[Midnightbsd-cvs] [MidnightBSD/mports] ac2b8a: textproc/libxml2: update to 2.15.4 (#836)

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: ac2b8af94fc75fdcfc969005e0e1f2d2ff6d87e1
      https://github.com/MidnightBSD/mports/commit/ac2b8af94fc75fdcfc969005e0e1f2d2ff6d87e1
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-09-05 (Sat, 05 Sep 2026)

  Changed paths:
    M textproc/libxml2-python/Makefile
    M textproc/libxml2/Makefile
    M textproc/libxml2/distinfo
    M textproc/libxml2/pkg-plist

  Log Message:
  -----------
  textproc/libxml2: update to 2.15.4 (#836)

Update libxml2 from 2.15.3 to 2.15.4, a security release.

## Security fixes (upstream NEWS)

- xmlregexp: out-of-bounds read in the `NXT` macro
- missing overflow checks in `dict.c`, `uri.c` and `valid.c`
- xmlregexp: string length calculated before NULL check
- xpointer: overflow in `xmlXPtrEvalXPtrPart`
- xmlIO: integer overflow before calling `writecallback`
- xinclude: `parseFlags` not propagated in
`xmlXIncludeProcess`/`xmlXIncludeProcessTree`

Also fixes a double free in `xmlIOParseDTD`, a division by zero when
`maxAmpl` is 0, a NULL deref in catalog handling, and several memory
leaks.

## Port changes

- `textproc/libxml2/Makefile` — `DISTVERSION` 2.15.3 → 2.15.4
- `textproc/libxml2/distinfo` — regenerated with `bmake makesum`
- `textproc/libxml2/pkg-plist` — `lib/libxml2.so.16.1.3` →
`lib/libxml2.so.16.1.4`
- `textproc/libxml2-python/Makefile` — reset `PORTREVISION`

The SONAME stays `libxml2.so.16`, so no dependent ports need a
`PORTREVISION` bump.

## Validation (amd64)

- `bmake makesum`, `patch`, `build`, `fake`, `package` — all succeed for
both the master port and the `libxml2-python` slave
- `bmake test` — exits 0 (the `fail` strings in the log are expected
offline DTD-load warnings from the thread tests)
- `portlint -AC` — only the pre-existing master/slave-port `?=` warnings

🤖 Generated with [Claude Code](https://claude.com/claude-code)

https://claude.ai/code/session_01E2ugt5KT9NMJdaWjhe2PUu

## Summary by Sourcery

Update libxml2 and its Python slave port to the 2.15.4 security release.

Bug Fixes:
- Update libxml2 to the 2.15.4 security release, incorporating upstream
fixes for multiple memory-safety, overflow, NULL-dereference, and
resource-management issues.

Chores:
- Refresh package metadata for the new libxml2 release and reset the
Python slave port revision while retaining the existing SONAME.

Signed-off-by: Lucas Holt <luke at foolishgames.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply at anthropic.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications