guix_mirror_bot pushed a commit to branch master
in repository guix.
commit b1b11ad30090bab4f622abe9eac0c022fef51103
Author: Nicolas Graves <ngra...@ngraves.fr>
AuthorDate: Wed Aug 27 17:34:00 2025 +0200
gnu: libreoffice: Avoid libxml2@2.9 propagation.
libxml2@2.9 has CVEs, we don't want it in user profiles. If the
following libraries end up in a user profile, then this vulnerable
libxml2 is propagated.
* gnu/packages/libreoffice.scm (libe-book, libcmis, libabw, libetonyek)
[propagated-inputs]: Replace libxml2 by libxml2-next.
Signed-off-by: Liliana Marie Prikler <liliana.prik...@gmail.com>
---
gnu/packages/libreoffice.scm | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/gnu/packages/libreoffice.scm b/gnu/packages/libreoffice.scm
index 1a5881e912..9b67410ae3 100644
--- a/gnu/packages/libreoffice.scm
+++ b/gnu/packages/libreoffice.scm
@@ -286,7 +286,7 @@ into other word processors.")
(native-inputs
(list cppunit gperf pkg-config))
(propagated-inputs ; in Requires or Requires.private field of .pkg
- (list icu4c liblangtag librevenge libxml2))
+ (list icu4c liblangtag librevenge libxml2-next))
(inputs
(list boost))
(arguments
@@ -372,7 +372,7 @@ working with graphics in the WPG (WordPerfect Graphics)
format.")
(native-inputs
(list autoconf automake libtool cppunit pkg-config))
(propagated-inputs ;in Requires field of .pkg
- (list curl libxml2))
+ (list curl libxml2-next))
(inputs
(list boost cyrus-sasl openssl))
(arguments
@@ -413,7 +413,7 @@ as Alfresco or Nuxeo.")
(native-inputs
(list doxygen gperf perl pkg-config))
(propagated-inputs ; in Requires or Requires.private field of .pkg
- (list librevenge libxml2))
+ (list librevenge libxml2-next))
(inputs
(list boost))
(home-page "https://wiki.documentfoundation.org/DLP/Libraries/libabw";)
@@ -467,7 +467,7 @@ CorelDRAW documents of all versions.")
(native-inputs
(list cppunit doxygen gperf pkg-config))
(propagated-inputs ; in Requires or Requires.private field of .pkg
- (list liblangtag librevenge libxml2 zlib))
+ (list liblangtag librevenge libxml2-next zlib))
(inputs
(list boost glm mdds))
(home-page "https://wiki.documentfoundation.org/DLP/Libraries/libetonyek";)
