GNU bug report logs - #73691
[PATCH 0/2] gnu: java-xerces: Update to 2.12.2. [security fixes]

Previous Next

Full log

Message #8 received at 73691 <at> debbugs.gnu.org (full text, mbox):

From: Nicolas Graves <ngraves <at> ngraves.fr>
To: 73691 <at> debbugs.gnu.org
Cc: Nicolas Graves <ngraves <at> ngraves.fr>
Subject: [PATCH 1/2] gnu: java-xerces: Update to 2.12.2. [security fixes]
Date: Tue,  8 Oct 2024 08:32:13 +0200

This fixes CVE-2022-23437.

* gnu/packages/java.scm (java-xerces): Update to 2.12.2.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index b43b57754b..fec741f5f2 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -12599,14 +12599,14 @@ (define-public java-joda-time
 (define-public java-xerces
   (package
     (name "java-xerces")
-    (version "2.12.1")
+    (version "2.12.2")
     (source
      (origin
        (method url-fetch)
        (uri (string-append "mirror://apache/xerces/j/source/"
                            "Xerces-J-src." version ".tar.gz"))
        (sha256
-        (base32 "0494kq36gw3nah19ifb720vwxbpg4ww0k6m3zq6wyanw6a083p6s"))
+        (base32 "1s2fnfx5flmhs3q30bxdsa6vs52m6vbnqd3m4cc5r4wfr3afplbd"))
        (patches (search-patches
                  "java-xerces-xjavac_taskdef.patch"
                  "java-xerces-build_dont_unzip.patch"
-- 
2.46.0

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.