From 120007084564f2877eac287418a236ab07f829d4 Mon Sep 17 00:00:00 2001 From: Brent Cook Date: Sun, 13 Mar 2022 12:37:55 -0500 Subject: update Changelog --- ChangeLog | 5 +++++ patches/opensslv.h | 4 ++-- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index 9f51d2f..f58f8bd 100644 --- a/ChangeLog +++ b/ChangeLog @@ -28,6 +28,11 @@ history is also available from Git. LibreSSL Portable Release Notes: +3.3.6 - Security fix + + * A malicious certificate can cause an infinite loop. + Reported by and fix from Tavis Ormandy and David Benjamin, Google. + 3.3.5 - Security fix * A stack overread could occur when checking X.509 name constraints. diff --git a/patches/opensslv.h b/patches/opensslv.h index 7e6158c..b3805e4 100644 --- a/patches/opensslv.h +++ b/patches/opensslv.h @@ -3,9 +3,9 @@ #define HEADER_OPENSSLV_H /* These will change with each release of LibreSSL-portable */ -#define LIBRESSL_VERSION_NUMBER 0x3030500fL +#define LIBRESSL_VERSION_NUMBER 0x3030600fL /* ^ Patch starts here */ -#define LIBRESSL_VERSION_TEXT "LibreSSL 3.3.5" +#define LIBRESSL_VERSION_TEXT "LibreSSL 3.3.6" /* These will never change */ #define OPENSSL_VERSION_NUMBER 0x20000000L -- cgit v1.2.3-55-g6feb