From patchwork Sun Jun 17 16:12:07 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Korsgaard X-Patchwork-Id: 930548 Return-Path: X-Original-To: incoming-buildroot@patchwork.ozlabs.org Delivered-To: patchwork-incoming-buildroot@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=pass (mailfrom) smtp.mailfrom=busybox.net (client-ip=140.211.166.137; helo=fraxinus.osuosl.org; envelope-from=buildroot-bounces@busybox.net; receiver=) Authentication-Results: ozlabs.org; dmarc=none (p=none dis=none) header.from=korsgaard.com Authentication-Results: ozlabs.org; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.b="ekFD4Sh7"; dkim-atps=neutral Received: from fraxinus.osuosl.org (smtp4.osuosl.org [140.211.166.137]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 417zlB0gn8z9s4n for ; Mon, 18 Jun 2018 02:12:21 +1000 (AEST) Received: from localhost (localhost [127.0.0.1]) by fraxinus.osuosl.org (Postfix) with ESMTP id 4C50E86D19; Sun, 17 Jun 2018 16:12:19 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from fraxinus.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tvNh4uSd9LoQ; Sun, 17 Jun 2018 16:12:18 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by fraxinus.osuosl.org (Postfix) with ESMTP id B82CA86CDB; Sun, 17 Jun 2018 16:12:18 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from silver.osuosl.org (smtp3.osuosl.org [140.211.166.136]) by ash.osuosl.org (Postfix) with ESMTP id 84A311C1470 for ; Sun, 17 Jun 2018 16:12:17 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by silver.osuosl.org (Postfix) with ESMTP id 81AB324B3A for ; Sun, 17 Jun 2018 16:12:17 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from silver.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fIMDIayeEem2 for ; Sun, 17 Jun 2018 16:12:16 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mail-wm0-f67.google.com (mail-wm0-f67.google.com [74.125.82.67]) by silver.osuosl.org (Postfix) with ESMTPS id 44121221AF for ; Sun, 17 Jun 2018 16:12:16 +0000 (UTC) Received: by mail-wm0-f67.google.com with SMTP id v131-v6so11345889wma.1 for ; Sun, 17 Jun 2018 09:12:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=sender:from:to:cc:subject:date:message-id; bh=IapSRfmo5YWBDnrUYI0arX74rPu02aUXlZfMVRrBXCQ=; b=ekFD4Sh7vt9e98pv+Jpk1um0EuCqrbdG4CR8e0nuIEfuu9pQUdeC8C7IjLsGCKp/Qj 67QvwFOK8xsFhrJcbi8Qag2uLL8/kXuLoE440S58D8VCAHsVBnlMZOUzX1rjsRlM5TIw kJjnyCuKMdh5mu2pd4Ru4JaeQtdeBl3tmH8KIZg/WzVWCToqU+yQMTATEzH4YiswyTEq CzD8ZkUgeYLHDAWECru9Do4PnK91Ubx2mZ484kxVac3VqbWUxQOF2FMd7WwDe0h5FZB3 ywKbsRbirU0kGwIbuyWZiwh94YMLAhGCugYVFc2KKSDSvwLT4eprfeLXyFwCJ94ycP+8 siQQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:from:to:cc:subject:date:message-id; bh=IapSRfmo5YWBDnrUYI0arX74rPu02aUXlZfMVRrBXCQ=; b=j4ChcJsFEfiXGiSSsgkLO7gJ8dpzIrdQ/HWcX2ZJ6+hHY/R6l+KSjx7KpUUeHHIW5D K+9+u/VjkY7tC5eFG8uUcKlDEtf7dJICPnaSegMF9yVk2DxesmKJ0JgSUXc7SRajXtwC ZZwYla7uAWG4y/yKLUZg3ctSaVFIY/qONERxvzVhV6wtsy9CVKXnDHF4nJcXobZlbofc LDPj9TwrDalHebZxiMrqURvDi97HG+Gq2do+cQiQ5FECv05kR4FixKUgSgeEUBGwY5Aj bbthVMJ9IYUICnc8K7RNKStCYwFFbOH52FrAsW+2/USQfhUoZ0tfrLrIiRkeXua71ZTY mdpg== X-Gm-Message-State: APt69E3Gbk3bILgGFhs4hT3sF7Oln9n1x/8WtkuecvxGsas3/41aGAud bIuxD5U7wppTot4Bh10kBSsl5yDR X-Google-Smtp-Source: ADUXVKJGGFGMkuC55KUDaLABFWC3sOlevDi6tV2UN5EAm9HiM5drTZmMigz+2848yfcAmrEm8EnCZw== X-Received: by 2002:a1c:6f50:: with SMTP id k77-v6mr5955163wmc.38.1529251934717; Sun, 17 Jun 2018 09:12:14 -0700 (PDT) Received: from dell.be.48ers.dk (d51a5bc31.access.telenet.be. [81.165.188.49]) by smtp.gmail.com with ESMTPSA id r3-v6sm11536224wrj.78.2018.06.17.09.12.12 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Sun, 17 Jun 2018 09:12:12 -0700 (PDT) Received: from peko by dell.be.48ers.dk with local (Exim 4.89) (envelope-from ) id 1fUaHi-0003Fr-TG; Sun, 17 Jun 2018 18:12:11 +0200 From: Peter Korsgaard To: Adam Duskett , buildroot@buildroot.org Date: Sun, 17 Jun 2018 18:12:07 +0200 Message-Id: <20180617161207.12468-1-peter@korsgaard.com> X-Mailer: git-send-email 2.11.0 Subject: [Buildroot] [PATCH-2018.02.x] libressl: security bump to version 2.6.5 X-BeenThere: buildroot@busybox.net X-Mailman-Version: 2.1.24 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Errors-To: buildroot-bounces@busybox.net Sender: "buildroot" Fixes CVE-2018-0495: ECDSA signing side-channel attack. For more details, see the release notes: http://bsdsec.net/articles/libressl-2-7-4-2-6-5-released Signed-off-by: Peter Korsgaard --- package/libressl/libressl.hash | 2 +- package/libressl/libressl.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/libressl/libressl.hash b/package/libressl/libressl.hash index 9d926c677b..555a75cf05 100644 --- a/package/libressl/libressl.hash +++ b/package/libressl/libressl.hash @@ -1,2 +1,2 @@ # From https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/SHA256 -sha256 638a20c2f9e99ee283a841cd787ab4d846d1880e180c4e96904fc327d419d11f libressl-2.6.4.tar.gz +sha256 859edfc71019d27c448fe148e679afdd972a0baa91b21f02b2b2f5f8a84ddd2a libressl-2.6.5.tar.gz diff --git a/package/libressl/libressl.mk b/package/libressl/libressl.mk index 2467086161..466b0b831b 100644 --- a/package/libressl/libressl.mk +++ b/package/libressl/libressl.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBRESSL_VERSION = 2.6.4 +LIBRESSL_VERSION = 2.6.5 LIBRESSL_SITE = https://ftp.openbsd.org/pub/OpenBSD/LibreSSL LIBRESSL_LICENSE = ISC (new additions), OpenSSL or SSLeay (original OpenSSL code) LIBRESSL_LICENSE_FILES = COPYING