Commit 332c90e8 authored by Thomas Gerbet's avatar Thomas Gerbet
Browse files

python3Packages.signxml: 4.0.3 -> 4.0.5 

Fixes CVE-2025-48994 and CVE-2025-48995.

Changes:
https://github.com/XML-Security/signxml/releases/tag/v4.0.4
https://github.com/XML-Security/signxml/releases/tag/v4.0.5
parent 9f12e216

pkgs/development/python-modules/signxml/default.nix

+8 −4
Original line number Diff line number Diff line
@@ -8,12 +8,13 @@ 
  pyopenssl,

  pytestCheckHook,

  pythonOlder,

  setuptools,

  hatchling,

  hatch-vcs,

}:



buildPythonPackage rec {

  pname = "signxml";

  version = "4.0.3";

  version = "4.0.5";

  pyproject = true;



  disabled = pythonOlder "3.7";
@@ -22,10 +23,13 @@ buildPythonPackage rec { 
    owner = "XML-Security";

    repo = "signxml";

    tag = "v${version}";

    hash = "sha256-TZqYNYVzGEhftP/RXiBtThK38AOPLi2DRAwnFh2Za5U=";

    hash = "sha256-dO7erKXyX/3qwWVC1laABOb+0yAkCy51rrnG1opL6pY=";

  };



  build-system = [ setuptools ];

  build-system = [

    hatchling

    hatch-vcs

  ];



  dependencies = [

    certifi