me
/
guix
Archived
1
0
Fork 0

gnu: openssl: Update replacement to 1.1.1l [security fixes].

* gnu/packages/tls.scm (openssl)[replacement]: Replace with 1.1.1l.
(openssl-1.1.1k): Remove variable.
(openssl-1.1.1l): Add variable.
Efraim Flashner 2021-08-24 22:32:58 +03:00
parent 68b22a8541
commit 5422920b9e
No known key found for this signature in database
GPG Key ID: 41AAE7DCCA3D8351
1 changed files with 5 additions and 5 deletions

View File

@ -356,7 +356,7 @@ required structures.")
(package (package
(name "openssl") (name "openssl")
(version "1.1.1j") (version "1.1.1j")
(replacement openssl-1.1.1k) (replacement openssl-1.1.1l)
(source (origin (source (origin
(method url-fetch) (method url-fetch)
(uri (list (string-append "https://www.openssl.org/source/openssl-" (uri (list (string-append "https://www.openssl.org/source/openssl-"
@ -490,11 +490,11 @@ required structures.")
(license license:openssl) (license license:openssl)
(home-page "https://www.openssl.org/"))) (home-page "https://www.openssl.org/")))
;; Replacement package to fix CVE-2021-3449 and CVE-2021-3450. ;; Replacement package to fix multiple CVEs.
(define openssl-1.1.1k (define openssl-1.1.1l
(package (package
(inherit openssl) (inherit openssl)
(version "1.1.1k") (version "1.1.1l")
(source (origin (source (origin
(method url-fetch) (method url-fetch)
(uri (list (string-append "https://www.openssl.org/source/openssl-" (uri (list (string-append "https://www.openssl.org/source/openssl-"
@ -507,7 +507,7 @@ required structures.")
(patches (search-patches "openssl-1.1-c-rehash-in.patch")) (patches (search-patches "openssl-1.1-c-rehash-in.patch"))
(sha256 (sha256
(base32 (base32
"1rdfzcrxy9y38wqdw5942vmdax9hjhgrprzxm42csal7p5shhal9")))))) "1lbblxps2fhmz7bqh058iywh5wxfignbfx1s1kz2fj63b5g3wyhb"))))))
;; We will not add any new uses of this package. If you add new code that uses ;; We will not add any new uses of this package. If you add new code that uses
;; this package, your change will be reverted! ;; this package, your change will be reverted!