[Buildroot] [PATCH] package/libressl: bump to version 3.4.2

Peter Korsgaard peter at korsgaard.com
Sun Nov 28 13:32:54 UTC 2021


>>>>> "Francois" == Francois Perrad <fperrad at gmail.com> writes:

 > Signed-off-by: Francois Perrad <francois.perrad at gadz.org>

This is a security fix, so it should be marked as such. From the release
notes:

We have released LibreSSL 3.4.2, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.

It includes the following security fix

  * In some situations the X.509 verifier would discard an error on an
    unverified certificate chain, resulting in an authentication bypass.
    Thanks to Ilya Shipitsin and Timo Steinlein for reporting.

https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.4.2-relnotes.txt

Committed after fixing the commit message to make this clear, thanks.

-- 
Bye, Peter Korsgaard


More information about the buildroot mailing list