From 0caae05a2a277d86c5067f6f3768a81ae701bbc0 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Sat, 14 Mar 2026 13:23:26 +0100 Subject: [PATCH] package/libxml2: security bump version to 2.15.2 Release notes: https://download.gnome.org/sources/libxml2/2.15/libxml2-2.15.2.news - CVE-2026-1757 fix: Memory leak in xmllint Shell - shell.c - CVE-2026-0990 fix: Prevent infinite recursion in xmlCatalogListXMLResolve - CVE-2026-0992 fix: Exponential behavior when handling - parser: Fix infinite loop in xmlCtxtParseContent - CVE-2025-10911 libxslt related: Ignore next/prev of documents when traversing XPath - CVE-2026-0989 fix: Add RelaxNG include limit Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain (cherry picked from commit 4d4dc5f54235c83ce3bc676edc674cae68b66371) Signed-off-by: Thomas Perale --- ...evert-cmake-Fix-installation-directories-in-libxml2.patch | 5 +++-- package/libxml2/libxml2.hash | 4 ++-- package/libxml2/libxml2.mk | 2 +- 3 files changed, 6 insertions(+), 5 deletions(-) diff --git a/package/libxml2/0001-Revert-cmake-Fix-installation-directories-in-libxml2.patch b/package/libxml2/0001-Revert-cmake-Fix-installation-directories-in-libxml2.patch index 75232b6f00..70f1d9899c 100644 --- a/package/libxml2/0001-Revert-cmake-Fix-installation-directories-in-libxml2.patch +++ b/package/libxml2/0001-Revert-cmake-Fix-installation-directories-in-libxml2.patch @@ -8,6 +8,7 @@ This reverts commit 75dde50b20215a2a3a445b62f36a67c8ed337cab. Upstream: https://gitlab.gnome.org/GNOME/libxml2/-/issues/898#note_2452864 +[Bernd: rebased for 2.15.2] Signed-off-by: Bernd Kuhls --- configure.ac | 11 ----------- @@ -19,7 +20,7 @@ diff --git a/configure.ac b/configure.ac index 4eb629bb..150e06eb 100644 --- a/configure.ac +++ b/configure.ac -@@ -1006,17 +1006,6 @@ AC_SUBST(XML_PRIVATE_LIBS) +@@ -1008,17 +1008,6 @@ AC_SUBST(XML_PRIVATE_LIBS) AC_SUBST(XML_PRIVATE_CFLAGS) AC_SUBST(XML_INCLUDEDIR) @@ -70,7 +71,7 @@ diff --git a/meson.build b/meson.build index 31c73b62..8728852c 100644 --- a/meson.build +++ b/meson.build -@@ -577,9 +577,6 @@ config_cmake = configuration_data() +@@ -590,9 +590,6 @@ config_cmake = configuration_data() config_cmake.set('LIBXML_MAJOR_VERSION', v_maj) config_cmake.set('LIBXML_MINOR_VERSION', v_min) config_cmake.set('LIBXML_MICRO_VERSION', v_mic) diff --git a/package/libxml2/libxml2.hash b/package/libxml2/libxml2.hash index 637ba52bb8..35c8810ed9 100644 --- a/package/libxml2/libxml2.hash +++ b/package/libxml2/libxml2.hash @@ -1,4 +1,4 @@ -# From https://download.gnome.org/sources/libxml2/2.15/libxml2-2.15.1.sha256sum -sha256 c008bac08fd5c7b4a87f7b8a71f283fa581d80d80ff8d2efd3b26224c39bc54c libxml2-2.15.1.tar.xz +# From https://download.gnome.org/sources/libxml2/2.15/libxml2-2.15.2.sha256sum +sha256 c8b9bc81f8b590c33af8cc6c336dbff2f53409973588a351c95f1c621b13d09d libxml2-2.15.2.tar.xz # License files, locally calculated sha256 5d4873884a890122a4b9b20ad56ac6f7da1d796a5bfcf04a427970ac96217626 Copyright diff --git a/package/libxml2/libxml2.mk b/package/libxml2/libxml2.mk index 35d373e130..0a365fa689 100644 --- a/package/libxml2/libxml2.mk +++ b/package/libxml2/libxml2.mk @@ -5,7 +5,7 @@ ################################################################################ LIBXML2_VERSION_MAJOR = 2.15 -LIBXML2_VERSION = $(LIBXML2_VERSION_MAJOR).1 +LIBXML2_VERSION = $(LIBXML2_VERSION_MAJOR).2 LIBXML2_SOURCE = libxml2-$(LIBXML2_VERSION).tar.xz LIBXML2_SITE = \ https://download.gnome.org/sources/libxml2/$(LIBXML2_VERSION_MAJOR)