openssl_3: 3.0.15 -> 3.0.16
Security Fixes in 3.0.16: * Fixed timing side-channel in ECDSA signature computation. (CVE-2024-13176) * Fixed possible OOB memory access with invalid low-level GF(2^m) elliptic curve parameters. (CVE-2024-9143) Signed-off-by: Markus Theil <theil.markus@gmail.com>
This commit is contained in:
@@ -344,8 +344,8 @@ in
|
||||
};
|
||||
|
||||
openssl_3 = common {
|
||||
version = "3.0.15";
|
||||
hash = "sha256-I8Zm0O3yDxQkmz2PA2isrumrWFsJ4d6CEHxm4fPslTM=";
|
||||
version = "3.0.16";
|
||||
hash = "sha256-V+A8UP6rXTGxUq8rdk8QN5rs2O6S8WyYWYPOSpn374Y=";
|
||||
|
||||
patches = [
|
||||
./3.0/nix-ssl-cert-file.patch
|
||||
|
||||
Reference in New Issue
Block a user