From b18b32ed50442a76511753d0ff1a3231eb371e6d Mon Sep 17 00:00:00 2001
From: huantian <davidtianli@gmail.com>
Date: Sat, 2 Aug 2025 15:11:27 -0700
Subject: [PATCH] unityhub: use overrideAttrs for old libxml2

fixes #419634 before #421740 is merged to master
---
 pkgs/by-name/un/unityhub/package.nix | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/un/unityhub/package.nix b/pkgs/by-name/un/unityhub/package.nix
index 292eae8e8696..ab7dd5b92db9 100644
--- a/pkgs/by-name/un/unityhub/package.nix
+++ b/pkgs/by-name/un/unityhub/package.nix
@@ -96,7 +96,18 @@ stdenv.mkDerivation rec {
         xorg.libXcursor
         glib
         gdk-pixbuf
-        libxml2
+        (libxml2.overrideAttrs (oldAttrs: rec {
+          version = "2.13.8";
+          src = fetchurl {
+            url = "mirror://gnome/sources/libxml2/${lib.versions.majorMinor version}/libxml2-${version}.tar.xz";
+            hash = "sha256-J3KUyzMRmrcbK8gfL0Rem8lDW4k60VuyzSsOhZoO6Eo=";
+          };
+          meta = oldAttrs.meta // {
+            knownVulnerabilities = oldAttrs.meta.knownVulnerabilities or [ ] ++ [
+              "CVE-2025-6021"
+            ];
+          };
+        }))
         zlib
         clang
         git # for git-based packages in unity package manager