libxml2: update to 2.12.9
authorHauke Mehrtens <hauke@hauke-m.de>
Thu, 3 Oct 2024 19:59:21 +0000 (21:59 +0200)
committerHauke Mehrtens <hauke@hauke-m.de>
Sat, 5 Oct 2024 10:31:33 +0000 (12:31 +0200)
Release Notes:
https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.7
https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.8
https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.9

This fixes:
CVE-2024-34459: Fix buffer overread with xmllint --htmlout
CVE-2024-40896: Fix XXE protection in downstream code

Link: https://github.com/openwrt/openwrt/pull/16593
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
package/libs/libxml2/Makefile

index 2be8026e89d841059b5b51b1b3ddc8d66ae7c40a..d8f7d5515429e4e5de79e25c7a5e44530c0eb632 100644 (file)
@@ -1,12 +1,12 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=libxml2
-PKG_VERSION:=2.12.6
+PKG_VERSION:=2.12.9
 PKG_RELEASE:=1
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
 PKG_SOURCE_URL:=@GNOME/libxml2/$(basename $(PKG_VERSION))
-PKG_HASH:=889c593a881a3db5fdd96cc9318c87df34eb648edfc458272ad46fd607353fbb
+PKG_HASH:=59912db536ab56a3996489ea0299768c7bcffe57169f0235e7f962a91f483590
 
 PKG_LICENSE:=MIT
 PKG_LICENSE_FILES:=COPYING