gnu: openssl: Update replacement to 1.1.1l [security fixes].
* gnu/packages/tls.scm (openssl)[replacement]: Replace with 1.1.1l. (openssl-1.1.1k): Remove variable. (openssl-1.1.1l): Add variable.
This commit is contained in:
		
							parent
							
								
									68b22a8541
								
							
						
					
					
						commit
						5422920b9e
					
				
					 1 changed files with 5 additions and 5 deletions
				
			
		| 
						 | 
					@ -356,7 +356,7 @@ required structures.")
 | 
				
			||||||
  (package
 | 
					  (package
 | 
				
			||||||
   (name "openssl")
 | 
					   (name "openssl")
 | 
				
			||||||
   (version "1.1.1j")
 | 
					   (version "1.1.1j")
 | 
				
			||||||
   (replacement openssl-1.1.1k)
 | 
					   (replacement openssl-1.1.1l)
 | 
				
			||||||
   (source (origin
 | 
					   (source (origin
 | 
				
			||||||
             (method url-fetch)
 | 
					             (method url-fetch)
 | 
				
			||||||
             (uri (list (string-append "https://www.openssl.org/source/openssl-"
 | 
					             (uri (list (string-append "https://www.openssl.org/source/openssl-"
 | 
				
			||||||
| 
						 | 
					@ -490,11 +490,11 @@ required structures.")
 | 
				
			||||||
   (license license:openssl)
 | 
					   (license license:openssl)
 | 
				
			||||||
   (home-page "https://www.openssl.org/")))
 | 
					   (home-page "https://www.openssl.org/")))
 | 
				
			||||||
 | 
					
 | 
				
			||||||
;; Replacement package to fix CVE-2021-3449 and CVE-2021-3450.
 | 
					;; Replacement package to fix multiple CVEs.
 | 
				
			||||||
(define openssl-1.1.1k
 | 
					(define openssl-1.1.1l
 | 
				
			||||||
  (package
 | 
					  (package
 | 
				
			||||||
    (inherit openssl)
 | 
					    (inherit openssl)
 | 
				
			||||||
    (version "1.1.1k")
 | 
					    (version "1.1.1l")
 | 
				
			||||||
    (source (origin
 | 
					    (source (origin
 | 
				
			||||||
              (method url-fetch)
 | 
					              (method url-fetch)
 | 
				
			||||||
              (uri (list (string-append "https://www.openssl.org/source/openssl-"
 | 
					              (uri (list (string-append "https://www.openssl.org/source/openssl-"
 | 
				
			||||||
| 
						 | 
					@ -507,7 +507,7 @@ required structures.")
 | 
				
			||||||
              (patches (search-patches "openssl-1.1-c-rehash-in.patch"))
 | 
					              (patches (search-patches "openssl-1.1-c-rehash-in.patch"))
 | 
				
			||||||
              (sha256
 | 
					              (sha256
 | 
				
			||||||
               (base32
 | 
					               (base32
 | 
				
			||||||
                "1rdfzcrxy9y38wqdw5942vmdax9hjhgrprzxm42csal7p5shhal9"))))))
 | 
					                "1lbblxps2fhmz7bqh058iywh5wxfignbfx1s1kz2fj63b5g3wyhb"))))))
 | 
				
			||||||
 | 
					
 | 
				
			||||||
;; We will not add any new uses of this package. If you add new code that uses
 | 
					;; We will not add any new uses of this package. If you add new code that uses
 | 
				
			||||||
;; this package, your change will be reverted!
 | 
					;; this package, your change will be reverted!
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Reference in a new issue