Update libxml2 in Chef Server 12 from 2.9.1 to latest 2.9.2

[jessehu]

Hi Chef team,

Is it possible to update libxml2 in Chef Server 11 from 2.7.8 to latest 2.9.2 ? Our product uses Chef 11 and the security strategry is using latest libxml2 2.9.2 to fix some CVEs.

https://github.com/chef/omnibus-software/blob/master/config/software/libxml2.rb

Thanks.

[jessehu]

Hi @stevendanna is there update on this ? Thanks.

[jessehu]

We don't need libxml2 2.9.2 in Open Source Chef Server 11 now. Is it possible to update to latest libxml 2.9.2 in Open Source Chef Server 12?

[stevendanna]

@jessehu Chef server 12.1 is going out this week. I've opened a pull request to update to 2.9.2 which will hopefully land in the release directly following 12.1.

[jessehu]

Thanks @stevendanna. I will try Chef Server 12.1.

[stevendanna]

@jessehu Just as a heads up, 12.1.1 is going out very soon (likely Monday) with a few fixes for upgrades. Apologies if my message was confusing but by "the release directly following 12.1." I meant that 2.9.2 was going to land in 12.2, which is still where I expect it to land.

[jessehu]

appriciate your very timely response. I'm not in a hurry for a release now. Will wait for 12.1.x or even 12.2 :)