From 88f9412faa53de2910fe893b5442c070f4beac38 Mon Sep 17 00:00:00 2001 From: Markus Theil Date: Tue, 4 Jun 2024 18:04:58 +0200 Subject: [PATCH] openssl_3_3: 3.3.0 -> 3.3.1 Changelog: https://github.com/openssl/openssl/blob/openssl-3.3/CHANGES.md#changes-between-330-and-331-4-jun-2024 CVEs fixed: - Fixed potential use after free after SSL_free_buffers() is called. (CVE-2024-4741) - Fixed an issue where checking excessively long DSA keys or parameters may be very slow. (CVE-2024-4603) Signed-off-by: Markus Theil --- pkgs/development/libraries/openssl/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/openssl/default.nix b/pkgs/development/libraries/openssl/default.nix index 4e7cee58808c..0b17eaf800b7 100644 --- a/pkgs/development/libraries/openssl/default.nix +++ b/pkgs/development/libraries/openssl/default.nix @@ -313,8 +313,8 @@ in { }; openssl_3_3 = common { - version = "3.3.0"; - hash = "sha256-U+ZrBDMipgar8Ah+dpmg4DOjf6E/65dC3zXDozsY+wI="; + version = "3.3.1"; + hash = "sha256-d3zVlihMiDN1oqehG/XSeG/FQTJV76sgxQ1v/m0CC34="; patches = [ ./3.0/nix-ssl-cert-file.patch