Re: git: 11d181b834f2 - main - textproc/libxslt: update to 1.1.43

14.05.2025 02:27, Charlie Li пишет:
> The branch main has been updated by vishwin:
>
> URL: https://cgit.FreeBSD.org/ports/commit/?id=11d181b834f29d60d8ce03734eed1bf1eab35072
>
> commit 11d181b834f29d60d8ce03734eed1bf1eab35072
> Author:     Charlie Li <vishwin@FreeBSD.org>
> AuthorDate: 2025-05-13 23:23:07 +0000
> Commit:     Charlie Li <vishwin@FreeBSD.org>
> CommitDate: 2025-05-13 23:23:07 +0000
>
>      textproc/libxslt: update to 1.1.43
>      
>      Changelog: https://gitlab.gnome.org/GNOME/libxslt/-/blob/v1.1.43/NEWS
>      
>      Fixes CVE-2024-55549 and CVE-2025-24855
>      
>      Upstream have disabled CRYPTO and (new OPTION) PLUGINS by default,
>      as they will be removed in a future version, but the port continues
>      to have them enabled by default until at least the next update.
>      
>      Reported by: ngie
>      Security: a96cd659-303e-11f0-94b5-54ee755069b5
>      PR: 286782
> ---
>   textproc/libxslt/Makefile  | 12 ++++++------
>   textproc/libxslt/distinfo  |  8 +++-----
>   textproc/libxslt/pkg-plist |  4 ++--
>   3 files changed, 11 insertions(+), 13 deletions(-)
>
> diff --git a/textproc/libxslt/Makefile b/textproc/libxslt/Makefile
> index 17dc9fcb9408..2c25f7954b6c 100644
> --- a/textproc/libxslt/Makefile
> +++ b/textproc/libxslt/Makefile
> @@ -1,12 +1,9 @@
>   PORTNAME=	libxslt
> -DISTVERSION=	1.1.42
> +DISTVERSION=	1.1.43
>   CATEGORIES=	textproc gnome
>   MASTER_SITES=	GNOME/sources/${PORTNAME}/${DISTVERSION:R}/
>   DIST_SUBDIR=	gnome
>   
> -PATCH_SITES=	https://gitlab.gnome.org/GNOME/libxslt/-/commit/
> -PATCHFILES=	bf59c338121b8b45d66ba6ecea69ad498015c396.patch:-p1
> -
>   MAINTAINER=	desktop@FreeBSD.org
>   COMMENT=	XML stylesheet transformation library
>   WWW=		https://gitlab.gnome.org/GNOME/libxslt/
> @@ -27,16 +24,19 @@ TEST_TARGET=	check
>   
>   PLIST_SUB=	LIBVERSION=${PORTVERSION}
>   
> -OPTIONS_DEFINE=	CRYPTO STATIC
> -OPTIONS_DEFAULT=	CRYPTO STATIC
> +OPTIONS_DEFINE=	CRYPTO PLUGINS STATIC
> +OPTIONS_DEFAULT=	CRYPTO PLUGINS STATIC
>   OPTIONS_SUB=		yes
>   
>   CRYPTO_DESC=	Enable crypto support
> +PLUGINS_DESC=	Enable dynamically-loaded plugins support
>   
>   CRYPTO_LIB_DEPENDS=	libgcrypt.so:security/libgcrypt \
>   			libgpg-error.so:security/libgpg-error
>   CRYPTO_CONFIGURE_WITH=	crypto
>   
> +PLUGINS_CONFIGURE_WITH=	plugins
> +
>   STATIC_CONFIGURE_ENABLE=	static
>   
>   .include <bsd.port.mk>
> diff --git a/textproc/libxslt/distinfo b/textproc/libxslt/distinfo
> index 82c1f45643e7..164bc0aab94d 100644
> --- a/textproc/libxslt/distinfo
> +++ b/textproc/libxslt/distinfo
> @@ -1,5 +1,3 @@
> -TIMESTAMP = 1740975033
> -SHA256 (gnome/libxslt-1.1.42.tar.xz) = 85ca62cac0d41fc77d3f6033da9df6fd73d20ea2fc18b0a3609ffb4110e1baeb
> -SIZE (gnome/libxslt-1.1.42.tar.xz) = 1573668
> -SHA256 (gnome/bf59c338121b8b45d66ba6ecea69ad498015c396.patch) = 6acb468675339f3d882fb8180608977625f9eded1e9653387833e23212bf9d3c
> -SIZE (gnome/bf59c338121b8b45d66ba6ecea69ad498015c396.patch) = 8454
> +TIMESTAMP = 1747170090
> +SHA256 (gnome/libxslt-1.1.43.tar.xz) = 5a3d6b383ca5afc235b171118e90f5ff6aa27e9fea3303065231a6d403f0183a
> +SIZE (gnome/libxslt-1.1.43.tar.xz) = 1518364
> diff --git a/textproc/libxslt/pkg-plist b/textproc/libxslt/pkg-plist
> index ce3d8ff24fa5..05b5430a3085 100644
> --- a/textproc/libxslt/pkg-plist
> +++ b/textproc/libxslt/pkg-plist
> @@ -29,7 +29,7 @@ lib/cmake/libxslt/libxslt-config.cmake
>   %%STATIC%%lib/libexslt.a
>   lib/libexslt.so
>   lib/libexslt.so.0
> -lib/libexslt.so.0.8.23
> +lib/libexslt.so.0.8.24
>   %%STATIC%%lib/libxslt.a
>   lib/libxslt.so
>   lib/libxslt.so.1
> @@ -78,4 +78,4 @@ share/gtk-doc/html/libxslt/up.png
>   share/man/man1/xsltproc.1.gz
>   share/man/man3/libexslt.3.gz
>   share/man/man3/libxslt.3.gz
> -@dir lib/libxslt-plugins
> +%%PLUGINS%%@dir lib/libxslt-plugins

Hello!

Fails in poudriere and on live system:
===> Missing license file for MIT in 
/wrkdirs/usr/ports/textproc/libxslt/work/libxslt-1.1.43/COPYING
*** Error code 1

-- 
Best regards,
Vladimir Druzenko