Security release, update to 4.1.1v4.1.1

2 files changed, 24 insertions, 0 deletions

diff --git a/ChangeLog b/ChangeLog
index 0ab115b..a1c88c8 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -28,6 +28,12 @@ history is also available from Git.
 
 LibreSSL Portable Release Notes:
 
+4.1.1 - Security release
+
+        * An incorrect length check can result in a 4-byte overwrite and an 8-byte
+          overread. From Stanislav Fort and Viktor Dukhovni via OpenSSL.
+          CVE-2025-9230.
+
 4.1.0 - Stable release
 
         * Portable changes
diff --git a/patches/opensslv.h b/patches/opensslv.h
new file mode 100644
index 0000000..1cf8f37
--- /dev/null
+++ b/patches/opensslv.h
@@ -0,0 +1,18 @@
+/* $OpenBSD: opensslv.h,v 1.80 2025/03/09 15:49:18 tb Exp $ */
+#ifndef HEADER_OPENSSLV_H
+#define HEADER_OPENSSLV_H
+
+/* These will change with each release of LibreSSL-portable */
+#define LIBRESSL_VERSION_NUMBER 0x4010100fL
+/*                                    ^ Patch starts here   */
+#define LIBRESSL_VERSION_TEXT   "LibreSSL 4.1.1"
+
+/* These will never change */
+#define OPENSSL_VERSION_NUMBER  0x20000000L
+#define OPENSSL_VERSION_TEXT    LIBRESSL_VERSION_TEXT
+#define OPENSSL_VERSION_PTEXT   " part of " OPENSSL_VERSION_TEXT
+
+#define SHLIB_VERSION_HISTORY ""
+#define SHLIB_VERSION_NUMBER "1.0.0"
+
+#endif /* HEADER_OPENSSLV_H */