[Buildroot] [PATCH] package/libressl: bump to version 3.4.2
Peter Korsgaard
peter at korsgaard.com
Sun Nov 28 13:32:54 UTC 2021
>>>>> "Francois" == Francois Perrad <fperrad at gmail.com> writes:
> Signed-off-by: Francois Perrad <francois.perrad at gadz.org>
This is a security fix, so it should be marked as such. From the release
notes:
We have released LibreSSL 3.4.2, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
It includes the following security fix
* In some situations the X.509 verifier would discard an error on an
unverified certificate chain, resulting in an authentication bypass.
Thanks to Ilya Shipitsin and Timo Steinlein for reporting.
https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.4.2-relnotes.txt
Committed after fixing the commit message to make this clear, thanks.
--
Bye, Peter Korsgaard
More information about the buildroot
mailing list