gnu: openssl@1.1: Upgrade replacement to 1.1.1u.

Includes fixes for CVE-2023-0215, CVE-2023-0286, CVE-2023-0464, CVE-2023-0465,
CVE-2023-0466, CVE-2023-2650, CVE-2022-4304, CVE-2022-4450.

* gnu/packages/tls.scm (openssl/fixed): Update to 1.1.1u.

Co-authored-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
This commit is contained in:
Ludovic Courtès 2023-09-28 11:25:38 +02:00
parent e67cb380f7
commit 51e1df07b1
No known key found for this signature in database
GPG key ID: 090B11993D9AEBB5

View file

@ -553,7 +553,7 @@ (define openssl/fixed
(package (package
(inherit openssl-1.1) (inherit openssl-1.1)
(name "openssl") (name "openssl")
(version "1.1.1t") (version "1.1.1u")
(source (origin (source (origin
(method url-fetch) (method url-fetch)
(uri (list (string-append "https://www.openssl.org/source/openssl-" (uri (list (string-append "https://www.openssl.org/source/openssl-"
@ -566,7 +566,7 @@ (define openssl/fixed
(patches (search-patches "openssl-1.1-c-rehash-in.patch")) (patches (search-patches "openssl-1.1-c-rehash-in.patch"))
(sha256 (sha256
(base32 (base32
"0fwxhlv7ary9nzg5mx07x1jj3wkbizxh56qy7l6bzp5iplj9pvld")))))) "1ipbcdlqyxbj5lagasrq2p6gn0036wq6hqp7gdnd1v1ya95xiy72"))))))
(define-public openssl-3.0 (define-public openssl-3.0
(package (package