mirror of
https://git.in.rschanz.org/ryan77627/guix.git
synced 2024-12-26 22:38:07 -05:00
gnu: openssl: Replace with 1.0.2i [security fixes].
Fixes CVE-2016-{2177,2178,2179,2180,2181,2182,2183,6302,6303,6304,6306,6308}. * gnu/packages/tls.scm (openssl)[replacement]: New field. (openssl-1.0.2i): New variable.
This commit is contained in:
parent
62d00095c2
commit
50f701d4f9
1 changed files with 19 additions and 0 deletions
|
@ -229,6 +229,7 @@ (define gnutls-3.5.4
|
|||
(define-public openssl
|
||||
(package
|
||||
(name "openssl")
|
||||
(replacement openssl-1.0.2i)
|
||||
(version "1.0.2h")
|
||||
(source (origin
|
||||
(method url-fetch)
|
||||
|
@ -367,6 +368,24 @@ (define-public openssl
|
|||
(license license:openssl)
|
||||
(home-page "http://www.openssl.org/")))
|
||||
|
||||
(define openssl-1.0.2i
|
||||
(package (inherit openssl)
|
||||
(source
|
||||
(let ((name "openssl")
|
||||
(version "1.0.2i"))
|
||||
(origin
|
||||
(method url-fetch)
|
||||
(uri (list (string-append "ftp://ftp.openssl.org/source/"
|
||||
name "-" version ".tar.gz")
|
||||
(string-append "ftp://ftp.openssl.org/source/old/"
|
||||
(string-trim-right version char-set:letter)
|
||||
"/" name "-" version ".tar.gz")))
|
||||
(sha256
|
||||
(base32
|
||||
"0vyy038676cv3m2523fi9ll9nkjxadqdnz18zdp5nm6925yli1wj"))
|
||||
(patches (search-patches "openssl-runpath.patch"
|
||||
"openssl-c-rehash-in.patch")))))))
|
||||
|
||||
(define-public openssl-next
|
||||
(package
|
||||
(inherit openssl)
|
||||
|
|
Loading…
Reference in a new issue