git: d820a7f60293 - 2026Q3 - textproc/groff: Security update 1.24.1 => 1.24.2 (CWE-78)

From: Älven <alven_at_FreeBSD.org>
Date: Tue, 29 Sep 2026 09:11:38 UTC
The branch 2026Q3 has been updated by alven:

URL: https://cgit.FreeBSD.org/ports/commit/?id=d820a7f6029354a60447131c9a58e83738a361cb

commit d820a7f6029354a60447131c9a58e83738a361cb
Author:     Älven <alven@FreeBSD.org>
AuthorDate: 2026-09-29 08:42:13 +0000
Commit:     Älven <alven@FreeBSD.org>
CommitDate: 2026-09-29 09:10:37 +0000

    textproc/groff: Security update 1.24.1 => 1.24.2 (CWE-78)
    
    This release resolves the following issues in the GNU Savannah ticket
    tracker.
    
    bug #68689: [PATCH] [mm] `mmroff` vulnerable to command injection (CWE-78)
    bug #68688: [PATCH] [grohtml] `pre-grohtml` vulnerable to command injection (CWE-78)
    bug #68687: [PATCH] [pdfmom] vulnerable to command injection (CWE-78)
    bug #68152: [gxditview] SEGVs when invoked with no arguments
    
    WWW:            https://lists.gnu.org/archive/html/info-groff/2026-09/msg00000.html
    MFH:            2026Q3
    (cherry picked from commit ec5b9d646d4ab9334f3a41b4fb2fbae215420448)
---
 textproc/groff/Makefile | 5 ++---
 textproc/groff/distinfo | 6 +++---
 2 files changed, 5 insertions(+), 6 deletions(-)

diff --git a/textproc/groff/Makefile b/textproc/groff/Makefile
index 3b41a61fed3c..ad8ed8c6ed22 100644
--- a/textproc/groff/Makefile
+++ b/textproc/groff/Makefile
@@ -1,6 +1,5 @@
 PORTNAME=	groff
-DISTVERSION=	1.24.1
-PORTREVISION=	1
+DISTVERSION=	1.24.2
 CATEGORIES=	textproc
 MASTER_SITES=	GNU
 
@@ -53,7 +52,7 @@ UCHARDET_USES=		pkgconfig
 UCHARDET_CONFIGURE_OFF=	--with-uchardet=no
 
 post-install:
-	${INSTALL_DATA} ${FILESDIR}/mdoc.local ${STAGEDIR}${PREFIX}/share/groff/site-tmac
+	${INSTALL_DATA} ${FILESDIR}/mdoc.local ${STAGEDIR}${DATADIR}/site-tmac
 	${REINPLACE_CMD} -i "" -e "s/missing/gs/" ${STAGEDIR}${DATADIR}/font/devhtml/DESC
 	${RLN} . ${STAGEDIR}${DATADIR}/current
 
diff --git a/textproc/groff/distinfo b/textproc/groff/distinfo
index d615b619cbdf..8d04643b2cdc 100644
--- a/textproc/groff/distinfo
+++ b/textproc/groff/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1773509866
-SHA256 (groff-1.24.1.tar.gz) = 74e2819795b6aff431aeac983d63a9c8968eeaba2a2eba7df8ba4c7b41e7cfd8
-SIZE (groff-1.24.1.tar.gz) = 9005760
+TIMESTAMP = 1790670901
+SHA256 (groff-1.24.2.tar.gz) = f9c1efd5bebbe37fc6e1063db7473ce8df1e3e0be4ff0f43ce04fce57e9c5dd9
+SIZE (groff-1.24.2.tar.gz) = 9016185