From dc53c20200d5825df8fee19a6574af49fc2a1a90 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Sat, 3 Aug 2024 12:45:00 +0200 Subject: [PATCH] package/libxml2: security bump version to 2.12.9 Fixes CVE-2024-34459 (2.12.7) & CVE-2024-40896. Release notes: https://download.gnome.org/sources/libxml2/2.12/libxml2-2.12.7.news https://download.gnome.org/sources/libxml2/2.12/libxml2-2.12.8.news https://download.gnome.org/sources/libxml2/2.12/libxml2-2.12.9.news Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni (cherry picked from commit 45651cdb851bcd5af06bb94d824b078b03d4f187) Signed-off-by: Peter Korsgaard --- package/libxml2/libxml2.hash | 4 ++-- package/libxml2/libxml2.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/libxml2/libxml2.hash b/package/libxml2/libxml2.hash index 086bb41098..73fd0ecedf 100644 --- a/package/libxml2/libxml2.hash +++ b/package/libxml2/libxml2.hash @@ -1,4 +1,4 @@ -# From https://download.gnome.org/sources/libxml2/2.12/libxml2-2.12.6.sha256sum -sha256 889c593a881a3db5fdd96cc9318c87df34eb648edfc458272ad46fd607353fbb libxml2-2.12.6.tar.xz +# From https://download.gnome.org/sources/libxml2/2.12/libxml2-2.12.9.sha256sum +sha256 59912db536ab56a3996489ea0299768c7bcffe57169f0235e7f962a91f483590 libxml2-2.12.9.tar.xz # License files, locally calculated sha256 7fb0a66f3989f9bd5c7e5438a3de02cd4a7a47dde0aea2f7ea2ba2ff454ee6a4 Copyright diff --git a/package/libxml2/libxml2.mk b/package/libxml2/libxml2.mk index e7ed6fb752..b69722b21d 100644 --- a/package/libxml2/libxml2.mk +++ b/package/libxml2/libxml2.mk @@ -5,7 +5,7 @@ ################################################################################ LIBXML2_VERSION_MAJOR = 2.12 -LIBXML2_VERSION = $(LIBXML2_VERSION_MAJOR).6 +LIBXML2_VERSION = $(LIBXML2_VERSION_MAJOR).9 LIBXML2_SOURCE = libxml2-$(LIBXML2_VERSION).tar.xz LIBXML2_SITE = \ https://download.gnome.org/sources/libxml2/$(LIBXML2_VERSION_MAJOR)