apply OpenSSL 3.0.7 patch
This commit is contained in:
parent
1f36291ba1
commit
1f6909fb24
19
packages.nix
19
packages.nix
@ -31,4 +31,23 @@
|
|||||||
smartmontools
|
smartmontools
|
||||||
];
|
];
|
||||||
|
|
||||||
|
# OpenSSL 3.0.7 patch
|
||||||
|
system.replaceRuntimeDependencies = lib.singleton {
|
||||||
|
original = pkgs.openssl_3.out;
|
||||||
|
replacement = (pkgs.openssl_3.overrideAttrs (old: {
|
||||||
|
patches = old.patches ++ [
|
||||||
|
(pkgs.fetchpatch {
|
||||||
|
name = "CVE-2022-3602.patch";
|
||||||
|
url = "https://github.com/openssl/openssl/commit/fe3b639dc19b325846f4f6801f2f4604f56e3de3.patch";
|
||||||
|
sha256 = "sha256-+CrWEz6JIbO3n33RyzJ+l+3zlJ7AhyrTcvF9BDgOj+U=";
|
||||||
|
})
|
||||||
|
(pkgs.fetchpatch {
|
||||||
|
name = "CVE-2022-3786.patch";
|
||||||
|
url = "https://github.com/openssl/openssl/commit/c42165b5706e42f67ef8ef4c351a9a4c5d21639a.patch";
|
||||||
|
sha256 = "sha256-ZjsyOdgaRi1w16/BNlGFRokOEzfUeYFf3z90ezConF0=";
|
||||||
|
})
|
||||||
|
];
|
||||||
|
})).out;
|
||||||
|
};
|
||||||
|
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user