apply OpenSSL 3.0.7 patch

This commit is contained in:
Michele Guerini Rocco 2022-11-01 21:36:16 +01:00
parent 1f36291ba1
commit 1f6909fb24
Signed by: rnhmjoj
GPG Key ID: BFBAF4C975F76450

View File

@ -31,4 +31,23 @@
smartmontools smartmontools
]; ];
# OpenSSL 3.0.7 patch
system.replaceRuntimeDependencies = lib.singleton {
original = pkgs.openssl_3.out;
replacement = (pkgs.openssl_3.overrideAttrs (old: {
patches = old.patches ++ [
(pkgs.fetchpatch {
name = "CVE-2022-3602.patch";
url = "https://github.com/openssl/openssl/commit/fe3b639dc19b325846f4f6801f2f4604f56e3de3.patch";
sha256 = "sha256-+CrWEz6JIbO3n33RyzJ+l+3zlJ7AhyrTcvF9BDgOj+U=";
})
(pkgs.fetchpatch {
name = "CVE-2022-3786.patch";
url = "https://github.com/openssl/openssl/commit/c42165b5706e42f67ef8ef4c351a9a4c5d21639a.patch";
sha256 = "sha256-ZjsyOdgaRi1w16/BNlGFRokOEzfUeYFf3z90ezConF0=";
})
];
})).out;
};
} }