From d0c0d01afc8ea5d0f189fd4f4805e98b136a7299 Mon Sep 17 00:00:00 2001 From: Ruud van Asseldonk Date: Fri, 19 Jun 2026 19:55:30 +0200 Subject: [PATCH] libressl_4_3: 4.3.1 -> 4.3.2 --- pkgs/by-name/li/libressl/default.nix | 21 ++++----------------- 1 file changed, 4 insertions(+), 17 deletions(-) diff --git a/pkgs/by-name/li/libressl/default.nix b/pkgs/by-name/li/libressl/default.nix index 4bf139efc381..6f0faa1a563d 100644 --- a/pkgs/by-name/li/libressl/default.nix +++ b/pkgs/by-name/li/libressl/default.nix @@ -151,23 +151,10 @@ in ]; }; - # 4.3 was released April 2026 and will become unsupported one year after the - # release of OpenBSD 7.9. + # 4.3 was released April 2026 and will become unsupported on May 19, 2027, + # one year after the release of OpenBSD 7.9. libressl_4_3 = generic { - version = "4.3.1"; - hash = "sha256-wttCrOFOfVQZgm+rNadC7G5NEnJaBRpR0M6jwQug+lA="; - patches = [ - # Fix for https://github.com/libressl/portable/issues/1278, where LibreSSL - # 4.3 started requiring executable stack because some objects were missing - # a .note.GNU-stack section; will probably be included in the next release. - (fetchpatch { - url = "https://raw.githubusercontent.com/libressl/portable/4dae91d056c6c75ba5cf2bc5e6148b8e02239119/patches/gnu-stack.patch"; - hash = "sha256-Q1oWL4N8w5Zmjfq5QkTJR53NgZ4GqChSDaBicli5G2I="; - # This patch is written to be applied with -p0, with no leading path - # component, but Nix applies with -p1 by default, so we add it to not - # break compatibility with how other patches must be applied. - decode = "sed 's|^--- |--- a/|; s|^+++ |+++ b/|'"; - }) - ]; + version = "4.3.2"; + hash = "sha256-7fAa7iTGXWnmqe/LnUS82mgv+dTzu72V55Th36kIR7U="; }; }