From 9c4a8514d621b6e2a19f56fa9b3396c940b968c5 Mon Sep 17 00:00:00 2001 From: Leo Famulari Date: Mon, 13 Jun 2016 16:15:34 -0400 Subject: gnu: openssl: Fix CVE-2016-2177 and CVE-2016-2178. * gnu/packages/patches/openssl-CVE-2016-2177.patch, gnu/packages/patches/openssl-CVE-2016-2178.patch: New files. * gnu/local.mk (dist_patch_DATA): Add them. * gnu/packages/tls.scm (openssl/fixed): Use them. --- gnu/packages/tls.scm | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'gnu/packages/tls.scm') diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm index e543a7e3fe..513edcc1a6 100644 --- a/gnu/packages/tls.scm +++ b/gnu/packages/tls.scm @@ -316,7 +316,9 @@ required structures.") (base32 "06996ds1rk8xhnyb5y273a7xkcxhggp4bq1g02rab55d7bjhfh0x")) (patches (search-patches "openssl-runpath.patch" - "openssl-c-rehash-in.patch"))))))) + "openssl-c-rehash-in.patch" + "openssl-CVE-2016-2177.patch" + "openssl-CVE-2016-2178.patch"))))))) (define-public libressl (package -- cgit v1.2.3 From f663e0972093b4ad07772b97dc39e6be8ec3cbc0 Mon Sep 17 00:00:00 2001 From: Efraim Flashner Date: Thu, 16 Jun 2016 15:16:05 +0300 Subject: gnu: libressl: Update to 2.3.6. * gnu/packages/tls.scm (libressl): Update to 2.3.6. --- gnu/packages/tls.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'gnu/packages/tls.scm') diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm index 513edcc1a6..0add9ef96e 100644 --- a/gnu/packages/tls.scm +++ b/gnu/packages/tls.scm @@ -323,7 +323,7 @@ required structures.") (define-public libressl (package (name "libressl") - (version "2.3.5") + (version "2.3.6") (source (origin (method url-fetch) @@ -332,7 +332,7 @@ required structures.") version ".tar.gz")) (sha256 (base32 - "0fvmifz61zfq6byy4dh1qqdg9fpbdsyldjwx5hlcgg6ywxf2f9gl")))) + "1yipsp1ici207nbminbf1knh252kzvqg036v0xpx0fw1wrwlg2im")))) (build-system gnu-build-system) (native-search-paths ;; FIXME: These two variables must designate a single file or directory -- cgit v1.2.3