package/libressl: security bump to version 3.4.2

Fixes the following security issues:

 * In some situations the X.509 verifier would discard an error on an
    unverified certificate chain, resulting in an authentication bypass.
    Thanks to Ilya Shipitsin and Timo Steinlein for reporting.

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Francois Perrad 2021-11-26 18:26:49 +01:00 committed by Peter Korsgaard
parent 0ce776942d
commit 17f2bfaebd
2 changed files with 2 additions and 2 deletions

View file

@ -1,4 +1,4 @@
# From https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/SHA256
sha256 107ceae6ca800e81cb563584c16afa36d6c7138fade94a2b3e9da65456f7c61c libressl-3.4.1.tar.gz
sha256 cb82ca7d547336917352fbd23db2fc483c6c44d35157b32780214ec74197b3ce libressl-3.4.2.tar.gz
# Locally computed
sha256 5c63613f008f16a9c0025c096bbd736cecf720494d121b5c5203e0ec6e5955b1 COPYING

View file

@ -4,7 +4,7 @@
#
################################################################################
LIBRESSL_VERSION = 3.4.1
LIBRESSL_VERSION = 3.4.2
LIBRESSL_SITE = https://ftp.openbsd.org/pub/OpenBSD/LibreSSL
LIBRESSL_LICENSE = ISC (new additions), OpenSSL or SSLeay (original OpenSSL code)
LIBRESSL_LICENSE_FILES = COPYING