From 468b438f494cfa9f04cf4dcb69413aaceb16c34a Mon Sep 17 00:00:00 2001
From: whispers <whispersofthedawn@duck.com>
Date: Tue, 7 Jul 2026 22:32:05 -0400
Subject: [PATCH] libxfont_2: 2.0.7 -> 2.0.8

announcement: https://lists.x.org/archives/xorg-announce/2026-July/003715.html
advisory: https://lists.x.org/archives/xorg-announce/2026-July/003714.html

Fixes: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
(cherry picked from commit 1e7d467566f5640431265feea3c22546009ce26e)
---
 pkgs/by-name/li/libxfont_2/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/li/libxfont_2/package.nix b/pkgs/by-name/li/libxfont_2/package.nix
index 9f1dbea7359e..0156515019d1 100644
--- a/pkgs/by-name/li/libxfont_2/package.nix
+++ b/pkgs/by-name/li/libxfont_2/package.nix
@@ -15,7 +15,7 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "libxfont_2";
-  version = "2.0.7";
+  version = "2.0.8";
 
   outputs = [
     "out"
@@ -24,7 +24,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "mirror://xorg/individual/lib/libXfont2-${finalAttrs.version}.tar.xz";
-    hash = "sha256-i3uC/eukh2m2lDPo4/u5hKX2vzaLDV9Hq+7EnePljvs=";
+    hash = "sha256-9VbA4Qk6TmkRzJC8SxBtIBkC7hh/10ryBv8WL35qJNU=";
   };
 
   strictDeps = true;