[PATCH] gnu: OpenSSL: Update to 1.1.1g [fixes CVE-2020-1967].

DoneSubmitted by Leo Famulari.
Details
One participant
  • Leo Famulari
Owner
unassigned
Severity
normal
L
L
Leo Famulari wrote on 21 Apr 2020 19:52
Download
(address . guix-patches@gnu.org)
ad53b9c890ad19239728117dd943a0b9fe5e5e05.1587491544.git.leo@famulari.name
Download
* gnu/packages/tls.scm (openssl)[replacement]: Replace with openssl-1.1.1g.
(openssl-1.1.1e): Replace variable with ...
(openssl-1.1.1g): ... this.
---
gnu/packages/tls.scm | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)

Toggle diff (37 lines)
diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm
index 3eb32fc27a..4f85f212bd 100644
--- a/gnu/packages/tls.scm
+++ b/gnu/packages/tls.scm
@@ -318,7 +318,7 @@ required structures.")
   (package
    (name "openssl")
    (version "1.1.1c")
-   (replacement openssl-1.1.1e)
+   (replacement openssl-1.1.1g)
    (source (origin
              (method url-fetch)
              (uri (list (string-append "https://www.openssl.org/source/openssl-"
@@ -420,10 +420,10 @@ required structures.")
    (license license:openssl)
    (home-page "https://www.openssl.org/")))
 
-(define openssl-1.1.1e
+(define openssl-1.1.1g
   (package
    (inherit openssl)
-   (version "1.1.1e")
+   (version "1.1.1g")
    (source (origin
              (method url-fetch)
              (uri (list (string-append "https://www.openssl.org/source/openssl-"
@@ -436,7 +436,7 @@ required structures.")
              (patches (search-patches "openssl-1.1-c-rehash-in.patch"))
              (sha256
               (base32
-               "1gnwlri1dphr5wdzmg9vlhkh6aq2yqgpfkpmffzwjlfb26n62kv9"))))))
+               "0ikdcc038i7jk8h7asq5xcn8b1xc2rrbc88yfm4hqbz3y5s4gc6x"))))))
 
 (define-public openssl-1.0
   (package
-- 
2.26.2
L
L
Leo Famulari wrote on 21 Apr 2020 22:05
Download
(address . 40749-done@debbugs.gnu.org)
20200421200535.GA19175@jasmine.lan
Download
On Tue, Apr 21, 2020 at 01:52:26PM -0400, Leo Famulari wrote:
Toggle quote (4 lines)
> * gnu/packages/tls.scm (openssl)[replacement]: Replace with openssl-1.1.1g.
> (openssl-1.1.1e): Replace variable with ...
> (openssl-1.1.1g): ... this.

Pushed as 0b9a117765ff871cf2e82acb2620d860fb93c016
Closed
?
Your comment

This issue is archived.

To comment on this conversation send email to 40749@debbugs.gnu.org