646b892680
Some checks failed
Periodic Merges (6h) / master → staging-nixos (push) Failing after 12m50s
Periodic Merges (6h) / master → staging-next (push) Failing after 12m54s
Periodic Merges (24h) / merge-base(master,staging) → haskell-updates (push) Failing after 11m54s
Periodic Merges (6h) / staging-next → staging (push) Failing after 12m13s
Periodic Merges (24h) / staging-next-25.05 → staging-25.05 (push) Failing after 13m24s
Periodic Merges (24h) / release-25.05 → staging-next-25.05 (push) Failing after 14m28s
63 lines
2.0 KiB
Nix
63 lines
2.0 KiB
Nix
{
|
|
lib,
|
|
callPackage,
|
|
fetchFromGitLab,
|
|
fetchpatch2,
|
|
}:
|
|
|
|
let
|
|
packages = {
|
|
libxml2_13 = callPackage ./common.nix {
|
|
version = "2.13.8";
|
|
src = fetchFromGitLab {
|
|
domain = "gitlab.gnome.org";
|
|
owner = "GNOME";
|
|
repo = "libxml2";
|
|
tag = "v${packages.libxml2_13.version}";
|
|
hash = "sha256-acemyYs1yRSTSLH7YCGxnQzrEDm8YPTK4HtisC36LsY=";
|
|
};
|
|
extraPatches = [
|
|
# same as upstream patch but fixed conflict and added required import:
|
|
# https://gitlab.gnome.org/GNOME/libxml2/-/commit/acbbeef9f5dcdcc901c5f3fa14d583ef8cfd22f0.diff
|
|
./CVE-2025-6021.patch
|
|
(fetchpatch2 {
|
|
name = "CVE-2025-49794-49796.patch";
|
|
url = "https://gitlab.gnome.org/GNOME/libxml2/-/commit/f7ebc65f05bffded58d1e1b2138eb124c2e44f21.patch";
|
|
hash = "sha256-k+IGq6pbv9EA7o+uDocEAUqIammEjLj27Z+2RF5EMrs=";
|
|
})
|
|
(fetchpatch2 {
|
|
name = "CVE-2025-49795.patch";
|
|
url = "https://gitlab.gnome.org/GNOME/libxml2/-/commit/c24909ba2601848825b49a60f988222da3019667.patch";
|
|
hash = "sha256-r7PYKr5cDDNNMtM3ogNLsucPFTwP/uoC7McijyLl4kU=";
|
|
excludes = [ "runtest.c" ]; # tests were rewritten in C and are on schematron for 2.13.x, meaning this does not apply
|
|
})
|
|
# same as upstream, fixed conflicts
|
|
# https://gitlab.gnome.org/GNOME/libxml2/-/commit/c340e419505cf4bf1d9ed7019a87cc00ec200434
|
|
./CVE-2025-6170.patch
|
|
];
|
|
freezeUpdateScript = true;
|
|
extraMeta = {
|
|
maintainers = with lib.maintainers; [
|
|
gepbird
|
|
];
|
|
};
|
|
};
|
|
libxml2 = callPackage ./common.nix {
|
|
version = "2.14.6";
|
|
src = fetchFromGitLab {
|
|
domain = "gitlab.gnome.org";
|
|
owner = "GNOME";
|
|
repo = "libxml2";
|
|
tag = "v${packages.libxml2.version}";
|
|
hash = "sha256-EIcNL5B/o74hyc1N+ShrlKsPL5tHhiGgkCR1D7FcDjw=";
|
|
};
|
|
extraMeta = {
|
|
maintainers = with lib.maintainers; [
|
|
jtojnar
|
|
];
|
|
};
|
|
};
|
|
};
|
|
in
|
|
packages
|