From e2bc4e4bde72c92e915094b6f1d27e3e6300db15 Mon Sep 17 00:00:00 2001 From: Joachim Fasting Date: Fri, 5 May 2017 07:37:44 +0200 Subject: [PATCH] libressl: 2.5.3 -> 2.5.4 Contains a fix for CVE-2017-8301: TLS verification vulnerability in LibreSSL 2.5.1 - 2.5.3 [1][2] [1]: http://seclists.org/oss-sec/2017/q2/145 [2]: https://github.com/libressl-portable/portable/issues/307 --- pkgs/development/libraries/libressl/2.5.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/libressl/2.5.nix b/pkgs/development/libraries/libressl/2.5.nix index b2444b18902..2284db5ad7d 100644 --- a/pkgs/development/libraries/libressl/2.5.nix +++ b/pkgs/development/libraries/libressl/2.5.nix @@ -2,11 +2,11 @@ stdenv.mkDerivation rec { name = "libressl-${version}"; - version = "2.5.3"; + version = "2.5.4"; src = fetchurl { url = "mirror://openbsd/LibreSSL/${name}.tar.gz"; - sha256 = "0c4awq45cl757fv7f7f75i5i0ibc6v7ns13n7xvfak7chv2lrqql"; + sha256 = "1ykf6dqlbafafhbdfmcj19pjj1z6wmsq0rmyqga1i0xv5x95nyhh"; }; enableParallelBuilding = true;