guix-mirrors/gnu
John Kehayias 91d711474c
gnu: libxslt: Update to 1.1.43 [security-fixes].
The following CVEs were fixed:

- CVE-2025-24855: Fix use-after-free of XPath context node
- CVE-2024-55549: Fix UAF related to excluded namespaces

Additionally, a patch from Debian for generated IDs and reproduciblity no
longer applies cleanly and is likely problematic or (partially?) unneeded.
See <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=902051> for the latest.

* gnu/packages/xml.scm (libxslt): Update to 1.1.43.
(source): Remove patch.
* gnu/packages/patches/libxslt-generated-ids.patch: Delete it.
* gnu/local.mk (dist_patch_DATA): Unregister it.

Change-Id: Ia10d906bab090792d28524beda6aca79a5a21684
2025-09-30 09:29:52 +09:00
..
bootloader system: Add u-boot-rock-4c-plus-rk3399. 2025-09-18 23:28:19 +02:00
build file-systems: Fix article usage in docstrings. 2025-09-21 19:08:33 +02:00
home home: services: Fix binding options in sway-service-type. 2025-09-26 21:46:19 +02:00
installer
machine
packages gnu: libxslt: Update to 1.1.43 [security-fixes]. 2025-09-30 09:29:52 +09:00
services services: tor: Add nss-certs. 2025-09-29 15:28:08 +02:00
system gnu: linux-initrd: Fix f2fs module dependencies 2025-09-29 12:56:30 +03:00
tests gnu: Merge (gnu packages openbox) with (gnu packages wm). 2025-09-28 22:24:06 +01:00
artwork.scm
bootloader.scm
ci.scm
compression.scm
home.scm
image.scm
installer.scm
local.mk gnu: libxslt: Update to 1.1.43 [security-fixes]. 2025-09-30 09:29:52 +09:00
machine.scm
packages.scm
services.scm Reapply "Update Maxim's email address." 2025-09-18 13:44:12 +09:00
system.scm Reapply "Update Maxim's email address." 2025-09-18 13:44:12 +09:00
tests.scm