From: Alexander Kanavin <alex.kanavin@gmail.com>
To: openembedded-core@lists.openembedded.org
Cc: Alexander Kanavin <alex@linutronix.de>
Subject: [PATCH 044/114] libxslt: upgrade 1.1.43 -> 1.1.45
Date: Mon, 22 Dec 2025 21:06:26 +0100 [thread overview]
Message-ID: <20251222200739.2278706-44-alex.kanavin@gmail.com> (raw)
In-Reply-To: <20251222200739.2278706-1-alex.kanavin@gmail.com>
From: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
---
.../gnome-libxslt-bug-139-apple-fix.diff | 103 ------------------
.../{libxslt_1.1.43.bb => libxslt_1.1.45.bb} | 5 +-
2 files changed, 2 insertions(+), 106 deletions(-)
delete mode 100644 meta/recipes-support/libxslt/files/gnome-libxslt-bug-139-apple-fix.diff
rename meta/recipes-support/libxslt/{libxslt_1.1.43.bb => libxslt_1.1.45.bb} (92%)
diff --git a/meta/recipes-support/libxslt/files/gnome-libxslt-bug-139-apple-fix.diff b/meta/recipes-support/libxslt/files/gnome-libxslt-bug-139-apple-fix.diff
deleted file mode 100644
index c7220ab954..0000000000
--- a/meta/recipes-support/libxslt/files/gnome-libxslt-bug-139-apple-fix.diff
+++ /dev/null
@@ -1,103 +0,0 @@
-From 345d6826d0eae6f0a962456b8ed6f6a1bad0877d Mon Sep 17 00:00:00 2001
-From: David Kilzer <ddkilzer@apple.com>
-Date: Sat, 24 May 2025 15:06:42 -0700
-Subject: [PATCH] libxslt: Type confusion in xmlNode.psvi between stylesheet
- and source nodes
-
-* libxslt/functions.c:
-(xsltDocumentFunctionLoadDocument):
-- Implement fix suggested by Ivan Fratric. This copies the xmlDoc,
- calls xsltCleanupSourceDoc() to remove pvsi fields, then adds the
- xmlDoc to tctxt->docList.
-- Add error handling for functions that may return NULL.
-* libxslt/transform.c:
-- Remove static keyword so this can be called from
- xsltDocumentFunctionLoadDocument().
-* libxslt/transformInternals.h: Add.
-(xsltCleanupSourceDoc): Add declaration.
-
-Fixes #139.
-
-CVE: CVE-2025-7424
-Upstream-Status: Submitted [https://gitlab.gnome.org/GNOME/libxslt/-/issues/139]
-Signed-off-by: Ross Burton <ross.burton@arm.com>
----
- libxslt/functions.c | 16 +++++++++++++++-
- libxslt/transform.c | 3 ++-
- libxslt/transformInternals.h | 9 +++++++++
- 3 files changed, 26 insertions(+), 2 deletions(-)
- create mode 100644 libxslt/transformInternals.h
-
-diff --git a/libxslt/functions.c b/libxslt/functions.c
-index 72a58dc4..11ec039f 100644
---- a/libxslt/functions.c
-+++ b/libxslt/functions.c
-@@ -34,6 +34,7 @@
- #include "numbersInternals.h"
- #include "keys.h"
- #include "documents.h"
-+#include "transformInternals.h"
-
- #ifdef WITH_XSLT_DEBUG
- #define WITH_XSLT_DEBUG_FUNCTION
-@@ -125,7 +126,20 @@ xsltDocumentFunctionLoadDocument(xmlXPathParserContextPtr ctxt,
- /*
- * This selects the stylesheet's doc itself.
- */
-- doc = tctxt->style->doc;
-+ doc = xmlCopyDoc(tctxt->style->doc, 1);
-+ if (doc == NULL) {
-+ xsltTransformError(tctxt, NULL, NULL,
-+ "document() : failed to copy style doc\n");
-+ goto out_fragment;
-+ }
-+ xsltCleanupSourceDoc(doc); /* Remove psvi fields. */
-+ idoc = xsltNewDocument(tctxt, doc);
-+ if (idoc == NULL) {
-+ xsltTransformError(tctxt, NULL, NULL,
-+ "document() : failed to create xsltDocument\n");
-+ xmlFreeDoc(doc);
-+ goto out_fragment;
-+ }
- } else {
- goto out_fragment;
- }
-diff --git a/libxslt/transform.c b/libxslt/transform.c
-index 54ef821b..38c2dce6 100644
---- a/libxslt/transform.c
-+++ b/libxslt/transform.c
-@@ -43,6 +43,7 @@
- #include "xsltlocale.h"
- #include "pattern.h"
- #include "transform.h"
-+#include "transformInternals.h"
- #include "variables.h"
- #include "numbersInternals.h"
- #include "namespaces.h"
-@@ -5757,7 +5758,7 @@ xsltCountKeys(xsltTransformContextPtr ctxt)
- *
- * Resets source node flags and ids stored in 'psvi' member.
- */
--static void
-+void
- xsltCleanupSourceDoc(xmlDocPtr doc) {
- xmlNodePtr cur = (xmlNodePtr) doc;
- void **psviPtr;
-diff --git a/libxslt/transformInternals.h b/libxslt/transformInternals.h
-new file mode 100644
-index 00000000..d0f42823
---- /dev/null
-+++ b/libxslt/transformInternals.h
-@@ -0,0 +1,9 @@
-+/*
-+ * Summary: set of internal interfaces for the XSLT engine transformation part.
-+ *
-+ * Copy: See Copyright for the status of this software.
-+ *
-+ * Author: David Kilzer <ddkilzer@apple.com>
-+ */
-+
-+void xsltCleanupSourceDoc(xmlDocPtr doc);
---
-2.39.5 (Apple Git-154)
-
diff --git a/meta/recipes-support/libxslt/libxslt_1.1.43.bb b/meta/recipes-support/libxslt/libxslt_1.1.45.bb
similarity index 92%
rename from meta/recipes-support/libxslt/libxslt_1.1.43.bb
rename to meta/recipes-support/libxslt/libxslt_1.1.45.bb
index 3393be7ebe..c3440a99d4 100644
--- a/meta/recipes-support/libxslt/libxslt_1.1.43.bb
+++ b/meta/recipes-support/libxslt/libxslt_1.1.45.bb
@@ -13,10 +13,9 @@ LIC_FILES_CHKSUM = "file://Copyright;md5=0cd9a07afbeb24026c9b03aecfeba458"
SECTION = "libs"
DEPENDS = "libxml2"
-SRC_URI = "https://download.gnome.org/sources/libxslt/1.1/libxslt-${PV}.tar.xz \
- file://gnome-libxslt-bug-139-apple-fix.diff"
+SRC_URI = "https://download.gnome.org/sources/libxslt/1.1/libxslt-${PV}.tar.xz"
-SRC_URI[sha256sum] = "5a3d6b383ca5afc235b171118e90f5ff6aa27e9fea3303065231a6d403f0183a"
+SRC_URI[sha256sum] = "9acfe68419c4d06a45c550321b3212762d92f41465062ca4ea19e632ee5d216e"
UPSTREAM_CHECK_REGEX = "libxslt-(?P<pver>\d+(\.\d+)+)\.tar"
--
2.47.3
next prev parent reply other threads:[~2025-12-22 20:08 UTC|newest]
Thread overview: 104+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-12-22 20:05 [PATCH 001/114] build-appliance-image: do not inherit setuptools Alexander Kanavin
2025-12-22 20:05 ` [PATCH 002/114] gtk4: consider only even versions Alexander Kanavin
2025-12-22 20:05 ` [PATCH 003/114] python3-uv-build: add a recipe Alexander Kanavin
2025-12-22 20:05 ` [PATCH 004/114] alsa: upgrade 1.2.14 -> 1.2.15 Alexander Kanavin
2025-12-22 20:05 ` [PATCH 005/114] at-spi2-core: upgrade 2.56.4 -> 2.58.2 Alexander Kanavin
2025-12-22 20:05 ` [PATCH 006/114] bash-completion: upgrade 2.16.0 -> 2.17.0 Alexander Kanavin
2025-12-22 20:05 ` [PATCH 007/114] bind: upgrade 9.20.15 -> 9.20.17 Alexander Kanavin
2025-12-22 20:05 ` [PATCH 008/114] boost: upgrade 1.89.0 -> 1.90.0 Alexander Kanavin
2025-12-22 20:05 ` [PATCH 009/114] cmake: upgrade 4.2.0 -> 4.2.1 Alexander Kanavin
2025-12-22 20:05 ` [PATCH 010/114] cups: upgrade 2.4.15 -> 2.4.16 Alexander Kanavin
2025-12-22 20:05 ` [PATCH 011/114] ed: upgrade 1.22.2 -> 1.22.3 Alexander Kanavin
2025-12-22 20:05 ` [PATCH 012/114] ell: upgrade 0.80 -> 0.81 Alexander Kanavin
2025-12-22 20:05 ` [PATCH 013/114] glib-2.0: upgrade 2.86.1 -> 2.86.3 Alexander Kanavin
2025-12-22 20:05 ` [PATCH 014/114] gn: upgrade to latest revision Alexander Kanavin
2025-12-22 20:05 ` [PATCH 015/114] gnupg: upgrade 2.5.11 -> 2.5.14 Alexander Kanavin
2025-12-22 20:05 ` [PATCH 016/114] go-helloworld: upgrade to latest revision Alexander Kanavin
2025-12-22 20:05 ` [PATCH 017/114] gtk-doc: upgrade 1.34.0 -> 1.35.1 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 018/114] harfbuzz: upgrade 11.5.1 -> 12.2.0 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 019/114] hwdata: upgrade 0.399 -> 0.402 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 020/114] icu: upgrade 77-1 -> 78.1 Alexander Kanavin
2026-01-13 8:14 ` [OE-core] " Yannic Moog
2025-12-22 20:06 ` [PATCH 021/114] igt-gpu-tools: upgrade 2.1 -> 2.3 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 022/114] inetutils: upgrade 2.6 -> 2.7 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 023/114] iproute2: upgrade 6.17.0 -> 6.18.0 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 024/114] iso-codes: upgrade 4.18.0 -> 4.19.0 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 025/114] kbd: upgrade 2.8.0 -> 2.9.0 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 026/114] kea: upgrade 3.0.1 -> 3.0.2 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 027/114] libadwaita: upgrade 1.8.1 -> 1.8.2 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 028/114] libatomic-ops: upgrade 7.8.4 -> 7.10.0 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 029/114] libdisplay-info: upgrade 0.2.0 -> 0.3.0 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 030/114] libdrm: upgrade 2.4.128 -> 2.4.131 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 031/114] libevdev: upgrade 1.13.5 -> 1.13.6 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 032/114] libgit2: upgrade 1.9.1 -> 1.9.2 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 033/114] libinput: upgrade 1.29.2 -> 1.30.1 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 034/114] libjpeg-turbo: upgrade 3.1.2 -> 3.1.3 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 035/114] libpcre2: upgrade 10.46 -> 10.47 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 036/114] libpng: upgrade 1.6.52 -> 1.6.53 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 037/114] libproxy: upgrade 0.5.11 -> 0.5.12 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 038/114] librsvg: upgrade 2.61.0 -> 2.61.3 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 039/114] libtest-fatal-perl: upgrade 0.017 -> 0.018 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 040/114] libtraceevent: upgrade 1.8.4 -> 1.8.6 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 041/114] libva: upgrade 2.22.0 -> 2.23.0 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 042/114] libxcrypt: upgrade 4.5.0 -> 4.5.2 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 043/114] libxkbcommon: upgrade 1.11.0 -> 1.13.1 Alexander Kanavin
2025-12-22 20:06 ` Alexander Kanavin [this message]
2025-12-22 20:06 ` [PATCH 045/114] makedumpfile: upgrade 1.7.7 -> 1.7.8 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 046/114] ninja: upgrade 1.13.1 -> 1.13.2 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 047/114] ovmf: upgrade 202508 -> 202511 Alexander Kanavin
2025-12-23 23:07 ` [OE-core] " Khem Raj
2025-12-29 11:12 ` Alexander Kanavin
2025-12-22 20:06 ` [PATCH 048/114] puzzles: upgrade to latest revision Alexander Kanavin
2025-12-22 20:06 ` [PATCH 049/114] p11-kit: upgrade 0.25.5 -> 0.25.10 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 050/114] python3-beartype: upgrade 0.21.0 -> 0.22.9 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 051/114] python3-calver: upgrade 2025.04.17 -> 2025.10.20 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 052/114] python3-certifi: upgrade 2025.8.3 -> 2025.11.12 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 053/114] python3-cffi: upgrade 1.17.1 -> 2.0.0 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 054/114] python3-click: upgrade 8.2.2 -> 8.3.1 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 055/114] python3-cryptography: upgrade 45.0.7 -> 46.0.3 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 056/114] python3-cython: upgrade 3.1.3 -> 3.2.3 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 057/114] python3-dbusmock: upgrade 0.37.0 -> 0.37.2 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 058/114] python3-dtschema: upgrade 2025.8 -> 2025.12 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 059/114] python3-hypothesis: upgrade 6.148.5 -> 6.148.7 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 060/114] python3-iniconfig: upgrade 2.1.0 -> 2.3.0 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 061/114] python3-maturin: upgrade 1.9.4 -> 1.10.2 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 062/114] python3-numpy: upgrade 2.3.4 -> 2.3.5 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 063/114] python3-pbr: upgrade 7.0.1 -> 7.0.3 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 064/114] python3-pdm: upgrade 2.26.1 -> 2.26.2 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 065/114] python3-pdm-backend: upgrade 2.4.5 -> 2.4.6 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 066/114] python3-pdm-build-locked: upgrade 0.3.5 -> 0.3.7 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 067/114] python3-pip: upgrade 25.2 -> 25.3 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 068/114] python3-poetry-core: upgrade 2.1.3 -> 2.2.1 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 069/114] python3-pycairo: upgrade 1.28.0 -> 1.29.0 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 070/114] python3-pycparser: upgrade 2.22 -> 2.23 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 071/114] python3-pyopenssl: upgrade 25.1.0 -> 25.3.0 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 072/114] python3-pyparsing: upgrade 3.2.4 -> 3.2.5 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 073/114] python3-pyproject-metadata: upgrade 0.9.1 -> 0.10.0 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 074/114] python3-pytest: upgrade 8.4.2 -> 9.0.2 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 075/114] python3-pytest-subtests: upgrade 0.14.2 -> 0.15.0 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 076/114] python3-pyyaml: upgrade 6.0.2 -> 6.0.3 Alexander Kanavin
2025-12-22 20:06 ` [PATCH 077/114] python3-rdflib: upgrade 7.1.4 -> 7.5.0 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 078/114] python3-rpds-py: upgrade 0.27.1 -> 0.30.0 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 079/114] python3-ruamel-yaml: upgrade 0.18.15 -> 0.18.17 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 080/114] python3-scons: upgrade 4.9.1 -> 4.10.1 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 081/114] python3-setuptools-scm: upgrade 8.3.1 -> 9.2.2 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 082/114] python3-sphinx: upgrade 8.2.1 -> 9.0.4 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 083/114] python3-testtools: upgrade 2.7.2 -> 2.8.1 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 084/114] python3-trove-classifiers: upgrade 2025.9.11.17 -> 2025.12.1.14 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 085/114] python3-urllib3: upgrade 2.5.0 -> 2.6.2 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 086/114] python3-wcwidth: upgrade 0.2.13 -> 0.2.14 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 087/114] python3-webcolors: upgrade 24.11.1 -> 25.10.0 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 088/114] python3-xmltodict: upgrade 0.15.1 -> 1.0.2 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 089/114] qemu: upgrade 10.0.7 -> 10.1.3 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 090/114] quota: upgrade 4.10 -> 4.11 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 091/114] re2c: upgrade 4.3 -> 4.3.1 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 092/114] repo: upgrade 2.59 -> 2.60.1 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 093/114] rpm-sequoia: upgrade 1.9.0 -> 1.10.0 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 094/114] rpm-sequoia-crypto-policy: upgrade to latest revision Alexander Kanavin
2025-12-22 20:07 ` [PATCH 095/114] shaderc: upgrade 2025.3 -> 2025.5 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 096/114] spirv-llvm-translator: upgrade 21.1.2 -> 21.1.3 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 097/114] strace: upgrade 6.17 -> 6.18 Alexander Kanavin
2025-12-24 9:56 ` [OE-core] " Mathieu Dubois-Briand
2025-12-24 13:56 ` Alexander Kanavin
2025-12-22 20:07 ` [PATCH 098/114] stress-ng: upgrade 0.19.04 -> 0.19.06 Alexander Kanavin
2025-12-22 20:07 ` [PATCH 099/114] swig: upgrade 4.3.1 -> 4.4.1 Alexander Kanavin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20251222200739.2278706-44-alex.kanavin@gmail.com \
--to=alex.kanavin@gmail.com \
--cc=alex@linutronix.de \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox