Updating Libxslt to get past a CVE (#1950)

* Updating for a cve in libxml2 Signed-off-by: John McCrae <[email protected]> * Updating for a cve in libxml2 Signed-off-by: John McCrae <[email protected]> * remove extra space Signed-off-by: muthuja <[email protected]> --------- Signed-off-by: John McCrae <[email protected]> Signed-off-by: muthuja <[email protected]> Co-authored-by: muthuja <[email protected]>
chef · Dec 19, 2024 · 052b094 · 052b094
1 parent d428b85
commit 052b094
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/config/software/libxslt.rb b/config/software/libxslt.rb
@@ -26,12 +26,11 @@
 dependency "config_guess"
 
 # versions_list: url=https://download.gnome.org/sources/libxslt/1.1/ filter=*.tar.xz
+version("1.1.42") { source sha256: "85ca62cac0d41fc77d3f6033da9df6fd73d20ea2fc18b0a3609ffb4110e1baeb" }
 version("1.1.39") { source sha256: "2a20ad621148339b0759c4d4e96719362dee64c9a096dbba625ba053846349f0" }
 version("1.1.37") { source sha256: "3a4b27dc8027ccd6146725950336f1ec520928f320f144eb5fa7990ae6123ab4" }
 version("1.1.36") { source sha256: "12848f0a4408f65b530d3962cd9ff670b6ae796191cfeff37522b5772de8dc8e" }
 version("1.1.35") { source sha256: "8247f33e9a872c6ac859aa45018bc4c4d00b97e2feac9eebc10c93ce1f34dd79" }
-version("1.1.34") { source sha256: "28c47db33ab4daefa6232f31ccb3c65260c825151ec86ec461355247f3f56824" }
-version("1.1.30") { source sha256: "db1e4e26eaec47d00f885bad19a8749eb1008909b817d650101365f068ee3b24" }
 
 source url: "https://download.gnome.org/sources/libxslt/1.1/libxslt-#{version}.tar.xz"
 internal_source url: "#{ENV["ARTIFACTORY_REPO_URL"]}/#{name}/#{name}-#{version}.tar.xz",
@@ -64,6 +63,7 @@
     "--without-crypto",
     "--without-profiler",
     "--without-debugger",
+    "--without-deprecated-declarations",
   ]
 
   configure(*configure_commands, env: env)

diff --git a/scripts/internal_sources.yml b/scripts/internal_sources.yml
@@ -214,6 +214,8 @@ software:
 
 - name: libxslt
   sources:
+  - url: https://download.gnome.org/sources/libxslt/1.1/libxslt-1.1.42.tar.xz
+    sha256: 85ca62cac0d41fc77d3f6033da9df6fd73d20ea2fc18b0a3609ffb4110e1baeb
   - url: https://download.gnome.org/sources/libxslt/1.1/libxslt-1.1.36.tar.xz
     sha256: 12848f0a4408f65b530d3962cd9ff670b6ae796191cfeff37522b5772de8dc8e
   - url: https://download.gnome.org/sources/libxslt/1.1/libxslt-1.1.35.tar.xz