| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | treewide: change pythonForBuild to pythonOnBuildForHost | Adam Joseph | 2023-11-05 | 1 | -1/+1 |
| * | Merge master into staging-next | github-actions[bot] | 2023-09-09 | 1 | -1/+1 |
| |\ |
|
| | * | treewide: replace libc == "msvcrt" with isMinGW•••msvcrt is only one of the libcs in MinGW. We therefore
replace explictly testing for msvcrt with the isMinGW
predicate. This lays the foundation for ucrt64 support.
| Moritz Angermann | 2023-09-08 | 1 | -1/+1 |
| * | | libxml2: 2.11.4 → 2.11.5•••https://gitlab.gnome.org/GNOME/libxml2/-/compare/v2.11.4...v2.11.5
| Bobby Rong | 2023-08-25 | 1 | -2/+2 |
| |/ |
|
| * | libxml2: 2.10.4 → 2.11.4•••https://gitlab.gnome.org/GNOME/libxml2/-/compare/2.10.4...2.11.4
| Jan Tojnar | 2023-07-05 | 2 | -47/+2 |
| * | libxml2: 2.10.3 → 2.10.4•••https://gitlab.gnome.org/GNOME/libxml2/-/compare/v2.10.3...v2.10.4
- CVE-2023-29469: Hashing of empty dict strings isn't deterministic
- CVE-2023-28484: Fix null deref in xmlSchemaFixupComplexType
| Bobby Rong | 2023-04-13 | 1 | -2/+2 |
| * | libxml2: restrict Python support in cross builds | Alyssa Ross | 2023-02-05 | 1 | -1/+4 |
| * | libxml2: 2.10.2 → 2.10.3•••https://gitlab.gnome.org/GNOME/libxml2/-/compare/v2.10.2...v2.10.3
CVE-2022-40304
CVE-2022-40303
Changelog-Reviewed-By: Jan Tojnar <jtojnar@gmail.com>
| Jan Tojnar | 2022-10-26 | 1 | -2/+2 |
| * | libxml2: make amenable to auto-updates | Jan Tojnar | 2022-10-26 | 1 | -7/+17 |
| * | libxml2: use older version during stdenv bootstrap on darwin•••/cc the update PR #195748
| Vladimír Čunát | 2022-10-15 | 1 | -2/+13 |
| * | Merge pull request #195748 from jtojnar/libxml2 | Martin Weinelt | 2022-10-13 | 1 | -14/+2 |
| |\ |
|
| | * | libxml2: 2.10.0 → 2.10.2•••https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.1
https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.2
https://gitlab.gnome.org/GNOME/libxml2/-/compare/v2.10.0...v2.10.2
| Jan Tojnar | 2022-10-13 | 1 | -14/+2 |
| * | | libxml2: enable strictDeps and enable pythonSupport when cross | Artturin | 2022-10-07 | 1 | -2/+5 |
| |/ |
|
| * | libxml2: 2.9.14 → 2.10.0•••- Massive cleanups
- CVE-2022-2309
- More security fixes
- Removal of outdated development manpage libxml.3
https://gitlab.gnome.org/GNOME/libxml2/-/compare/v2.9.14...v2.10.0
- Python detection is broken by `strictDeps` for unknown reasons.
- Also replaced `moveToOutput` with more declarative `outputMan`.
| Jan Tojnar | 2022-09-03 | 1 | -6/+17 |
| * | Merge #171744: libxml2: re-enable tests for darwin•••...into staging
| Vladimír Čunát | 2022-07-29 | 1 | -1/+3 |
| |\ |
|
| | * | libxml2: re-enable tests for darwin•••appears the lack of sandbox on most darwin machines allows the
tests to accidentally find /usr/lib/libxml2.dylib, which
causes problems
| Robert Scott | 2022-05-06 | 1 | -1/+3 |
| * | | Revert "Add mingwW64-llvm cross-system." | Janne Heß | 2022-05-18 | 1 | -1/+1 |
| * | | Merge branch 'mingwW64-clang' into staging | Shea Levy | 2022-05-18 | 1 | -1/+1 |
| |\ \ |
|
| | * | | cross: Allow Windows toolchains to use ucrt as libc. | Shea Levy | 2022-05-06 | 1 | -1/+1 |
| | |/ |
|
| * / | libxml2: update homepage | Sandro Jäckel | 2022-05-11 | 1 | -1/+1 |
| |/ |
|
| * | libxml2: 2.9.13 -> 2.9.14•••Fixes CVE-2022-29824, see https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.14
| Niklas Hambüchen | 2022-05-03 | 1 | -2/+2 |
| * | libxml2: 2.9.12 → 2.9.13•••Fixes CVE-2022-23308
https://mail.gnome.org/archives/xml/2022-February/msg00009.html
| Jan Tojnar | 2022-02-21 | 1 | -11/+3 |
| * | libxml2: fix configure flags•••`$dev` will be substituted by empty string (would have to be `$(dev)`),
causing issues in 2.9.13. Let’s fix that and use the cannonical name.
| Jan Tojnar | 2022-02-21 | 1 | -1/+1 |
| * | libxml2: More cleanups | Jan Tojnar | 2022-02-21 | 1 | -4/+5 |
| * | libxml2: use autoreconfHook•••Avoid stale autotools files and allow building from git easily.
| Jan Tojnar | 2022-02-21 | 1 | -0/+7 |
| * | libxml2: do not disable working test•••Must have been fixed for a while now.
| Jan Tojnar | 2022-02-21 | 1 | -6/+0 |
| * | libxml2: Add myself as a maintainer | Jan Tojnar | 2022-02-21 | 1 | -1/+1 |
| * | libxml2: switch to gnome mirrors•••New versions will only be published there.
Also add GNOME update script.
| Jan Tojnar | 2022-02-21 | 1 | -2/+8 |
| * | libxml2: Format the expression | Jan Tojnar | 2022-02-21 | 1 | -29/+57 |
| * | libxml2: use libiconv on Darwin•••This fixes e.g. python3Packages.beautifulsoup4, which has tests relying
on the wider encoding support enabled by libiconv.
Fixes #137678.
| Emily | 2021-10-02 | 1 | -1/+4 |
| * | libxml2: add strictDeps = true | Guillaume Girol | 2021-08-19 | 1 | -0/+2 |
| * | libxml2: fix static build | Guillaume Girol | 2021-08-19 | 1 | -1/+1 |
| * | libxml2: Work around lxml API misuse | Jan Tojnar | 2021-05-21 | 1 | -1/+8 |
| * | libxml2: cap MACOSX_DEPLOYMENT_TARGET at 10.16•••libxml2 is used in bootstrapping, so the alternates solution of
running libtoolize is tricky here.
| Andrew Childs | 2021-05-17 | 1 | -1/+5 |
| * | libxml2: 2.9.10 → 2.9.12•••https://mail.gnome.org/archives/xml/2021-May/msg00000.html
CVE-2021-3541
| Jan Tojnar | 2021-05-13 | 1 | -25/+3 |
| * | treewide: fix double quoted strings in meta.description•••Signed-off-by: Ben Siraphob <bensiraphob@gmail.com>
| volth | 2021-01-24 | 1 | -1/+1 |
| * | treewide: Start to break up static overlay•••We can use use `stdenv.hostPlatform.isStatic` instead, and move the
logic per package. The least opionated benefit of this is that it makes
it much easier to replace packages with modified ones, as there is no
longer any issue of overlay order.
CC @FRidh @matthewbauer
| John Ericson | 2021-01-03 | 1 | -1/+1 |
| * | libxml2: upstream patch for Python 3.9. | Drew Hess | 2020-11-28 | 1 | -0/+7 |
| * | libxml2: fix CVE-2020-24977•••Fixes an out-of-bounds read when using xmllint with the --htmlout
parameter.
Fixes: CVE-2020-24977
| Martin Weinelt | 2020-11-27 | 1 | -3/+8 |
| * | libxml2Python: Darwin builds require libintl (better fix) | John Wiegley | 2020-08-06 | 1 | -1/+3 |
| * | libxml2: fix python2 build on darwin | Daiderd Jordan | 2020-07-05 | 1 | -1/+2 |
| * | treewide: Per RFC45, remove all unquoted URLs | Michael Reilly | 2020-04-10 | 1 | -1/+1 |
| * | libxml2: add patch for CVE-2019-20388 | Martin Milata | 2020-03-12 | 1 | -0/+5 |
| * | libxml2: add patch for CVE-2020-7595 | Andrew Dunham | 2020-02-01 | 1 | -1/+6 |
| * | libxml2: don't propagate Python bindings | Alyssa Ross | 2020-01-13 | 1 | -1/+0 |
| * | libxml2: fix further structuredAttrs issues | Robin Gloster | 2019-12-30 | 1 | -3/+3 |
| * | libxml2: 2.9.9 -> 2.9.10•••disable python test which was previously failing anyway, but in previous
versions it was being ignored
| Robert Scott | 2019-11-11 | 1 | -2/+8 |
| * | python3Packages.libxml2: Patch to work around python3 + utf-8 itstool crash•••1. Gnumeric has unbalanced XML tags in its doc translations.
2. itstool's XML error handler tries to print this error with context.
3. libxml2's context snipper treats the data as bytes, not UTF-8.
4. python3Packages.libxml2 casts the context to a UTF-8 Python string.
5. itstool dereferences a null pointer.
This patch intervenes at #4.
In https://bugzilla.gnome.org/show_bug.cgi?id=789714#c4 , upstream
suggests that intervening at #3 would be better -- that each of the four
copies of xmlParserPrintFileContextInternal() have four additional UTF-8
problems, one of which is that the caret indicator ought to count
"unicode characters" not bytes. But to position a caret correctly, a
character count is not sufficient -- this would need to use icu's BiDi
logic (with fallback to doing something wrong when libxml2 is configured
not to use icu) -- which makes a 'correct' fix a much larger project
than this simple band-aid.
| Chuck | 2019-10-31 | 2 | -0/+44 |
| * | libxml2: use python3 for build and as default for bindings•••Changing the default may cause breakage, however, users should have
already switched to `pythonPackages.libxml2` long ago.
| Frederik Rietdijk | 2019-10-29 | 1 | -5/+2 |
| * | treewide: name -> pname (easy cases) (#66585)•••treewide replacement of
stdenv.mkDerivation rec {
name = "*-${version}";
version = "*";
to pname | volth | 2019-08-15 | 1 | -2/+2 |
