unityhub: use overrideAttrs for old libxml2

fixes #419634 before #421740 is merged to master
2025-08-03 15:21:04 -07:00
parent 40c0959d6c
commit b18b32ed50
1 changed files with 12 additions and 1 deletions
@@ -96,7 +96,18 @@ stdenv.mkDerivation rec {
        xorg.libXcursor
        glib
        gdk-pixbuf
-        libxml2
+        (libxml2.overrideAttrs (oldAttrs: rec {
+          version = "2.13.8";
+          src = fetchurl {
+            url = "mirror://gnome/sources/libxml2/${lib.versions.majorMinor version}/libxml2-${version}.tar.xz";
+            hash = "sha256-J3KUyzMRmrcbK8gfL0Rem8lDW4k60VuyzSsOhZoO6Eo=";
+          };
+          meta = oldAttrs.meta // {
+            knownVulnerabilities = oldAttrs.meta.knownVulnerabilities or [ ] ++ [
+              "CVE-2025-6021"
+            ];
+          };
+        }))
        zlib
        clang
        git # for git-based packages in unity package manager