Skip to content

Commit 83a2571

Browse files
committed
dep: bump libxml to v2.11.7
Addresses CVE-2024-25062 See related GHSA-xc9x-jj77-9p9j
1 parent 5745d4b commit 83a2571

File tree

2 files changed

+16
-4
lines changed

2 files changed

+16
-4
lines changed

CHANGELOG.md

+13
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,19 @@ Nokogiri follows [Semantic Versioning](https://semver.org/), please see the [REA
44

55
---
66

7+
## 1.15.next / unreleased
8+
9+
### Security
10+
11+
* [CRuby] Vendored libxml2 is updated to address CVE-2024-25062. See [GHSA-xc9x-jj77-9p9j](https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-xc9x-jj77-9p9j) for more information.
12+
13+
14+
### Dependencies
15+
16+
* [CRuby] Vendored libxml2 is updated to v2.11.7 from v2.11.6. For details please see https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.7
17+
18+
19+
720
## 1.15.5 / 2023-11-17
821

922
### Dependencies

dependencies.yml

+3-4
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,7 @@
1-
21
libxml2:
3-
version: "2.11.6"
4-
sha256: "c90eee7506764abbe07bb616b82da452529609815aefef423d66ef080eb0c300"
5-
# sha-256 hash provided in https://download.gnome.org/sources/libxml2/2.11/libxml2-2.11.6.sha256sum
2+
version: "2.11.7"
3+
sha256: "fb27720e25eaf457f94fd3d7189bcf2626c6dccf4201553bc8874d50e3560162"
4+
# sha-256 hash provided in https://download.gnome.org/sources/libxml2/2.11/libxml2-2.11.7.sha256sum
65

76
libxslt:
87
version: "1.1.39"

0 commit comments

Comments
 (0)