gnu: openssl: Replace with 1.0.2i [security fixes].

Fixes CVE-2016-{2177,2178,2179,2180,2181,2182,2183,6302,6303,6304,6306,6308}.

* gnu/packages/tls.scm (openssl)[replacement]: New field.
(openssl-1.0.2i): New variable.
This commit is contained in:
Leo Famulari 2016-09-22 09:38:56 -04:00
parent 62d00095c2
commit 50f701d4f9
No known key found for this signature in database
GPG key ID: 2646FA30BACA7F08

View file

@ -229,6 +229,7 @@ (define gnutls-3.5.4
(define-public openssl
(package
(name "openssl")
(replacement openssl-1.0.2i)
(version "1.0.2h")
(source (origin
(method url-fetch)
@ -367,6 +368,24 @@ (define-public openssl
(license license:openssl)
(home-page "http://www.openssl.org/")))
(define openssl-1.0.2i
(package (inherit openssl)
(source
(let ((name "openssl")
(version "1.0.2i"))
(origin
(method url-fetch)
(uri (list (string-append "ftp://ftp.openssl.org/source/"
name "-" version ".tar.gz")
(string-append "ftp://ftp.openssl.org/source/old/"
(string-trim-right version char-set:letter)
"/" name "-" version ".tar.gz")))
(sha256
(base32
"0vyy038676cv3m2523fi9ll9nkjxadqdnz18zdp5nm6925yli1wj"))
(patches (search-patches "openssl-runpath.patch"
"openssl-c-rehash-in.patch")))))))
(define-public openssl-next
(package
(inherit openssl)