nixo
/
guix-devel
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

gnu: openssl: Update replacement to 1.0.2n [fixes CVE-2017-{3737,3738}]. 

* gnu/packages/tls.scm (openssl)[replacement]: Use openssl-1.0.2n.
(openssl-1.0.2m): Replace with ...
(openssl-1.0.2n): ... this updated version.  Update comment.
This commit is contained in:
Mark H Weaver 2017-12-17 20:57:35 -05:00
parent 98cf8ca89a
commit 87dbb634a9
No known key found for this signature in database
GPG Key ID: 7CEF29847562C516
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
gnu/packages/tls.scm
View File

@ -255,7 +255,7 @@ required structures.")
(package (package
(name "openssl") (name "openssl")
(version "1.0.2l") (version "1.0.2l")
(replacement openssl-1.0.2m) (replacement openssl-1.0.2n)
(source (origin (source (origin
(method url-fetch) (method url-fetch)
(uri (list (string-append "ftp://ftp.openssl.org/source/" (uri (list (string-append "ftp://ftp.openssl.org/source/"
@ -398,12 +398,12 @@ required structures.")
(license license:openssl) (license license:openssl)
(home-page "http://www.openssl.org/"))) (home-page "http://www.openssl.org/")))
;; Fixes CVE-2017-3735 and CVE-2017-3736. ;; Fixes CVE-2017-3735, CVE-2017-3736, CVE-2017-3737, and CVE-2017-3738.
;; See <https://www.openssl.org/news/cl102.txt>. ;; See <https://www.openssl.org/news/cl102.txt>.
(define-public openssl-1.0.2m (define-public openssl-1.0.2n
(package (package
(inherit openssl) (inherit openssl)
(version "1.0.2m") (version "1.0.2n")
(source (origin (source (origin
(inherit (package-source openssl)) (inherit (package-source openssl))
(uri (list (string-append "https://www.openssl.org/source/openssl-" (uri (list (string-append "https://www.openssl.org/source/openssl-"
@ -415,7 +415,7 @@ required structures.")
"/openssl-" version ".tar.gz"))) "/openssl-" version ".tar.gz")))
(sha256 (sha256
(base32 (base32
"03vvlfnxx4lhxc83ikfdl6jqph4h52y7lb7li03va6dkqrgg2vwc")))))) "1zm82pyq5a9jm10q6iv7d3dih3xwjds4x30fqph3k317byvsn2rp"))))))
(define-public openssl-next (define-public openssl-next
(package (package