From 41afd44087b55ecebe7608a0195f8f2352281aed Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Gutyina=20Gerg=C5=91?= <gutyina.gergo.2@gmail.com>
Date: Sat, 17 Jan 2026 01:56:36 +0100
Subject: [PATCH] libxml2_13: fix CVE-2026-0990

---
 pkgs/development/libraries/libxml2/default.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pkgs/development/libraries/libxml2/default.nix b/pkgs/development/libraries/libxml2/default.nix
index 77e3659f3df3..11ea63fddb01 100644
--- a/pkgs/development/libraries/libxml2/default.nix
+++ b/pkgs/development/libraries/libxml2/default.nix
@@ -23,6 +23,12 @@ let
         # See also https://gitlab.gnome.org/GNOME/libxml2/-/issues/906
         # Source: https://github.com/chromium/chromium/blob/4fb4ae8ce3daa399c3d8ca67f2dfb9deffcc7007/third_party/libxml/chromium/xml-attr-extra.patch
         ./xml-attr-extra.patch
+
+        (fetchpatch {
+          name = "CVE-2026-0990.patch";
+          url = "https://gitlab.gnome.org/GNOME/libxml2/-/commit/1961208e958ca22f80a0b4e4c9d71cfa050aa982.patch";
+          hash = "sha256-Df2WLCTsP/ItSzgnVkNjRpLKkBP4xUOXEfCUV9o/Yks=";
+        })
       ];
       freezeUpdateScript = true;
       extraMeta = {