anchor.diff:          "enable-tls1_3"
           "no-async"
         ];
  +      patches = builtins.filter (
  +        p: (builtins.baseNameOf (toString p)) != "macos-yosemite-compat.patch"
  +      ) oldAttrs.patches;
         buildInputs = oldAttrs.buildInputs ++ [ zlibStatic cacert ];
  +      meta = oldAttrs.meta // {
  +        knownVulnerabilities = [
  +          "CVE-2020-1971"
  +          "CVE-2021-23840"
  +          "CVE-2021-23841"
  +          "CVE-2021-3449"
  +          "CVE-2021-3450"
  +          "CVE-2021-3711"
  +          "CVE-2021-3712"
  +        ];
  +      };
       }
     );
  -  opensslLegacyStatic = (openssl.override nasslOpensslArgs).overrideAttrs (
  +  opensslLegacyStatic = (openssl_1_0_2.override nasslOpensslArgs).overrideAttrs (
       oldAttrs: rec {
         name = "openssl-${version}";
         version = "1.0.2e";
  
positive.code: , fetchurl
  , buildPythonPackage
  , pkgsStatic
  , openssl
  , invoke
  , tls-parser
  , cacert
  
negative.code:         sha256 = "1zqb1rff1wikc62a7vj5qxd1k191m8qif5d05mwdxz2wnzywlg72";
        };
        configureFlags = oldAttrs.configureFlags ++ nasslOpensslFlagsCommon;
        patches = builtins.filter (
          p: (builtins.baseNameOf (toString p)) == "darwin64-arm64.patch"
        ) oldAttrs.patches;
        buildInputs = oldAttrs.buildInputs ++ [ zlibStatic ];
        # openssl_1_0_2 needs `withDocs = false`
        outputs = lib.remove "doc" oldAttrs.outputs;
  