openssl_3: 3.0.15 -> 3.0.16

Security Fixes in 3.0.16:

* Fixed timing side-channel in ECDSA signature computation. (CVE-2024-13176)
* Fixed possible OOB memory access with invalid low-level GF(2^m) elliptic curve parameters. (CVE-2024-9143)

Signed-off-by: Markus Theil <theil.markus@gmail.com>
This commit is contained in:
Markus Theil
2025-02-11 16:02:03 +01:00
parent 7a64edd4df
commit 9a706eda06
@@ -344,8 +344,8 @@ in
};
openssl_3 = common {
version = "3.0.15";
hash = "sha256-I8Zm0O3yDxQkmz2PA2isrumrWFsJ4d6CEHxm4fPslTM=";
version = "3.0.16";
hash = "sha256-V+A8UP6rXTGxUq8rdk8QN5rs2O6S8WyYWYPOSpn374Y=";
patches = [
./3.0/nix-ssl-cert-file.patch