aboutsummaryrefslogtreecommitdiff
path: root/gnu
diff options
context:
space:
mode:
authorLeo Famulari <leo@famulari.name>2017-01-26 14:19:35 -0500
committerMarius Bakke <mbakke@fastmail.com>2017-01-26 22:26:12 +0100
commit544db93cafc3e0bf9a89623b8fed3a169958c1d3 (patch)
tree25a07f972ef5d3939cd3af650025df271f328b38 /gnu
parent264ccbb31e0cffb2d71a465bec32adbdf7e20d06 (diff)
downloadguix-544db93cafc3e0bf9a89623b8fed3a169958c1d3.tar
guix-544db93cafc3e0bf9a89623b8fed3a169958c1d3.tar.gz
gnu: openssl: Replace with openssl-1.0.2k [security fixes].
Fix CVE-2016-7055 and CVE-2017-{3731,3732}. * gnu/packages/tls.scm (openssl)[replacement]: New field. (openssl-1.0.2k): New variable. (openssl-next)[replacement]: New field. Signed-off-by: Marius Bakke <mbakke@fastmail.com>
Diffstat (limited to 'gnu')
-rw-r--r--gnu/packages/tls.scm21
1 files changed, 21 insertions, 0 deletions
diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm
index 252e53c840..0dd431cf99 100644
--- a/gnu/packages/tls.scm
+++ b/gnu/packages/tls.scm
@@ -244,6 +244,7 @@ required structures.")
(define-public openssl
(package
(name "openssl")
+ (replacement openssl-1.0.2k)
(version "1.0.2j")
(source (origin
(method url-fetch)
@@ -381,9 +382,29 @@ required structures.")
(license license:openssl)
(home-page "http://www.openssl.org/")))
+(define openssl-1.0.2k
+ (package
+ (inherit openssl)
+ (name "openssl")
+ (version "1.0.2k")
+ (source
+ (origin
+ (method url-fetch)
+ (uri (list (string-append "ftp://ftp.openssl.org/source/"
+ name "-" version ".tar.gz")
+ (string-append "ftp://ftp.openssl.org/source/old/"
+ (string-trim-right version char-set:letter)
+ "/" name "-" version ".tar.gz")))
+ (sha256
+ (base32
+ "1h6qi35w6hv6rd73p4cdgdzg732pdrfgpp37cgwz1v9a3z37ffbb"))
+ (patches (search-patches "openssl-runpath.patch"
+ "openssl-c-rehash-in.patch"))))))
+
(define-public openssl-next
(package
(inherit openssl)
+ (replacement #f)
(name "openssl")
(version "1.1.0c")
(source (origin