Vladimír Čunát
3fccac4914
The second item (severity: High) has possible unauthenticated RCE: https://www.openwall.com/lists/oss-security/2026/01/27/5 https://github.com/openssl/openssl/blob/openssl-3.0.19/CHANGES.md#openssl-30 The patches differ in whitespace only, as that's what upstream changed.
14 lines
548 B
Diff
14 lines
548 B
Diff
diff --git a/include/internal/cryptlib.h b/include/internal/cryptlib.h
|
|
index 329ef62..9a8df64 100644
|
|
--- a/include/internal/cryptlib.h
|
|
+++ b/include/internal/cryptlib.h
|
|
@@ -56,7 +56,7 @@ DEFINE_LHASH_OF(MEM);
|
|
#ifndef OPENSSL_SYS_VMS
|
|
#define X509_CERT_AREA OPENSSLDIR
|
|
#define X509_CERT_DIR OPENSSLDIR "/certs"
|
|
-#define X509_CERT_FILE OPENSSLDIR "/cert.pem"
|
|
+#define X509_CERT_FILE "/nix/var/nix/profiles/default/etc/ssl/certs/ca-bundle.crt"
|
|
#define X509_PRIVATE_DIR OPENSSLDIR "/private"
|
|
#define CTLOG_FILE OPENSSLDIR "/ct_log_list.cnf"
|
|
#else
|