b1a2c35b5836012fa48e07f9a347435
+SHA512 (libxslt-1.1.43.tar.xz) = 96110b0397a8f5791f489127574e2143845feb61bea0581d7b7e3c1101fd0718483bae81a7ce417b971bd678293bfd95daddad0dadd3e256c87d41a69faed85a
+Size (libxslt-1.1.43.tar.xz) = 1518364 bytes