diff mbox series

package/libressl: security bump to version 3.6.2

Message ID 20230208075300.15464-1-francois.perrad@gadz.org
State Accepted
Headers show
Series package/libressl: security bump to version 3.6.2 | expand

Commit Message

Francois Perrad Feb. 8, 2023, 7:53 a.m. UTC
security fix:
    A malicious certificate revocation list or timestamp response token
    would allow an attacker to read arbitrary memory.

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
---
 package/libressl/libressl.hash | 2 +-
 package/libressl/libressl.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

Comments

Peter Korsgaard Feb. 8, 2023, 10:47 a.m. UTC | #1
>>>>> "Francois" == Francois Perrad <fperrad@gmail.com> writes:

 > security fix:
 >     A malicious certificate revocation list or timestamp response token
 >     would allow an attacker to read arbitrary memory.

 > Signed-off-by: Francois Perrad <francois.perrad@gadz.org>

Committed, thanks.
Peter Korsgaard Feb. 28, 2023, 4:10 p.m. UTC | #2
>>>>> "Francois" == Francois Perrad <fperrad@gmail.com> writes:

 > security fix:
 >     A malicious certificate revocation list or timestamp response token
 >     would allow an attacker to read arbitrary memory.

 > Signed-off-by: Francois Perrad <francois.perrad@gadz.org>

Committed to 2022.11.x, thanks.
diff mbox series

Patch

diff --git a/package/libressl/libressl.hash b/package/libressl/libressl.hash
index 0988e6a36..907b9cdd0 100644
--- a/package/libressl/libressl.hash
+++ b/package/libressl/libressl.hash
@@ -1,4 +1,4 @@ 
 # From https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/SHA256
-sha256  acfac61316e93b919c28d62d53037ca734de85c46b4d703f19fd8395cf006774  libressl-3.6.1.tar.gz
+sha256  4be80fff073746cf50b4a8e5babe2795acae98c6b132a9e02519b445dfbfd033  libressl-3.6.2.tar.gz
 # Locally computed
 sha256  5c63613f008f16a9c0025c096bbd736cecf720494d121b5c5203e0ec6e5955b1  COPYING
diff --git a/package/libressl/libressl.mk b/package/libressl/libressl.mk
index 8fd7bccbc..b5fae7e26 100644
--- a/package/libressl/libressl.mk
+++ b/package/libressl/libressl.mk
@@ -4,7 +4,7 @@ 
 #
 ################################################################################
 
-LIBRESSL_VERSION = 3.6.1
+LIBRESSL_VERSION = 3.6.2
 LIBRESSL_SITE = https://ftp.openbsd.org/pub/OpenBSD/LibreSSL
 LIBRESSL_LICENSE = ISC (new additions), OpenSSL or SSLeay (original OpenSSL code)
 LIBRESSL_LICENSE_FILES = COPYING