From unknown Tue Aug 12 08:32:01 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#50188 <50188@debbugs.gnu.org> To: bug#50188 <50188@debbugs.gnu.org> Subject: Status: [PATCH] gnu: OpenSSL: Update to 1.1.1l [security fixes]. Reply-To: bug#50188 <50188@debbugs.gnu.org> Date: Tue, 12 Aug 2025 15:32:01 +0000 retitle 50188 [PATCH] gnu: OpenSSL: Update to 1.1.1l [security fixes]. reassign 50188 guix-patches submitter 50188 Leo Famulari severity 50188 normal tag 50188 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Tue Aug 24 11:57:05 2021 Received: (at submit) by debbugs.gnu.org; 24 Aug 2021 15:57:05 +0000 Received: from localhost ([127.0.0.1]:45057 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mIYnR-00077c-02 for submit@debbugs.gnu.org; Tue, 24 Aug 2021 11:57:05 -0400 Received: from lists.gnu.org ([209.51.188.17]:38766) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mIYnP-00077U-CM for submit@debbugs.gnu.org; Tue, 24 Aug 2021 11:57:03 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:46710) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mIYnO-0002Sc-Vr for guix-patches@gnu.org; Tue, 24 Aug 2021 11:57:03 -0400 Received: from out5-smtp.messagingengine.com ([66.111.4.29]:46637) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mIYnM-0001c9-Rf for guix-patches@gnu.org; Tue, 24 Aug 2021 11:57:02 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 7C7755C011D; Tue, 24 Aug 2021 11:56:58 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute4.internal (MEProxy); Tue, 24 Aug 2021 11:56:58 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=from:to:subject:date:message-id:mime-version :content-transfer-encoding; s=mesmtp; bh=+MgDSiQBQxRnok/IGbZhe7g mdZaToiOF/r+wowZTwC0=; b=uCpYF9mAQIE4YB7nqZQzHIfwhPntRjBFYRaUNyt MQosnmiosLS+/oAuWzQgFOctbJC0OIIvTzpuyIpo9oOnlkQZ6mV3KO+sbRAMo9gP JC9k423gZwA+yHjw1dvhgdXm4hbY94TTJLY3ARgm5Mr6JaCPuN2bAM3mxNpfrKEJ +ekQ= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:date:from :message-id:mime-version:subject:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=+MgDSiQBQxRnok/IG bZhe7gmdZaToiOF/r+wowZTwC0=; b=mGeVAOU4yxpG+3gEDLzlkjntrnbIsORkn C8NNyQEIPlgdkE+0h0X54p/7nUcTKrN3Syx64DxC6krqq7z16UBOHA9u/j1nNfD5 WuI8Wz4afR2lKoZ6HqfnT8vCtqstQXz2uHay5keCeiElCt3PYNrjL3p+wRLhiOsv rOl88ABwIHMMrHi7LXe50tu9//sxoANGaN3lhjVQi3FPps7/WVijFeed1/akUE9D yjFteHCGqaL7siA03rzn8UNvd7S+d7fPgGL8JdEnNEhGW87UtwWEhA/xotfewHIA WO84FSgcdistQkh4BYymA36ugfb+YxAjOXLZpYLnzYDTYQTqziL5A== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddruddtjedgleehucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefhvffufffkofgggfestdekredtre dttdenucfhrhhomhepnfgvohcuhfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgrrhhi rdhnrghmvgeqnecuggftrfgrthhtvghrnhepffeuheejvdejhfetjeeiieduueehteehtd evkeetfefgffehfeehfedvheegfeehnecuffhomhgrihhnpehophgvnhhsshhlrdhorhhg necuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomheplhgvoh esfhgrmhhulhgrrhhirdhnrghmvg X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Tue, 24 Aug 2021 11:56:58 -0400 (EDT) From: Leo Famulari To: guix-patches@gnu.org Subject: [PATCH] gnu: OpenSSL: Update to 1.1.1l [security fixes]. Date: Tue, 24 Aug 2021 11:56:44 -0400 Message-Id: <7632fa06633b1d0c9cdda55b2e69d556f149ea6d.1629820600.git.leo@famulari.name> X-Mailer: git-send-email 2.32.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=66.111.4.29; envelope-from=leo@famulari.name; helo=out5-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) https://www.openssl.org/news/secadv/20210824.txt * gnu/packages/tls.scm (openssl)[replacement]: Use openssl-1.1.1l. (openssl-1.1.1k): Replace with ... (openssl-1.1.1l): ... new variable. --- gnu/packages/tls.scm | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm index fb7d364c94..154b3dc207 100644 --- a/gnu/packages/tls.scm +++ b/gnu/packages/tls.scm @@ -356,7 +356,7 @@ required structures.") (package (name "openssl") (version "1.1.1j") - (replacement openssl-1.1.1k) + (replacement openssl-1.1.1l) (source (origin (method url-fetch) (uri (list (string-append "https://www.openssl.org/source/openssl-" @@ -490,11 +490,10 @@ required structures.") (license license:openssl) (home-page "https://www.openssl.org/"))) -;; Replacement package to fix CVE-2021-3449 and CVE-2021-3450. -(define openssl-1.1.1k +(define openssl-1.1.1l (package (inherit openssl) - (version "1.1.1k") + (version "1.1.1l") (source (origin (method url-fetch) (uri (list (string-append "https://www.openssl.org/source/openssl-" @@ -507,7 +506,7 @@ required structures.") (patches (search-patches "openssl-1.1-c-rehash-in.patch")) (sha256 (base32 - "1rdfzcrxy9y38wqdw5942vmdax9hjhgrprzxm42csal7p5shhal9")))))) + "1lbblxps2fhmz7bqh058iywh5wxfignbfx1s1kz2fj63b5g3wyhb")))))) ;; We will not add any new uses of this package. If you add new code that uses ;; this package, your change will be reverted! -- 2.32.0 From debbugs-submit-bounces@debbugs.gnu.org Tue Aug 24 16:50:50 2021 Received: (at 50188-done) by debbugs.gnu.org; 24 Aug 2021 20:50:50 +0000 Received: from localhost ([127.0.0.1]:45317 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mIdNh-0000Q3-Up for submit@debbugs.gnu.org; Tue, 24 Aug 2021 16:50:50 -0400 Received: from wout5-smtp.messagingengine.com ([64.147.123.21]:42975) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mIdNf-0000Pp-R7 for 50188-done@debbugs.gnu.org; Tue, 24 Aug 2021 16:50:48 -0400 Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.west.internal (Postfix) with ESMTP id 0D4053200406; Tue, 24 Aug 2021 16:50:41 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute6.internal (MEProxy); Tue, 24 Aug 2021 16:50:42 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:subject:message-id:mime-version:content-type; s= mesmtp; bh=m5pgpe3EhnT9ko6XzP2S0iO7VtrbS5tVPlzMsiSWjBU=; b=vg8jl 9CNGH5eR0w8TrzOc8UlNBt2Qhh93NZfLalAdR07KkV+pLFJmgDj+gAbWpnvuRKwD HvY6G98l8L9MacnYFb4xOJldixnf5VXsWCDFyUtR9n9CnJI1WNzn8vuHS6pRfXLm qKJyQA6tK0tBPiQOS4b/8Sd2271YWnhkeVdhJ0= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:message-id :mime-version:subject:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; bh=m5pgpe3EhnT9ko6XzP2S0iO7VtrbS 5tVPlzMsiSWjBU=; b=IcT4GdhknnSJze1eT0WD52Pdie6Etv8qFLIxU6Ld3jKsI 8CRftGssvQvbYT/wRdiA6tyePHSAsIDFMrBeboWqxC7eSI4JF+4wMKdF1r6mOmr2 bCvpKgqvU6XWib56rE/u1HbP+idQRn7jNMghA6Ct4OcDT9gXp3EVc8VZS6EJLlP+ iICG5mMfiW8E1grASn6XuMmiYk56Ueo9exNgpEgJqbtGin2qiqLB4MRFylTR+crK ktIy04cI2FtxTCugMIa9bnDrHceqvJyS26h2S59w/uo5PSJV10VUm2G8XHPkA+Bl rTRGGdSRMyR51CRB6rwz/ZukY4Hak2Pruxy796Low== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddruddtjedgudehgecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhepfffhvffukfggtggusehttdertd dttddvnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghr ihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpeffhedtfeeftddvueeifeduueejvdekhe ffueeijefgvdetleegheegfeehheduudenucevlhhushhtvghrufhiiigvpedtnecurfgr rhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA for <50188-done@debbugs.gnu.org>; Tue, 24 Aug 2021 16:50:41 -0400 (EDT) Date: Tue, 24 Aug 2021 16:50:37 -0400 From: Leo Famulari To: 50188-done@debbugs.gnu.org Subject: Re: [PATCH] gnu: OpenSSL: Update to 1.1.1l [security fixes]. Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 50188-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) An equivalent patch was pushed as 5422920b9eaaa0c6bf779588748595c66ca86ba3 From unknown Tue Aug 12 08:32:01 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Wed, 22 Sep 2021 11:24:06 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator