* [bug#54402] [SECURITY]: OpenSSL CVE-2022-0778 @ 2022-03-15 17:34 Leo Famulari 2022-03-15 17:44 ` [bug#54402] [PATCH 1/2] gnu: OpenSSL: Fix CVE-2022-0778 Leo Famulari 2022-03-16 21:20 ` bug#54402: [SECURITY]: OpenSSL CVE-2022-0778 Leo Famulari 0 siblings, 2 replies; 4+ messages in thread From: Leo Famulari @ 2022-03-15 17:34 UTC (permalink / raw) To: 54402 [-- Attachment #1: Type: text/plain, Size: 123 bytes --] What follows are patches to fix CVE-2022-0778 in both series of OpenSSL. https://www.openssl.org/news/secadv/20220315.txt [-- Attachment #2: signature.asc --] [-- Type: application/pgp-signature, Size: 833 bytes --] ^ permalink raw reply [flat|nested] 4+ messages in thread
* [bug#54402] [PATCH 1/2] gnu: OpenSSL: Fix CVE-2022-0778. 2022-03-15 17:34 [bug#54402] [SECURITY]: OpenSSL CVE-2022-0778 Leo Famulari @ 2022-03-15 17:44 ` Leo Famulari 2022-03-15 17:44 ` [bug#54402] [PATCH 2/2] gnu: OpenSSL 3: " Leo Famulari 2022-03-16 21:20 ` bug#54402: [SECURITY]: OpenSSL CVE-2022-0778 Leo Famulari 1 sibling, 1 reply; 4+ messages in thread From: Leo Famulari @ 2022-03-15 17:44 UTC (permalink / raw) To: 54402 For more information about this vulnerability: https://www.openssl.org/news/secadv/20220315.txt * gnu/packages/tls.scm (openssl/fixed): Update to 1.1.1n. --- gnu/packages/tls.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm index 11c01a8d2a..9ed0f3dea4 100644 --- a/gnu/packages/tls.scm +++ b/gnu/packages/tls.scm @@ -513,7 +513,7 @@ (define openssl/fixed (package (inherit openssl) (name "openssl") - (version "1.1.1m") + (version "1.1.1n") (source (origin (method url-fetch) (uri (list (string-append "https://www.openssl.org/source/openssl-" @@ -526,7 +526,7 @@ (define openssl/fixed (patches (search-patches "openssl-1.1-c-rehash-in.patch")) (sha256 (base32 - "15kcvdi69jka67sk1l3a50c26cb7xv9xiwdrgky4bji3ifz9k4gq")))))) + "0ymif8rlc5cf5qp5bh2pxlrgq6xryh7g4sqfvrdjg9gnli8ypp20")))))) (define-public openssl-3.0 (package -- 2.34.0 ^ permalink raw reply related [flat|nested] 4+ messages in thread
* [bug#54402] [PATCH 2/2] gnu: OpenSSL 3: Fix CVE-2022-0778. 2022-03-15 17:44 ` [bug#54402] [PATCH 1/2] gnu: OpenSSL: Fix CVE-2022-0778 Leo Famulari @ 2022-03-15 17:44 ` Leo Famulari 0 siblings, 0 replies; 4+ messages in thread From: Leo Famulari @ 2022-03-15 17:44 UTC (permalink / raw) To: 54402 For more information about this vulnerability: https://www.openssl.org/news/secadv/20220315.txt * gnu/packages/tls.scm (openssl): Update to 3.0.2. --- gnu/packages/tls.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm index 9ed0f3dea4..c776085cad 100644 --- a/gnu/packages/tls.scm +++ b/gnu/packages/tls.scm @@ -531,7 +531,7 @@ (define openssl/fixed (define-public openssl-3.0 (package (inherit openssl) - (version "3.0.1") + (version "3.0.2") (source (origin (method url-fetch) (uri (list (string-append "https://www.openssl.org/source/openssl-" @@ -544,7 +544,7 @@ (define-public openssl-3.0 (patches (search-patches "openssl-3.0-c-rehash-in.patch")) (sha256 (base32 - "1l86kgn57av5yh711qp7c9zmi2haqmiah0ddxnbfgg2k6f2ss4f3")))) + "0qyvvw8n97f0gs786l2dkxnmi3hs344mxplw7jp5cisdmp71rscq")))) (arguments (substitute-keyword-arguments (package-arguments openssl) ((#:phases phases '%standard-phases) -- 2.34.0 ^ permalink raw reply related [flat|nested] 4+ messages in thread
* bug#54402: [SECURITY]: OpenSSL CVE-2022-0778 2022-03-15 17:34 [bug#54402] [SECURITY]: OpenSSL CVE-2022-0778 Leo Famulari 2022-03-15 17:44 ` [bug#54402] [PATCH 1/2] gnu: OpenSSL: Fix CVE-2022-0778 Leo Famulari @ 2022-03-16 21:20 ` Leo Famulari 1 sibling, 0 replies; 4+ messages in thread From: Leo Famulari @ 2022-03-16 21:20 UTC (permalink / raw) To: 54402-done I improved the commit messages and pushed these patches as 62ea3d510f1d1af76ba7fd573eea9c666558f299 ^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2022-03-16 21:21 UTC | newest] Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed) -- links below jump to the message on this page -- 2022-03-15 17:34 [bug#54402] [SECURITY]: OpenSSL CVE-2022-0778 Leo Famulari 2022-03-15 17:44 ` [bug#54402] [PATCH 1/2] gnu: OpenSSL: Fix CVE-2022-0778 Leo Famulari 2022-03-15 17:44 ` [bug#54402] [PATCH 2/2] gnu: OpenSSL 3: " Leo Famulari 2022-03-16 21:20 ` bug#54402: [SECURITY]: OpenSSL CVE-2022-0778 Leo Famulari
Code repositories for project(s) associated with this external index https://git.savannah.gnu.org/cgit/guix.git This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.