Skip to content

Commit 0d4018d

Browse files
committed
dep: update libxml2 to v2.12.5
https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.5 This addresses CVE-2024-25062, for more information see: GHSA-xc9x-jj77-9p9j
1 parent f33a25f commit 0d4018d

File tree

2 files changed

+15
-3
lines changed

2 files changed

+15
-3
lines changed

CHANGELOG.md

+12
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,18 @@ Nokogiri follows [Semantic Versioning](https://semver.org/), please see the [REA
44

55
---
66

7+
## v1.16.next / unreleased
8+
9+
### Security
10+
11+
* [CRuby] Vendored libxml2 is updated to address CVE-2024-25062. See [GHSA-xc9x-jj77-9p9j](https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-xc9x-jj77-9p9j) for more information.
12+
13+
14+
### Dependencies
15+
16+
* [CRuby] Vendored libxml2 is updated to [v2.12.5](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.5) from v2.12.4. (@flavorjones)
17+
18+
719
## v1.16.1 / 2024-02-03
820

921
### Dependencies

dependencies.yml

+3-3
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11

22
libxml2:
3-
version: "2.12.4"
4-
sha256: "497360e423cf0bd99eacdb7c6215dea92e6d6e89ee940393c2bae0e77cb9b7d0"
5-
# sha-256 hash provided in https://download.gnome.org/sources/libxml2/2.12/libxml2-2.12.4.sha256sum
3+
version: "2.12.5"
4+
sha256: "a972796696afd38073e0f59c283c3a2f5a560b5268b4babc391b286166526b21"
5+
# sha-256 hash provided in https://download.gnome.org/sources/libxml2/2.12/libxml2-2.12.5.sha256sum
66

77
libxslt:
88
version: "1.1.39"

0 commit comments

Comments
 (0)