gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

treewide: add knownVulnerabilities to old libxml2

Browse Source 
Users should be informed if they're using packages that are
deliberately opting in to using old versions of dependencies with
vulnerabilities that have otherwise been fixed in Nixpkgs.
This commit is contained in:
Alyssa Ross
2025-07-01 21:07:57 +02:00
parent 8b50248846
commit 5bd32a7071
3 changed files with 21 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkgs/applications/networking/remote/citrix-workspace/generic.nix
+7 -2
View File
@@ -90,13 +90,18 @@ let
'';
};
libxml2' = libxml2.overrideAttrs rec {
libxml2' = libxml2.overrideAttrs (oldAttrs: rec {
version = "2.13.8";
src = fetchurl {
url = "mirror://gnome/sources/libxml2/${lib.versions.majorMinor version}/libxml2-${version}.tar.xz";
hash = "sha256-J3KUyzMRmrcbK8gfL0Rem8lDW4k60VuyzSsOhZoO6Eo=";
};
};
meta = oldAttrs.meta // {
knownVulnerabilities = oldAttrs.meta.knownVulnerabilities or [ ] ++ [
"CVE-2025-6021"
];
};
});
in
pkgs/by-name/ci/ciscoPacketTracer7/package.nix
+7 -2
View File
@@ -50,13 +50,18 @@ let
];
};
libxml2' = libxml2.overrideAttrs rec {
libxml2' = libxml2.overrideAttrs (oldAttrs: rec {
version = "2.13.8";
src = fetchurl {
url = "mirror://gnome/sources/libxml2/${lib.versions.majorMinor version}/libxml2-${version}.tar.xz";
hash = "sha256-J3KUyzMRmrcbK8gfL0Rem8lDW4k60VuyzSsOhZoO6Eo=";
};
};
meta = oldAttrs.meta // {
knownVulnerabilities = oldAttrs.meta.knownVulnerabilities or [ ] ++ [
"CVE-2025-6021"
];
};
});
fhs = buildFHSEnv {
pname = "packettracer7";
pkgs/by-name/ci/ciscoPacketTracer8/package.nix
+7 -2
View File
@@ -41,13 +41,18 @@ let
"8.2.2" = "CiscoPacketTracer822_amd64_signed.deb";
};
libxml2' = libxml2.overrideAttrs rec {
libxml2' = libxml2.overrideAttrs (oldAttrs: rec {
version = "2.13.8";
src = fetchurl {
url = "mirror://gnome/sources/libxml2/${lib.versions.majorMinor version}/libxml2-${version}.tar.xz";
hash = "sha256-J3KUyzMRmrcbK8gfL0Rem8lDW4k60VuyzSsOhZoO6Eo=";
};
};
meta = oldAttrs.meta // {
knownVulnerabilities = oldAttrs.meta.knownVulnerabilities or [ ] ++ [
"CVE-2025-6021"
];
};
});
unwrapped = stdenvNoCC.mkDerivation {
name = "ciscoPacketTracer8-unwrapped";