From 3387a0cc38aab2a2929452ae66ac34a6237d1db6 Mon Sep 17 00:00:00 2001 From: Michael Hashizume Date: Wed, 17 Apr 2024 09:49:57 -0700 Subject: [PATCH] Bump libxml2 from 2.10.3 to 2.12.6 This commit updates the libxml2 component from 2.10.3 to 2.12.6. In addition to various bug fixes, this also addresses the following security vulnerabilities: - CVE-2023-28484 - CVE-2023-29469 - CVE-2024-25062 --- configs/components/libxml2.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/configs/components/libxml2.rb b/configs/components/libxml2.rb index f4f7a7550..f69a944f6 100644 --- a/configs/components/libxml2.rb +++ b/configs/components/libxml2.rb @@ -1,6 +1,6 @@ component "libxml2" do |pkg, settings, platform| - pkg.version '2.10.3' - pkg.sha256sum '5d2cc3d78bec3dbe212a9d7fa629ada25a7da928af432c93060ff5c17ee28a9c' + pkg.version '2.12.6' + pkg.sha256sum '4709e55f59dfa2acdbf1d3c06f1113f8dda2b6012e4f30c2814a4d66c4e92bd2' libxml2_version_y = pkg.get_version.gsub(/(\d+)\.(\d+)\.(\d+)/, '\1.\2') pkg.url "https://download.gnome.org/sources/libxml2/#{libxml2_version_y}/libxml2-#{pkg.get_version}.tar.xz"