From cd222556e67004b37544cf5f2a25c5e9518201c1 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Sun, 25 Oct 2026 06:46:26 +0900 Subject: internal/rosa: update packages The elfutils fix has entered a release, the backport patch has been removed. The libconfig patch has been updated to remove newly added broken glibc-dependent tests. Kernel headers remain unchanged. Kernel configuration was updated via the new cross-compilation infrastructure. The toolchain was updated, causing a large amount of rebuilds. QEMU riscv64 cross compilation still crashes clang. PipeWire is updated, however WirePlumber remains vulnerable. The PipeWire maintainers are not treating this vulnerability as a vulnerability, and an upstream release is not coming. This change backports the fix for now. The included patch is slopped by its author, but there is nothing I can do to change that fact. Signed-off-by: Ophestra --- internal/rosa/package/openssl.az | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'internal/rosa/package/openssl.az') diff --git a/internal/rosa/package/openssl.az b/internal/rosa/package/openssl.az index eb2f28fa..da99b82c 100644 --- a/internal/rosa/package/openssl.az +++ b/internal/rosa/package/openssl.az @@ -5,12 +5,12 @@ package openssl { // strange malformed tags treated as pre-releases in Anitya latest = anityaFallback; - version# = "4.0.3"; + version# = "4.1.0"; source = remoteGitHubRelease { suffix = "openssl/openssl"; tag = "openssl-"+version; name = "openssl-"+version+".tar.gz"; - checksum = "qRm2EpUnLqKBgUFimF2uqjHZJaUgK-AWTuX9DVHhnowvCdm09p0wIn3mPRjXjGxj"; + checksum = "E5aKge_8t3EhUMgqdyJSs0Kv0XYlnmYky7Zm0tqx2gZRffQsgUp9VxAFG8lyoBku"; compress = gzip; }; -- cgit v1.3.1