Opened 2 years ago
Closed 2 years ago
#64839 closed update (fixed)
libressl-devel: update to 3.5.1
| Reported by: | artkiver (グレェ) | Owned by: | jeremyhu (Jeremy Huddleston Sequoia) |
|---|---|---|---|
| Priority: | Normal | Milestone: | |
| Component: | ports | Version: | |
| Keywords: | haspatch | Cc: | |
| Port: | libressl-devel |
Description
LibreSSL (the development branch) was updated to 3.5.1 on March 15th, 2022, release notes here: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.5.1-relnotes.txt
Salient security fix related excerpt:
" * A malicious certificate can cause an infinite loop.
Reported by and fix from Tavis Ormandy and David Benjamin, Google."
Additionally, versions LibreSSL 3.4.3 (stable for OpenBSD 7.0 users) and 3.3.6 (stable for OpenBSD 6.9 users since OpenBSD only supports two older versions due to constrained developer resources) were also released with the same fix, on the same day, which one to choose for the non-devel branch? Probably 3.4.3 (and it seems likely that MacPorts doesn't have much need to support 3.3.6 since it doesn't track OpenBSD's release/support cycle), but I want to focus on the development branch first!
Attachments (1)
Change History (4)
Changed 2 years ago by artkiver (グレェ)
| Attachment: | libressl-devel-3.5.1Portfile.diff added |
|---|
comment:1 Changed 2 years ago by artkiver (グレェ)
The GitHub PR is here: https://github.com/macports/macports-ports/pull/14278
comment:2 Changed 2 years ago by ryandesign (Ryan Carsten Schmidt)
| Keywords: | haspatch added |
|---|---|
| Owner: | set to jeremyhu |
| Port: | libressl-devel added |
| Status: | new → assigned |
| Summary: | update libressl-devel to 3.5.1 → libressl-devel: update to 3.5.1 |
comment:3 Changed 2 years ago by artkiver (グレェ)
| Resolution: | → fixed |
|---|---|
| Status: | assigned → closed |
diff from libressl-devel 3.5.0 Portfile to 3.5.1 removes extraneous whitespace from port lint --nitpick