From 384a708e6dca86ceda3d4867233153e781ad052c Mon Sep 17 00:00:00 2001 From: Martin Weinelt Date: Tue, 15 Mar 2022 16:34:11 +0100 Subject: [PATCH 1/2] openssl_3_0: 3.0.1 -> 3.0.2 https://github.com/openssl/openssl/blob/openssl-3.0.2/CHANGES.md#changes-between-301-and-302-15-mar-2022 Fixes: CVE-2022-0778 --- pkgs/development/libraries/openssl/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/openssl/default.nix b/pkgs/development/libraries/openssl/default.nix index 390227cfe95c..f917bac1a17c 100644 --- a/pkgs/development/libraries/openssl/default.nix +++ b/pkgs/development/libraries/openssl/default.nix @@ -201,8 +201,8 @@ in { }; openssl_3_0 = common { - version = "3.0.1"; - sha256 = "sha256-wxGthTNTvOeW7a0BqGLFCopYf2Ln4hAO9GWrU+ybBtE="; + version = "3.0.2"; + sha256 = "sha256-mOkczq1NR1auPJzeXgkZGo5YbZ9NUIOOfsCdZBHf22M="; patches = [ ./3.0/nix-ssl-cert-file.patch From 72bb369245a84beaa5596f8ed551be470a20d6b2 Mon Sep 17 00:00:00 2001 From: Martin Weinelt Date: Tue, 15 Mar 2022 16:37:58 +0100 Subject: [PATCH 2/2] openssl_1_1: 1.1.1m -> 1.1.1n https://github.com/openssl/openssl/blob/OpenSSL_1_1_1n/CHANGES#L10 Fixes: CVE-2022-0778 --- pkgs/development/libraries/openssl/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/openssl/default.nix b/pkgs/development/libraries/openssl/default.nix index f917bac1a17c..33ddbf7018c5 100644 --- a/pkgs/development/libraries/openssl/default.nix +++ b/pkgs/development/libraries/openssl/default.nix @@ -186,8 +186,8 @@ in { }; openssl_1_1 = common rec { - version = "1.1.1m"; - sha256 = "sha256-+JGZvosjykX8fLnx2NPuZzEjGChq0DD1MWrKZGLbbJY="; + version = "1.1.1n"; + sha256 = "sha256-QNzrUaT2pSdb3g5r8g70uRv8Mu1XwFUuLo4VRjNysXo="; patches = [ ./1.1/nix-ssl-cert-file.patch