Skip to content

dep: libxml2 to v2.13.8 (branch v1.18.x) #3509

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Apr 21, 2025

Conversation

flavorjones
Copy link
Member

@flavorjones flavorjones commented Apr 21, 2025

What problem is this PR intended to solve?

Update libxml2 to v2.13.8

https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.8

This will need a security release since the release notes reference:

  • [CVE-2025-32415] schemas: Fix heap buffer overflow in xmlSchemaIDCFillNodeTables
  • [CVE-2025-32414] python: Read at most len/4 characters. (Maks Verver)

@flavorjones flavorjones added this to the v1.18.x patch releases milestone Apr 21, 2025
@flavorjones flavorjones enabled auto-merge April 21, 2025 16:47
@flavorjones flavorjones changed the title dep: libxml2 to v2.13.8 dep: libxml2 to v2.13.8 (branch v1.18.x) Apr 21, 2025
@flavorjones flavorjones disabled auto-merge April 21, 2025 17:59
@flavorjones flavorjones merged commit 1deea04 into v1.18.x Apr 21, 2025
404 of 410 checks passed
@flavorjones flavorjones deleted the flavorjones-dep-libxml-v2.13.8_v1.18.x branch April 21, 2025 17:59
flavorjones added a commit that referenced this pull request Apr 21, 2025
**What problem is this PR intended to solve?**

https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.8

(cherry picked from commit 6457fe6 and
9187f4a)

Forward port of #3509 to `main`
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant