From 2cc8aac7a435159ad1d248cb3178390892a73c5f Mon Sep 17 00:00:00 2001 From: Raphael Robatsch Date: Fri, 26 Jan 2024 12:48:50 +0100 Subject: [PATCH 1/2] mbedtls_2: 2.28.6 -> 2.28.7 Changelog: https://github.com/Mbed-TLS/mbedtls/blob/v2.28.7/ChangeLog Fixes CVE-2024-23170, CVE-2024-23775 --- pkgs/development/libraries/mbedtls/2.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/mbedtls/2.nix b/pkgs/development/libraries/mbedtls/2.nix index b5d8da101618..97d62fad3ced 100644 --- a/pkgs/development/libraries/mbedtls/2.nix +++ b/pkgs/development/libraries/mbedtls/2.nix @@ -1,6 +1,6 @@ { callPackage }: callPackage ./generic.nix { - version = "2.28.6"; - hash = "sha256-1YyA3O0/u7Tcf8rhNmrMGF64/tnitQH65THpXa7N7P8="; + version = "2.28.7"; + hash = "sha256-JI0Frbz4HkPqrLQNrSIj1ikN8201h4kd1wTwyPotERw="; } From 2e8a499d308dd48e0b8f977796c244d644ad8ae6 Mon Sep 17 00:00:00 2001 From: Raphael Robatsch Date: Fri, 26 Jan 2024 12:48:50 +0100 Subject: [PATCH 2/2] mbedtls: 3.5.1 -> 3.5.2 Changelog: https://github.com/Mbed-TLS/mbedtls/blob/v3.5.2/ChangeLog Fixes CVE-2024-23170, CVE-2024-23775 --- pkgs/development/libraries/mbedtls/3.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/mbedtls/3.nix b/pkgs/development/libraries/mbedtls/3.nix index fe463c43f91d..267349ac5d7b 100644 --- a/pkgs/development/libraries/mbedtls/3.nix +++ b/pkgs/development/libraries/mbedtls/3.nix @@ -1,6 +1,6 @@ { callPackage }: callPackage ./generic.nix { - version = "3.5.1"; - hash = "sha256-HxsHcGbSExp1aG5yMR/J3kPL4zqnmNoN5T5wfV3APaw="; + version = "3.5.2"; + hash = "sha256-lVGmnSYccNmRS6vfF/fDiny5cYRPc/wJBpgciFLPUvM="; }