From nobody Tue Dec 02 07:25:01 2025 X-Original-To: desktop@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dLC3248MTz6Jw6J for ; Tue, 02 Dec 2025 07:25:02 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dLC323RRmz3Vvl for ; Tue, 02 Dec 2025 07:25:02 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1764660302; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=CL7bPkp/NUUlfFr+k7+PcVta9MmkvSnSY4k9wrAjzV8=; b=jPR3JAus0RW2h2qhuIUekL1ckzohyiihnqFxE5SSIAhafApYO3/dAEUoiYUasJ/GKe9jLF t/mSajM0MAIA3781Czbd9JeEzpJEXyfUplNmCVCG01vm3U1S3xPD6CJYZPuEzHHAuSTrob YM2t0+00kJI4CN1Txw2y6Qk2EGCA5LQ5Ifrk2uXmOHw3Y3+ZTCsm6kCf1raCzrsfN3MU5Y QFhCJBfHO79xWW0RCDdm32HkbcfFD5JwCwrBL2arwEa7GmknmSphb2O1poRM8jnkybDiCT 8aAZgHQw40oFpWim2NbUgdqj0kEroe+wyYC33SNYUETMGm4W6RNsBqjL30gRhQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1764660302; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=CL7bPkp/NUUlfFr+k7+PcVta9MmkvSnSY4k9wrAjzV8=; b=Cr7bBgUmdOT/SIgDMPKraSnX8Rcmd3y9jW6AsbFGh4LQRti1zSWpKW5FTcHQz8FAWIX9cp hsfJNyuldL8c7MQNLI3mnV8n+xcBzJCFNtn4mMdgihWmCKGH2a+1Z8NbkGIzC38xBYC/MB dYJjlB45NBrPopnzRlFefv7qwOjcvB1XfbcJw+1NCIhkV+GKlG8atRdmJnt+/Q3v+OLm0h ofVEIwgTORkGXFLlICJxokhBDNydc76K4fP4PDRPFFBfY3yjd2YGLfH05o1iNdTLpv6PaJ S/q/6yfzML8PNosqhM6j05HxB2j2xFJMCzxWTtGRKh9EacqqsbHjWA7RoTbb5g== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1764660302; a=rsa-sha256; cv=none; b=E1PDvUP0O1Gc9eKg/Tzx2dhBS3QCOTyYsVaeFrIxt0e9qwNOvttIpWOvtSlixVB8XRLohk cYYLmMsjqL3uANrX6znWqPrMmiwQhe/+FbHT7hanwQ2G5cjLWzOg8mw9IvFgqLKs90oggP 8LqJ9fnI9nLD0lDFW1H4xvYmSkm2CsfOz8pBf7GQumZgYsGeZamSF7j6dbMNKMwKayC+r1 ppUvW8AsoCngHaRDJH4E/8TMdjAPBmcitRALs1lkb84V5RppnfevndwRSufP9OU0jzAMJ/ iYns70emyBAeGQEkU7yCeyYO7VTHVg7eQTbWqHQbznctHPy5mU3M5hu6aJLspA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4dLC322Tvlzxn4 for ; Tue, 02 Dec 2025 07:25:02 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 5B27P1pl006699 for ; Tue, 2 Dec 2025 07:25:01 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 5B27P1eo006697 for desktop@FreeBSD.org; Tue, 2 Dec 2025 07:25:01 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: desktop@FreeBSD.org Subject: [Bug 289213] textproc/libxslt: update to 1.1.45 Date: Tue, 02 Dec 2025 07:25:01 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: vishwin@freebsd.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: desktop@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback+ X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Using and improving FreeBSD on the desktop List-Archive: https://lists.freebsd.org/archives/freebsd-desktop List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-desktop@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D289213 --- Comment #15 from Charlie Li --- Out of the vulnerabilities recorded in vuxml, only one is directly fixed in libxslt >=3D 1.1.44. Another, CVEed only because the reporter was using Deb= ian or Ubuntu that shipped even older libxml2 and libxslt, was found to have been fixed in libxml2 since 2.9.10. Yet another is awaiting confirmation from libxslt maintainer that it is fixed in libxml2, backported to 2.14.6. Leaves one that is still open. Due to these disparate statuses, the vuxml entries = that were bundled together will need redone. There is no point in creating a port patch and attempting to build it any further than the configure failure until libxml2 can be updated to at least 2.15.1. --=20 You are receiving this mail because: You are the assignee for the bug.=