From 6eca04a4ecbfe2e545853b17b37b57efb4933f14 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Mon, 21 Mar 2022 08:36:56 +0100 Subject: [PATCH] package/libressl: security bump to version 3.3.6 It includes the following security fix: * A malicious certificate can cause an infinite loop. Reported by and fix from Tavis Ormandy and David Benjamin, Google. https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.3.6-relnotes.txt Signed-off-by: Peter Korsgaard --- package/libressl/libressl.hash | 2 +- package/libressl/libressl.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/libressl/libressl.hash b/package/libressl/libressl.hash index d046e89518..e35e52bf4d 100644 --- a/package/libressl/libressl.hash +++ b/package/libressl/libressl.hash @@ -1,4 +1,4 @@ # From https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/SHA256 -sha256 0a51393f0df1cf27e070054a2788a4d073339f363d79cd594076a1b4c48be9a5 libressl-3.3.5.tar.gz +sha256 3f28849365e1190db2baf9014ff9686012c25b1ca6df8b3a085f789e24fe4b9a libressl-3.3.6.tar.gz # Locally computed sha256 5c63613f008f16a9c0025c096bbd736cecf720494d121b5c5203e0ec6e5955b1 COPYING diff --git a/package/libressl/libressl.mk b/package/libressl/libressl.mk index 268ded69af..b415708b46 100644 --- a/package/libressl/libressl.mk +++ b/package/libressl/libressl.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBRESSL_VERSION = 3.3.5 +LIBRESSL_VERSION = 3.3.6 LIBRESSL_SITE = https://ftp.openbsd.org/pub/OpenBSD/LibreSSL LIBRESSL_LICENSE = ISC (new additions), OpenSSL or SSLeay (original OpenSSL code) LIBRESSL_LICENSE_FILES = COPYING