CVS commit: pkgsrc/textproc/libxml2

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sat Sep  5 09:22:38 UTC 2026

Modified Files:
        pkgsrc/textproc/libxml2: Makefile.common distinfo

Log Message:
libxml2: update to 2.15.4.

Security fix release.

v2.15.4: Sep 01 2026

### Security

- xmlregexp: Prevent out-of-bounds read in NXT macro
- fix: add missing overflow checks in dict.c, uri.c, and valid.c
- xmlregexp: Calc string length after null checking
- xpointer: Check overflow in xmlXPtrEvalXPtrPart
- xmlIO: Check for int overflow before calling writecallback
- fix(xinclude): propagate parseFlags in xmlXIncludeProcess and xmlXIncludeProcessTree

### Improvements

- Improve bound checks for xmlcatalog and xmllint arguments (out-of-bound)
- Fix memory leak in static Windows library (memory-leak)
- xmlreader: Copy DTD in xmlTextReaderDumpCopy
- parser: Fix double free in xmlIOParseDTD (double-free)
- parser: fix division-by-zero when maxAmpl is set to 0
- parser: Fix memory leak in xmlCtxtSetSaxHandler (memory-leak)
- catalog: Make sure to reset catalog resolve cache
- xmlAddChild: unlink node before free for text nodes (memory-leak)
- Normalize entity values in attr in xmlNodeGetContent
- Handle whitespace for date/time/duration types
- catalog: Fix NULL deref for nextCatalog without 'catalog' attribute (null-deref)


To generate a diff of this commit:
cvs rdiff -u -r1.32 -r1.33 pkgsrc/textproc/libxml2/Makefile.common
cvs rdiff -u -r1.158 -r1.159 pkgsrc/textproc/libxml2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/textproc/libxml2/Makefile.common
diff -u pkgsrc/textproc/libxml2/Makefile.common:1.32 pkgsrc/textproc/libxml2/Makefile.common:1.33
--- pkgsrc/textproc/libxml2/Makefile.common:1.32        Sat Aug 15 02:24:28 2026
+++ pkgsrc/textproc/libxml2/Makefile.common     Sat Sep  5 09:22:38 2026
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.32 2026/08/15 02:24:28 wiz Exp $
+# $NetBSD: Makefile.common,v 1.33 2026/09/05 09:22:38 wiz Exp $
 #
 # used by textproc/libxml2/Makefile
 # used by textproc/py-libxml2/Makefile
 
-DISTNAME=      libxml2-2.15.3
+DISTNAME=      libxml2-2.15.4
 CATEGORIES=    textproc
 MASTER_SITES=  ${MASTER_SITE_GNOME:=sources/libxml2/${PKGVERSION_NOREV:R}/}
 EXTRACT_SUFX=  .tar.xz
@@ -13,3 +13,5 @@ HOMEPAGE=     https://gitlab.gnome.org/GNOME
 
 DISTINFO_FILE= ${.CURDIR}/../../textproc/libxml2/distinfo
 PATCHDIR=      ${.CURDIR}/../../textproc/libxml2/patches
+
+USE_TOOLS+=    pkg-config

Index: pkgsrc/textproc/libxml2/distinfo
diff -u pkgsrc/textproc/libxml2/distinfo:1.158 pkgsrc/textproc/libxml2/distinfo:1.159
--- pkgsrc/textproc/libxml2/distinfo:1.158      Sat Aug 15 02:24:28 2026
+++ pkgsrc/textproc/libxml2/distinfo    Sat Sep  5 09:22:38 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.158 2026/08/15 02:24:28 wiz Exp $
+$NetBSD: distinfo,v 1.159 2026/09/05 09:22:38 wiz Exp $
 
-BLAKE2s (libxml2-2.15.3.tar.xz) = b770d0d524330ec9bb0c319f751bc4a4f0376aaff51d30bf35a7e28205292f86
-SHA512 (libxml2-2.15.3.tar.xz) = 6f7f1aabd012454553e851bd1ee548fbd14d21c576f2b2ab9eeedab3dfba51392083f74b34f060e9b538baeea212cdb462b8669c214c711771fb9a897fdc1c60
-Size (libxml2-2.15.3.tar.xz) = 3152452 bytes
+BLAKE2s (libxml2-2.15.4.tar.xz) = e2deff0a536cae3d337df790988604787fe3eeaa1147ebb3aa45c2167fd9eab6
+SHA512 (libxml2-2.15.4.tar.xz) = e162ed16ad6fb6c6ef1c40c6bed66a5f76db177fc24410cc261c9ddc6b19e9b003315db67f67cbcadaf08e546f0672de87bf6f297014af50fe544a781647f584
+Size (libxml2-2.15.4.tar.xz) = 3177444 bytes
 SHA1 (patch-configure) = 1f94becea5804e89d32b4e600753aa4dc7527045