From ba80420bcc6731f3228e8d763c514a5f33644836 Mon Sep 17 00:00:00 2001 From: Grimmauld Date: Wed, 16 Jul 2025 20:06:37 +0200 Subject: [PATCH] libxml2: 2.14.4-unstable-2025-06-20 -> 2.14.5 Release notes: https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.5 schematron: Fix memory safety issues in xmlSchematronReportOutput Schematron: Fix null pointer dereference leading to DoS (Michael Mann) Fix potential buffer overflows of interactive shell (Michael Mann) Fixes CVE-2025-49794, CVE-2025-49796, CVE-2025-49795, CVE-2025-6170 --- pkgs/development/libraries/libxml2/default.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/development/libraries/libxml2/default.nix b/pkgs/development/libraries/libxml2/default.nix index 35111e8c7516..1a411f3b2130 100644 --- a/pkgs/development/libraries/libxml2/default.nix +++ b/pkgs/development/libraries/libxml2/default.nix @@ -33,7 +33,7 @@ stdenv.mkDerivation (finalAttrs: { pname = "libxml2"; - version = "2.14.4-unstable-2025-06-20"; + version = "2.14.5"; outputs = [ @@ -50,8 +50,8 @@ stdenv.mkDerivation (finalAttrs: { domain = "gitlab.gnome.org"; owner = "GNOME"; repo = "libxml2"; - rev = "356542324fa439de544b5e419b91ae68d42c306c"; # some bugfixes right behind 2.14.4 - hash = "sha256-0jo08ECX+oP7Ekjgw3ZgOh+fSiNjlbjoZc4p3PqomJA="; + tag = "v${finalAttrs.version}"; + hash = "sha256-vxKlw8Kz+fgUP6bhWG2+4346WJVzqG0QvPG/BT7RftQ="; }; patches = [