From 50954cc5e00e8ba1ad0768c9f45aabd8a2897eff Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Mon, 13 Oct 2025 23:09:40 +0200 Subject: [PATCH] package/libxslt: security bump version to 1.1.43 Release notes: https://download.gnome.org/sources/libxslt/1.1/libxslt-1.1.43.news Fixes CVE-2025-24855 & CVE-2024-55549. Switched _LICENSE_FILES to Copyright due to upstream commit https://gitlab.gnome.org/GNOME/libxslt/-/commit/29938a64f6449aceb3e97a9e8da10abe2e27a314 in version 1.1.36 and the removal of COPYING in the 1.1.43 tarball, although COPYING did still exist in the 1.1.42 tarball. Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain --- package/libxslt/libxslt.hash | 6 +++--- package/libxslt/libxslt.mk | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package/libxslt/libxslt.hash b/package/libxslt/libxslt.hash index dd67940c8a..98c68eded1 100644 --- a/package/libxslt/libxslt.hash +++ b/package/libxslt/libxslt.hash @@ -1,5 +1,5 @@ -# From https://download.gnome.org/sources/libxslt/1.1/libxslt-1.1.42.sha256sum -sha256 85ca62cac0d41fc77d3f6033da9df6fd73d20ea2fc18b0a3609ffb4110e1baeb libxslt-1.1.42.tar.xz +# From https://download.gnome.org/sources/libxslt/1.1/libxslt-1.1.43.sha256sum +sha256 5a3d6b383ca5afc235b171118e90f5ff6aa27e9fea3303065231a6d403f0183a libxslt-1.1.43.tar.xz # Hash for license file: -sha256 7e48e290b6bfccc2ec1b297023a1d77f2fd87417f71fbb9f50aabef40a851819 COPYING +sha256 7e48e290b6bfccc2ec1b297023a1d77f2fd87417f71fbb9f50aabef40a851819 Copyright diff --git a/package/libxslt/libxslt.mk b/package/libxslt/libxslt.mk index b5bb22f9ae..e92b383b89 100644 --- a/package/libxslt/libxslt.mk +++ b/package/libxslt/libxslt.mk @@ -4,12 +4,12 @@ # ################################################################################ -LIBXSLT_VERSION = 1.1.42 +LIBXSLT_VERSION = 1.1.43 LIBXSLT_SOURCE = libxslt-$(LIBXSLT_VERSION).tar.xz LIBXSLT_SITE = https://download.gnome.org/sources/libxslt/1.1 LIBXSLT_INSTALL_STAGING = YES LIBXSLT_LICENSE = MIT -LIBXSLT_LICENSE_FILES = COPYING +LIBXSLT_LICENSE_FILES = Copyright LIBXSLT_CPE_ID_VENDOR = xmlsoft LIBXSLT_CONF_OPTS = \