summary refs log tree commit diff
path: root/gnu/packages/tls.scm
diff options
context:
space:
mode:
authorLeo Famulari <leo@famulari.name>2016-09-22 09:38:56 -0400
committerLeo Famulari <leo@famulari.name>2016-09-22 13:45:54 -0400
commit50f701d4f9b28123794888780977459eff2d8f33 (patch)
tree989ea4e32e26df60905e98d300369bcaa7f8b779 /gnu/packages/tls.scm
parent62d00095c2d20f4625189c7e5d642f66f65fd9d7 (diff)
downloadguix-50f701d4f9b28123794888780977459eff2d8f33.tar.gz
gnu: openssl: Replace with 1.0.2i [security fixes].
Fixes CVE-2016-{2177,2178,2179,2180,2181,2182,2183,6302,6303,6304,6306,6308}.

* gnu/packages/tls.scm (openssl)[replacement]: New field.
(openssl-1.0.2i): New variable.
Diffstat (limited to 'gnu/packages/tls.scm')
-rw-r--r--gnu/packages/tls.scm19
1 files changed, 19 insertions, 0 deletions
diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm
index 0762703800..1d4d255a45 100644
--- a/gnu/packages/tls.scm
+++ b/gnu/packages/tls.scm
@@ -229,6 +229,7 @@ required structures.")
 (define-public openssl
   (package
    (name "openssl")
+   (replacement openssl-1.0.2i)
    (version "1.0.2h")
    (source (origin
              (method url-fetch)
@@ -367,6 +368,24 @@ required structures.")
    (license license:openssl)
    (home-page "http://www.openssl.org/")))
 
+(define openssl-1.0.2i
+  (package (inherit openssl)
+    (source
+      (let ((name "openssl")
+            (version "1.0.2i"))
+        (origin
+          (method url-fetch)
+          (uri (list (string-append "ftp://ftp.openssl.org/source/"
+                                    name "-" version ".tar.gz")
+                     (string-append "ftp://ftp.openssl.org/source/old/"
+                                    (string-trim-right version char-set:letter)
+                                    "/" name "-" version ".tar.gz")))
+          (sha256
+           (base32
+            "0vyy038676cv3m2523fi9ll9nkjxadqdnz18zdp5nm6925yli1wj"))
+          (patches (search-patches "openssl-runpath.patch"
+                                   "openssl-c-rehash-in.patch")))))))
+
 (define-public openssl-next
   (package
     (inherit openssl)