From d9c6ee2f171a8ee6664d08c129182728f327c676 Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Mon, 7 Oct 2024 21:48:17 +0200 Subject: [PATCH] libgsf: 1.14.52 -> 1.14.53 Fixes CVE-2024-42415. Changes: https://gitlab.gnome.org/GNOME/libgsf/-/compare/LIBGSF_1_14_52...LIBGSF_1_14_53?from_project_id=1545&straight=false --- pkgs/development/libraries/libgsf/default.nix | 13 ++----------- 1 file changed, 2 insertions(+), 11 deletions(-) diff --git a/pkgs/development/libraries/libgsf/default.nix b/pkgs/development/libraries/libgsf/default.nix index dcb460272d16..1f93139eb02d 100644 --- a/pkgs/development/libraries/libgsf/default.nix +++ b/pkgs/development/libraries/libgsf/default.nix @@ -2,7 +2,6 @@ , lib , stdenv , autoreconfHook -, fetchpatch2 , gtk-doc , pkg-config , intltool @@ -20,7 +19,7 @@ stdenv.mkDerivation rec { pname = "libgsf"; - version = "1.14.52"; + version = "1.14.53"; outputs = [ "out" "dev" ]; @@ -29,17 +28,9 @@ stdenv.mkDerivation rec { owner = "GNOME"; repo = "libgsf"; rev = "LIBGSF_${lib.replaceStrings ["."] ["_"] version}"; - hash = "sha256-uSi2/pZiST07YutU8SHNoY2LifEQhohQeyaH9spyG2s="; + hash = "sha256-vC/6QEoV6FvFxQ0YlMkBbTmAtqbkvgZf+9BU8epi8yo="; }; - patches = [ - # Fixes building when nanohttp is not enabled in libxml2, which is the default since libxml2 2.13. - (fetchpatch2 { - url = "https://gitlab.gnome.org/GNOME/libgsf/-/commit/5d4bb55095d3d6ef793c1908a88504183e28644c.diff"; - hash = "sha256-2TF1KDUxJtSMTDze2/dOJQRkW8S1GA9OyFpYzYeKpjQ="; - }) - ]; - postPatch = '' # Fix cross-compilation substituteInPlace configure.ac \