Commit graph

133 commits

Author SHA1 Message Date
Jan Tojnar cb8aaea8fd libxml2: 2.9.12 → 2.9.13
Fixes CVE-2022-23308

https://mail.gnome.org/archives/xml/2022-February/msg00009.html
2022-02-21 14:55:24 +01:00
Jan Tojnar 7eb38d554c libxml2: fix configure flags
`$dev` will be substituted by empty string (would have to be `$(dev)`),
causing issues in 2.9.13. Let’s fix that and use the cannonical name.
2022-02-21 14:55:24 +01:00
Jan Tojnar 65ca2a4bbb libxml2: More cleanups 2022-02-21 14:55:24 +01:00
Jan Tojnar 9c57fa9fc1 libxml2: use autoreconfHook
Avoid stale autotools files and allow building from git easily.
2022-02-21 14:55:24 +01:00
Jan Tojnar 8570316d3d libxml2: do not disable working test
Must have been fixed for a while now.
2022-02-21 14:55:23 +01:00
Jan Tojnar 33ee72f4b1 libxml2: Add myself as a maintainer 2022-02-21 14:55:23 +01:00
Jan Tojnar ce668865b9 libxml2: switch to gnome mirrors
New versions will only be published there.

Also add GNOME update script.
2022-02-21 14:55:23 +01:00
Jan Tojnar 8ca7bb10a8 libxml2: Format the expression 2022-02-21 14:55:23 +01:00
Emily 20a6d8a241 libxml2: use libiconv on Darwin
This fixes e.g. python3Packages.beautifulsoup4, which has tests relying
on the wider encoding support enabled by libiconv.

Fixes #137678.
2021-10-02 10:05:17 +09:00
Guillaume Girol bf74dfbc54 libxml2: add strictDeps = true 2021-08-19 09:30:47 +02:00
Guillaume Girol 652f7fafd2 libxml2: fix static build 2021-08-19 09:30:46 +02:00
Jan Tojnar 7099f24c4a libxml2: Work around lxml API misuse 2021-05-21 18:57:38 -07:00
Andrew Childs 3e47747657 libxml2: cap MACOSX_DEPLOYMENT_TARGET at 10.16
libxml2 is used in bootstrapping, so the alternates solution of
running libtoolize is tricky here.
2021-05-17 00:27:03 +09:00
Jan Tojnar d01a4e3fe9 libxml2: 2.9.10 → 2.9.12
https://mail.gnome.org/archives/xml/2021-May/msg00000.html

CVE-2021-3541
2021-05-13 23:12:59 -07:00
volth bc0d605cf1 treewide: fix double quoted strings in meta.description
Signed-off-by: Ben Siraphob <bensiraphob@gmail.com>
2021-01-24 19:56:59 +07:00
John Ericson f52263ced0 treewide: Start to break up static overlay
We can use use `stdenv.hostPlatform.isStatic` instead, and move the
logic per package. The least opionated benefit of this is that it makes
it much easier to replace packages with modified ones, as there is no
longer any issue of overlay order.

CC @FRidh @matthewbauer
2021-01-03 19:18:16 +00:00
Drew Hess 81eddf1516 libxml2: upstream patch for Python 3.9. 2020-11-28 18:26:15 +01:00
Martin Weinelt ab61f1622b libxml2: fix CVE-2020-24977
Fixes an out-of-bounds read when using xmllint with the --htmlout
parameter.

Fixes: CVE-2020-24977
2020-11-27 20:33:58 +01:00
John Wiegley 6a359b2333
libxml2Python: Darwin builds require libintl (better fix) 2020-08-06 15:52:57 -07:00
Daiderd Jordan cc148a4b3e
libxml2: fix python2 build on darwin 2020-07-05 15:09:38 +02:00
Michael Reilly 84cf00f980
treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
Martin Milata 291c73568a libxml2: add patch for CVE-2019-20388 2020-03-12 23:43:47 +00:00
Andrew Dunham 147f32ac2b libxml2: add patch for CVE-2020-7595 2020-02-01 15:23:47 -08:00
Alyssa Ross 863fc6574d libxml2: don't propagate Python bindings 2020-01-13 16:46:02 +00:00
Robin Gloster 74c2020e8c
libxml2: fix further structuredAttrs issues 2019-12-30 11:13:38 +01:00
Robert Scott c3c77ecfde libxml2: 2.9.9 -> 2.9.10
disable python test which was previously failing anyway, but in previous
versions it was being ignored
2019-11-11 01:18:39 +00:00
Chuck c0cecd0e60 python3Packages.libxml2: Patch to work around python3 + utf-8 itstool crash
1. Gnumeric has unbalanced XML tags in its doc translations.
2. itstool's XML error handler tries to print this error with context.
3. libxml2's context snipper treats the data as bytes, not UTF-8.
4. python3Packages.libxml2 casts the context to a UTF-8 Python string.
5. itstool dereferences a null pointer.

This patch intervenes at #4.

In https://bugzilla.gnome.org/show_bug.cgi?id=789714#c4 , upstream
suggests that intervening at #3 would be better -- that each of the four
copies of xmlParserPrintFileContextInternal() have four additional UTF-8
problems, one of which is that the caret indicator ought to count
"unicode characters" not bytes.  But to position a caret correctly, a
character count is not sufficient -- this would need to use icu's BiDi
logic (with fallback to doing something wrong when libxml2 is configured
not to use icu) -- which makes a 'correct' fix a much larger project
than this simple band-aid.
2019-10-31 17:30:33 -07:00
Frederik Rietdijk a51aa02c78 libxml2: use python3 for build and as default for bindings
Changing the default may cause breakage, however, users should have
already switched to `pythonPackages.libxml2` long ago.
2019-10-29 13:47:03 +01:00
volth 46420bbaa3 treewide: name -> pname (easy cases) (#66585)
treewide replacement of

stdenv.mkDerivation rec {
  name = "*-${version}";
  version = "*";

to pname
2019-08-15 13:41:18 +01:00
volth f3282c8d1e treewide: remove unused variables (#63177)
* treewide: remove unused variables

* making ofborg happy
2019-06-16 19:59:05 +00:00
Will Dietz 96890e2390 libxml2: 2.9.8 -> 2.9.9 2019-01-03 14:36:08 -06:00
Matthew Bauer 245f25586b libxml2: only use static output with both shared & static
The static output should only get created when both enableShared and
enableStatic are set. Otherwise there would be libraries missing from
the main output when enableShared = false & enableStatic = true. This
can cause issues in some packages that don’t know about libxml2’s
static output.

(cherry picked from commit 2bd6bb0a4bf21005d8877c735709cd21d22e05bd)
(cherry picked from commit 1421a39c1e62584d346185ad49484b11b7703dc1)
2018-11-13 06:57:54 -06:00
Frederik Rietdijk d0d04c26d7 libxml2: support python3 2018-10-17 10:00:20 +02:00
John Ericson 0828e2d8c3 treewide: Remove usage of remaining redundant platform compatability stuff
Want to get this out of here for 18.09, so it can be deprecated
thereafter.
2018-08-30 17:20:32 -04:00
Andreas Rammhold 06e7a48f45
libxml2: fix CVE-2018-14567 & CVE-2018-14404
Since the already added patch for CVE-2018-9251 also affects
CVE-2018-14567 I renamed the applied patch accordingly.
2018-08-15 22:54:52 +02:00
Tim Steinbach 99fb65fb11
libxml2: Fix CVE-2018-9251 2018-08-05 18:20:33 -04:00
John Ericson e517da3929 libxml2: Use enableFeature 2018-08-02 15:10:43 -04:00
John Ericson 5be14c5c74 libxml2: Remove crossAttrs 2018-07-24 18:36:59 -04:00
Matthew Bauer 916f096911
Merge pull request #43890 from matthewbauer/mingw-fixes
Mingw fixes
2018-07-21 17:04:20 -04:00
Matthew Bauer 92daacc9b0 libxml2: support all platforms
Mingw/Windows support works out of the box.
2018-07-21 10:10:47 -04:00
volth 52f53c69ce pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
Antoine Eiche 5bfdf34bed libxml2: add enableStatic argument
If `enableStatic` is set to true, the output `static` contains the
static library.
2018-06-22 21:00:20 +02:00
Orivej Desh ea69fba953 Revert "libxml2: add static output"
This reverts commit 1897c352f5 on master.

This is a mass rebuild that should go through staging.
2018-06-13 16:07:54 +00:00
Antoine Eiche 1897c352f5 libxml2: add static output 2018-06-13 09:20:02 +02:00
Ryan Mulligan 3157bd3dc9 libxml2: 2.9.7 -> 2.9.8
Semi-automatic update generated by https://github.com/ryantm/nix-update tools. These checks were done:

- built on NixOS
- Warning: no binary found that responded to help or version flags. (This warning appears even if the package isn't expected to have binaries.)
- found 2.9.8 in filename of file in /nix/store/cjycf1wx5a5l22a9kwhpnnh2h9i7pahk-libxc-4.0.4
2018-03-14 19:51:48 -07:00
Will Dietz 158c3c4864 libxml2: disable tests also 2018-02-13 09:44:41 -06:00
Jan Tojnar 98ff9fca29
libxml2: 2.9.5 → 2.9.7 2017-11-23 05:28:39 +01:00
Ben Gamari 09ce1ebd8f libxml2: Don't run tests when cross-compiling 2017-10-27 20:32:25 -04:00
Orivej Desh 604ca93182 libxml2: 2.9.4 -> 2.9.5 2017-09-15 17:28:31 +00:00
Tuomas Tynkkynen 1ff422aa23 treewide: Add man & info outputs where necessary (instead of doc)
Because man & info pages won't be going to $doc after the next commit.
Scripted change for the files having one-package-per-file.
2017-08-11 21:32:54 +03:00