From 29ee41feff51c3269c2c160fa4d67de6ba5cca36 Mon Sep 17 00:00:00 2001 From: Markus Theil Date: Tue, 4 Jun 2024 17:58:36 +0200 Subject: [PATCH] openssl_3: 3.0.13 -> 3.0.14 Changelog: https://github.com/openssl/openssl/blob/openssl-3.0/CHANGES.md#changes-between-3013-and-3014-4-jun-2024 CVEs fixed: - Fixed potential use after free after SSL_free_buffers() is called. (CVE-2024-4741) - Fixed an issue where checking excessively long DSA keys or parameters may be very slow. (CVE-2024-4603) - Fixed an issue where some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions. An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service. (CVE-2024-2511) Signed-off-by: Markus Theil --- pkgs/development/libraries/openssl/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/openssl/default.nix b/pkgs/development/libraries/openssl/default.nix index 0e144726cf85..74b9ddaa8162 100644 --- a/pkgs/development/libraries/openssl/default.nix +++ b/pkgs/development/libraries/openssl/default.nix @@ -267,8 +267,8 @@ in { }; openssl_3 = common { - version = "3.0.13"; - hash = "sha256-iFJXU/edO+wn0vp8ZqoLkrOqlJja/ZPXz6SzeAza4xM="; + version = "3.0.14"; + hash = "sha256-7soDXU3U6E/CWEbZUtpil0hK+gZQpvhMaC453zpBI8o="; patches = [ ./3.0/nix-ssl-cert-file.patch