Skip to contentSkip to conversation

libressl: security bump to version 2.7.4

PATCH New Baruch Siach 2 participants 3 messages Jun 15, 2018 – Jul 17, 2018

lore
Share & tools
lore

Baruch Siach

author
#0 lore raw

PATCH 1/1 libressl: security bump to version 2.7.4

Fixes CVE-2018-0495: ECDSA signing side-channel attack.

Cc Adam Duskett <[email protected]>
Signed-off-by Baruch Siach <[email protected]>
---
 package/libressl/libressl.hash | 2 +-
 package/libressl/libressl.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)
package/libressl/libressl.hash +1 -1
index 53b7e0af590a..111fe4feed53 100644
@@ -1,4 +1,4 @@
 # From https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/SHA256
-sha256 917a8779c342177ff3751a2bf955d0262d1d8916a4b408930c45cef326700995  libressl-2.7.2.tar.gz
+sha256 1e3a9fada06c1c060011470ad0ff960de28f9a0515277d7336f7e09362517da6  libressl-2.7.4.tar.gz
 # Locally computed
 sha256 5c63613f008f16a9c0025c096bbd736cecf720494d121b5c5203e0ec6e5955b1  COPYING
package/libressl/libressl.mk +1 -1
index 1a1dda100028..35494c823967 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBRESSL_VERSION = 2.7.2
+LIBRESSL_VERSION = 2.7.4
 LIBRESSL_SITE = https://ftp.openbsd.org/pub/OpenBSD/LibreSSL
 LIBRESSL_LICENSE = ISC (new additions), OpenSSL or SSLeay (original OpenSSL code)
 LIBRESSL_LICENSE_FILES = COPYING
Signature · 1 line
2.17.1