openssl_1_1_0: 1.1.0g -> 1.1.0h (fixes CVE-2018-0739, CVE-2017-3738)

Also fixes CVE-2018-0733 but we do not support HP-UX to my knowledge :-)

Announcement at [1].

[1] https://www.openssl.org/news/secadv/20180327.txt
This commit is contained in:
Andreas Rammhold 2018-03-27 19:40:12 +02:00
parent 4bf9b4a328
commit 72110322c0
No known key found for this signature in database
GPG Key ID: E432E410B5E48C86

View File

@ -118,15 +118,8 @@ in {
};
openssl_1_1_0 = common {
version = "1.1.0g";
sha256 = "1bvka2wf33w2vxv7yw578nnjqyhz2b3chvfb0l4k2ffscw950kfy";
patches = [
(fetchpatch {
name = "CVE-2017-3738.patch";
url = "https://github.com/openssl/openssl/commit/563066.patch";
sha256 = "0ni9fwpxf8raw8b58pfa15akbqmxx4q64v0ldsm4b9dqhbxf8mkz";
})
];
version = "1.1.0h";
sha256 = "05x509lccqjscgyi935z809pwfm708islypwhmjnb6cyvrn64daq";
};
}