tjh.dev / nixpkgs
Clone of https://github.com/NixOS/nixpkgs.git (to stress-test knotserver)
fork atom

openssl: fix CVE-2019-1543

Originally from https://github.com/NixOS/nixpkgs/pull/61827.

(cherry picked from commit aae4c114a4f8e722ed221d47ecbb6a391682bca9)
Fixes https://github.com/NixOS/nixpkgs/issues/58269.

authored by

Tom Bereknyei and committed by
Vladimír Čunát e4ee5b91 3a335395

+5
unified split
+5
pkgs/development/libraries/openssl/default.nix
··· 136 136 sha256 = "0jza8cmznnyiia43056dij1jdmz62dx17wsn0zxksh9h6817nmaw"; 137 137 patches = [ 138 138 ./1.1/nix-ssl-cert-file.patch 139 + (fetchurl { 140 + name = "long-chacha-nonce.patch"; 141 + url = "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff_plain;h=f426625b6ae9a7831010750490a5f0ad689c5ba3"; 142 + sha256= "02ghqg3vzmzx3s1dwwwbm1p1l4asaiampyg4k9vfrjwficvgpdgp"; 143 + }) 139 144 140 145 (if stdenv.hostPlatform.isDarwin 141 146 then ./1.1/use-etc-ssl-certs-darwin.patch