From 5ed3d50c670897ca7533d6e15f5089aa8587b459 Mon Sep 17 00:00:00 2001 From: whispers Date: Tue, 29 Sep 2026 10:02:42 -0400 Subject: [PATCH] openssl_4_0: 4.0.2 -> 4.0.3 https://github.com/openssl/openssl/releases/tag/openssl-4.0.3 Fixes: CVE-2026-35189, CVE-2026-35191, CVE-2026-42772, CVE-2026-54872, CVE-2026-54873, CVE-2026-54875, CVE-2026-72897, CVE-2026-75804, CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782, CVE-2026-84783, CVE-2026-84784 --- pkgs/development/libraries/openssl/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/libraries/openssl/default.nix b/pkgs/development/libraries/openssl/default.nix index 1fba67364174..a812149063df 100644 --- a/pkgs/development/libraries/openssl/default.nix +++ b/pkgs/development/libraries/openssl/default.nix @@ -474,8 +474,8 @@ in }; openssl_4_0 = common { - version = "4.0.2"; - hash = "sha256-c2tGdTD5FnN7cDExDMsh2CGMYinmHo4WDNHTRYzVQ6g="; + version = "4.0.3"; + hash = "sha256-MltcgGFnwTtAsf/q3+AkgZfADszEzxI+weKNLS/SFtk="; patches = [ # Support for NIX_SSL_CERT_FILE, motivation: