mbedtls: 3.5.2 -> 3.6.0

Changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.6.0
Fixes CVE-2024-28960
This commit is contained in:
Raphael Robatsch 2024-04-01 09:01:15 +02:00
parent 92f5f12a72
commit bdfdf2c602
2 changed files with 18 additions and 3 deletions

View File

@ -1,6 +1,18 @@
{ callPackage }:
{ callPackage
, fetchpatch
}:
callPackage ./generic.nix {
version = "3.5.2";
hash = "sha256-lVGmnSYccNmRS6vfF/fDiny5cYRPc/wJBpgciFLPUvM=";
version = "3.6.0";
hash = "sha256-tCwAKoTvY8VCjcTPNwS3DeitflhpKHLr6ygHZDbR6wQ=";
patches = [
# https://github.com/Mbed-TLS/mbedtls/pull/9000
# Remove at next version update
(fetchpatch {
name = "fix-darwin-memcpy-error.patch";
url = "https://github.com/Mbed-TLS/mbedtls/commit/b32d7ae0fee2f906be59780b42a0cd4468a39bd1.patch";
hash = "sha256-BTkJs9NEkCl+/Q8EwB/LW9uwF95jQOKWmoCK4B/7/sU=";
})
];
}

View File

@ -2,6 +2,7 @@
, stdenv
, version
, hash
, patches ? []
, fetchFromGitHub
, cmake
@ -25,6 +26,8 @@ stdenv.mkDerivation rec {
fetchSubmodules = true;
};
inherit patches;
nativeBuildInputs = [ cmake ninja perl python3 ];
strictDeps = true;