projects / buildroot.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: b6543b5)
libressl: security bump to version 2.7.4
authorBaruch Siach <baruch@tkos.co.il>
Fri, 15 Jun 2018 08:22:08 +0000 (11:22 +0300)
committerPeter Korsgaard <peter@korsgaard.com>
Fri, 15 Jun 2018 11:16:41 +0000 (13:16 +0200)
Fixes CVE-2018-0495: ECDSA signing side-channel attack.

Cc: Adam Duskett <aduskett@gmail.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/libressl/libressl.hash patch | blob | history
package/libressl/libressl.mk patch | blob | history

diff --git a/package/libressl/libressl.hash b/package/libressl/libressl.hash
index 53b7e0af590a6d8eeb51fb32c1ef83cf131bc629..111fe4feed533c83ef1dff66c6e622396a8379cd 100644 (file)
--- a/package/libressl/libressl.hash
+++ b/package/libressl/libressl.hash
@@ -1,4 +1,4 @@
 # From https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/SHA256
-sha256 917a8779c342177ff3751a2bf955d0262d1d8916a4b408930c45cef326700995  libressl-2.7.2.tar.gz
+sha256 1e3a9fada06c1c060011470ad0ff960de28f9a0515277d7336f7e09362517da6  libressl-2.7.4.tar.gz
 # Locally computed
 sha256 5c63613f008f16a9c0025c096bbd736cecf720494d121b5c5203e0ec6e5955b1  COPYING
diff --git a/package/libressl/libressl.mk b/package/libressl/libressl.mk
index 1a1dda10002894d4ce0ef36a70d273369aedce09..35494c82396741da6b01894e91b24eb8b5506e03 100644 (file)
--- a/package/libressl/libressl.mk
+++ b/package/libressl/libressl.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBRESSL_VERSION = 2.7.2
+LIBRESSL_VERSION = 2.7.4
 LIBRESSL_SITE = https://ftp.openbsd.org/pub/OpenBSD/LibreSSL
 LIBRESSL_LICENSE = ISC (new additions), OpenSSL or SSLeay (original OpenSSL code)
 LIBRESSL_LICENSE_FILES = COPYING