From 4c80121dc309e67fa3d9f66a00516bad39b42c31 Mon Sep 17 00:00:00 2001 From: Mike Dalessio Date: Wed, 7 Dec 2022 16:56:00 -0500 Subject: [PATCH] version bump to v1.13.10 --- CHANGELOG.md | 7 ++++++- lib/nokogiri/version/constant.rb | 2 +- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index ef5c718c26..3908fdee51 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,7 +4,12 @@ Nokogiri follows [Semantic Versioning](https://semver.org/), please see the [REA --- -## next / unreleased +## 1.13.10 / 2022-12-07 + +### Security + +* [CRuby] Address CVE-2022-23476, unchecked return value from `xmlTextReaderExpand`. See [GHSA-qv4q-mr5r-qprj](https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-qv4q-mr5r-qprj) for more information. + ### Improvements diff --git a/lib/nokogiri/version/constant.rb b/lib/nokogiri/version/constant.rb index d06e7a9534..7280b062fc 100644 --- a/lib/nokogiri/version/constant.rb +++ b/lib/nokogiri/version/constant.rb @@ -2,5 +2,5 @@ module Nokogiri # The version of Nokogiri you are using - VERSION = "1.13.9" + VERSION = "1.13.10" end