From 67d677a7ae5a32cda840b772889a4fa78fadd81a Mon Sep 17 00:00:00 2001 From: Markus Theil Date: Fri, 12 Jun 2026 09:02:06 +0200 Subject: [PATCH 1/3] openssl_3: 3.0.20 -> 3.0.21 updated to fix multiple CVEs. See: https://github.com/openssl/openssl/releases/tag/openssl-3.0.21 Signed-off-by: Markus Theil (cherry picked from commit 3ec7a2b08845e07be27bbd5b6fbdacaeef14c734) --- pkgs/development/libraries/openssl/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/openssl/default.nix b/pkgs/development/libraries/openssl/default.nix index 352500e7a78b..9b1864ca7624 100644 --- a/pkgs/development/libraries/openssl/default.nix +++ b/pkgs/development/libraries/openssl/default.nix @@ -444,8 +444,8 @@ in }; openssl_3 = common { - version = "3.0.20"; - hash = "sha256-yAoB38cOzk3CEWiTLDdzkELUBNRszIGlmG3XUxTs2m8="; + version = "3.0.21"; + hash = "sha256-YX4pr45CH0ZklISkk35IxoXkf0ZIgWfJgviLxOwdUi8="; patches = [ # Support for NIX_SSL_CERT_FILE, motivation: From b090af00931a842ead4f1b0b44619d56345bf0fd Mon Sep 17 00:00:00 2001 From: Markus Theil Date: Fri, 12 Jun 2026 09:02:23 +0200 Subject: [PATCH 2/3] openssl_3_5: 3.5.6 -> 3.5.7 Updated to fix multiple CVEs. See: https://github.com/openssl/openssl/releases/tag/openssl-3.5.7 Signed-off-by: Markus Theil (cherry picked from commit cd221fe379a37ab65f06e3cc63c672b3f3762d5c) --- pkgs/development/libraries/openssl/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/openssl/default.nix b/pkgs/development/libraries/openssl/default.nix index 9b1864ca7624..5555b52f2e53 100644 --- a/pkgs/development/libraries/openssl/default.nix +++ b/pkgs/development/libraries/openssl/default.nix @@ -474,8 +474,8 @@ in }; openssl_3_5 = common { - version = "3.5.6"; - hash = "sha256-3q58gMupnEtPlA7K2zwzOLE8t3QYQJI45X1/MfKjtzY="; + version = "3.5.7"; + hash = "sha256-qMDSilKcpID582z1eS4s0hmEVSo8jkqhGiSqMa6smOg="; patches = [ # Support for NIX_SSL_CERT_FILE, motivation: From 451fabb3326f312ec549ec543882aabdbd48b9c1 Mon Sep 17 00:00:00 2001 From: Markus Theil Date: Fri, 12 Jun 2026 09:03:01 +0200 Subject: [PATCH 3/3] openssl_4_0: 4.0.0 -> 4.0.1 Update to fix multiple CVEs. See: https://github.com/openssl/openssl/releases/tag/openssl-4.0.1 Signed-off-by: Markus Theil (cherry picked from commit 66c77575f3a223840119f303ae7bfb9035316480) --- pkgs/development/libraries/openssl/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/openssl/default.nix b/pkgs/development/libraries/openssl/default.nix index 5555b52f2e53..13d4d2b5358a 100644 --- a/pkgs/development/libraries/openssl/default.nix +++ b/pkgs/development/libraries/openssl/default.nix @@ -535,8 +535,8 @@ in }; openssl_4_0 = common { - version = "4.0.0"; - hash = "sha256-wyz0mpWcTzRflgaYLdNufSj3xYsZwuJddWJNKz0veaw="; + version = "4.0.1"; + hash = "sha256-LbPzoNbqS1nh8JSs4sjNU23/uHzcOQhMWvoeb3833Qk="; patches = [ # Support for NIX_SSL_CERT_FILE, motivation: