libxml2: 2.10.3 → 2.10.4

https://gitlab.gnome.org/GNOME/libxml2/-/compare/v2.10.3...v2.10.4

- CVE-2023-29469: Hashing of empty dict strings isn't deterministic
- CVE-2023-28484: Fix null deref in xmlSchemaFixupComplexType
This commit is contained in:
Bobby Rong 2023-04-13 01:06:52 +00:00
parent 6e45c5384d
commit 40074520d1
No known key found for this signature in database

View file

@ -34,7 +34,7 @@ in
let
libxml = stdenv.mkDerivation rec {
pname = "libxml2";
version = "2.10.3";
version = "2.10.4";
outputs = [ "bin" "dev" "out" "doc" ]
++ lib.optional pythonSupport "py"
@ -43,7 +43,7 @@ libxml = stdenv.mkDerivation rec {
src = fetchurl {
url = "mirror://gnome/sources/libxml2/${lib.versions.majorMinor version}/libxml2-${version}.tar.xz";
sha256 = "XSzD14vsPb4hKp1/pimtolp9qSivQyyTBg/1wX7iipw=";
sha256 = "7QyRxYRQCPGTZznk7uIDVTHByUdCxlQfRO5m2IWUjUU=";
};
patches = [