From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: [PATCH 1/2] gnu: openssl: Replace with openssl-1.0.2k [security fixes]. Date: Thu, 26 Jan 2017 14:19:35 -0500 Message-ID: <409b2797fc83313fb323babb026da90f444701fa.1485458347.git.leo@famulari.name> References: Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:41285) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cWpaE-0008Vx-O7 for guix-devel@gnu.org; Thu, 26 Jan 2017 14:19:51 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cWpaB-0002AW-Kw for guix-devel@gnu.org; Thu, 26 Jan 2017 14:19:46 -0500 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:38869) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cWpaB-00029v-1s for guix-devel@gnu.org; Thu, 26 Jan 2017 14:19:43 -0500 Received: from localhost.localdomain (c-73-188-17-148.hsd1.pa.comcast.net [73.188.17.148]) by mail.messagingengine.com (Postfix) with ESMTPA id 23CE7244DA for ; Thu, 26 Jan 2017 14:19:42 -0500 (EST) In-Reply-To: In-Reply-To: References: List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org Fix CVE-2016-7055 and CVE-2017-{3731,3732}. * gnu/packages/tls.scm (openssl)[replacement]: New field. (openssl-1.0.2k): New variable. (openssl-next)[replacement]: New field. --- gnu/packages/tls.scm | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm index 1198eb7d0..d2abf1223 100644 --- a/gnu/packages/tls.scm +++ b/gnu/packages/tls.scm @@ -244,6 +244,7 @@ required structures.") (define-public openssl (package (name "openssl") + (replacement openssl-1.0.2k) (version "1.0.2j") (source (origin (method url-fetch) @@ -381,9 +382,29 @@ required structures.") (license license:openssl) (home-page "http://www.openssl.org/"))) +(define openssl-1.0.2k + (package + (inherit openssl) + (name "openssl") + (version "1.0.2k") + (source + (origin + (method url-fetch) + (uri (list (string-append "ftp://ftp.openssl.org/source/" + name "-" version ".tar.gz") + (string-append "ftp://ftp.openssl.org/source/old/" + (string-trim-right version char-set:letter) + "/" name "-" version ".tar.gz"))) + (sha256 + (base32 + "1h6qi35w6hv6rd73p4cdgdzg732pdrfgpp37cgwz1v9a3z37ffbb")) + (patches (search-patches "openssl-runpath.patch" + "openssl-c-rehash-in.patch")))))) + (define-public openssl-next (package (inherit openssl) + (replacement #f) (name "openssl") (version "1.1.0c") (source (origin -- 2.11.0