LibreSSL 4.0.1v4.0.1OPENBSD_7_6

2 files changed, 24 insertions, 0 deletions

diff --git a/ChangeLog b/ChangeLog
index 77ccbb8..1db9f85 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -28,6 +28,12 @@ history is also available from Git.
 
 LibreSSL Portable Release Notes:
 
+4.0.1 - Security release
+
+        * An incorrect length check can result in a 4-byte overwrite and an 8-byte
+          overread. From Stanislav Fort and Viktor Dukhovni via OpenSSL.
+          CVE-2025-9230.
+
 4.0.0 - Stable release
 
         * Portable changes
diff --git a/patches/opensslv.h b/patches/opensslv.h
new file mode 100644
index 0000000..5a26e81
--- /dev/null
+++ b/patches/opensslv.h
@@ -0,0 +1,18 @@
+/* $OpenBSD: opensslv.h,v 1.79 2024/08/31 10:52:43 tb Exp $ */
+#ifndef HEADER_OPENSSLV_H
+#define HEADER_OPENSSLV_H
+
+/* These will change with each release of LibreSSL-portable */
+#define LIBRESSL_VERSION_NUMBER 0x4000100fL
+/*                                    ^ Patch starts here   */
+#define LIBRESSL_VERSION_TEXT   "LibreSSL 4.0.1"
+
+/* These will never change */
+#define OPENSSL_VERSION_NUMBER  0x20000000L
+#define OPENSSL_VERSION_TEXT    LIBRESSL_VERSION_TEXT
+#define OPENSSL_VERSION_PTEXT   " part of " OPENSSL_VERSION_TEXT
+
+#define SHLIB_VERSION_HISTORY ""
+#define SHLIB_VERSION_NUMBER "1.0.0"
+
+#endif /* HEADER_OPENSSLV_H */