diff options
| author | Brent Cook <busterb@gmail.com> | 2022-03-13 12:37:55 -0500 |
|---|---|---|
| committer | Brent Cook <busterb@gmail.com> | 2022-03-13 12:37:55 -0500 |
| commit | 120007084564f2877eac287418a236ab07f829d4 (patch) | |
| tree | 2d9bb26a359e1a0418fae088043314b32199f1ca | |
| parent | d09ca2569d9cbe6fa1e8038e90ff5cb57e20e0b5 (diff) | |
| download | portable-3.3.6.tar.gz portable-3.3.6.tar.bz2 portable-3.3.6.zip | |
update Changelogv3.3.6
| -rw-r--r-- | ChangeLog | 5 | ||||
| -rw-r--r-- | patches/opensslv.h | 4 |
2 files changed, 7 insertions, 2 deletions
| @@ -28,6 +28,11 @@ history is also available from Git. | |||
| 28 | 28 | ||
| 29 | LibreSSL Portable Release Notes: | 29 | LibreSSL Portable Release Notes: |
| 30 | 30 | ||
| 31 | 3.3.6 - Security fix | ||
| 32 | |||
| 33 | * A malicious certificate can cause an infinite loop. | ||
| 34 | Reported by and fix from Tavis Ormandy and David Benjamin, Google. | ||
| 35 | |||
| 31 | 3.3.5 - Security fix | 36 | 3.3.5 - Security fix |
| 32 | 37 | ||
| 33 | * A stack overread could occur when checking X.509 name constraints. | 38 | * A stack overread could occur when checking X.509 name constraints. |
diff --git a/patches/opensslv.h b/patches/opensslv.h index 7e6158c..b3805e4 100644 --- a/patches/opensslv.h +++ b/patches/opensslv.h | |||
| @@ -3,9 +3,9 @@ | |||
| 3 | #define HEADER_OPENSSLV_H | 3 | #define HEADER_OPENSSLV_H |
| 4 | 4 | ||
| 5 | /* These will change with each release of LibreSSL-portable */ | 5 | /* These will change with each release of LibreSSL-portable */ |
| 6 | #define LIBRESSL_VERSION_NUMBER 0x3030500fL | 6 | #define LIBRESSL_VERSION_NUMBER 0x3030600fL |
| 7 | /* ^ Patch starts here */ | 7 | /* ^ Patch starts here */ |
| 8 | #define LIBRESSL_VERSION_TEXT "LibreSSL 3.3.5" | 8 | #define LIBRESSL_VERSION_TEXT "LibreSSL 3.3.6" |
| 9 | 9 | ||
| 10 | /* These will never change */ | 10 | /* These will never change */ |
| 11 | #define OPENSSL_VERSION_NUMBER 0x20000000L | 11 | #define OPENSSL_VERSION_NUMBER 0x20000000L |
