Date: Wednesday, February 8, 2023 @ 01:19:59 Author: blakkheim Revision: 1396039
upgpkg: libressl 3.6.2-1 Modified: libressl/trunk/PKGBUILD Deleted: libressl/trunk/018_x509.patch ----------------+ 018_x509.patch | 21 --------------------- PKGBUILD | 13 +++++-------- 2 files changed, 5 insertions(+), 29 deletions(-) Deleted: 018_x509.patch =================================================================== --- 018_x509.patch 2023-02-07 21:39:44 UTC (rev 1396038) +++ 018_x509.patch 2023-02-08 01:19:59 UTC (rev 1396039) @@ -1,21 +0,0 @@ -OpenBSD 7.2 errata 018, February 7, 2023: - -A malicious certificate revocation list or timestamp response token would -allow an attacker to read arbitrary memory. - -https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig - -diff --git a/crypto/x509/x509_genn.c b/crypto/x509/x509_genn.c -index dadf6f1e4..1905e8cac 100644 ---- a/crypto/x509/x509_genn.c -+++ b/crypto/x509/x509_genn.c -@@ -366,7 +366,8 @@ GENERAL_NAME_cmp(GENERAL_NAME *a, GENERAL_NAME *b) - return -1; - switch (a->type) { - case GEN_X400: -- result = ASN1_TYPE_cmp(a->d.x400Address, b->d.x400Address); -+ result = ASN1_STRING_cmp((ASN1_STRING *)a->d.x400Address, -+ (ASN1_STRING *)b->d.x400Address); - break; - - case GEN_EDIPARTY: Modified: PKGBUILD =================================================================== --- PKGBUILD 2023-02-07 21:39:44 UTC (rev 1396038) +++ PKGBUILD 2023-02-08 01:19:59 UTC (rev 1396039) @@ -6,8 +6,8 @@ # Contributor: kpcyrd <[email protected]> pkgname=libressl -pkgver=3.6.1 -pkgrel=2 +pkgver=3.6.2 +pkgrel=1 pkgdesc="Free version of the TLS/crypto stack forked from OpenSSL" arch=(x86_64) url="https://www.libressl.org/"; @@ -15,16 +15,13 @@ depends=(glibc) optdepends=(ca-certificates) backup=(etc/libressl/openssl.cnf) -source=(https://cdn.openbsd.org/pub/OpenBSD/LibreSSL/libressl-${pkgver}.tar.gz{,.asc} - 018_x509.patch) -sha256sums=('acfac61316e93b919c28d62d53037ca734de85c46b4d703f19fd8395cf006774' - 'SKIP' - '5ecbb5618579b2305fea0adfc59b13aa2233982ed34b5f385eef2c6c04b7ed8e') +source=(https://cdn.openbsd.org/pub/OpenBSD/LibreSSL/libressl-${pkgver}.tar.gz{,.asc}) +sha256sums=('4be80fff073746cf50b4a8e5babe2795acae98c6b132a9e02519b445dfbfd033' + 'SKIP') validpgpkeys=(A1EB079B8D3EB92B4EBD3139663AF51BD5E4D8D5) # Brent Cook <[email protected]> prepare() { cd ${pkgname}-${pkgver} - patch -Np1 -i ../018_x509.patch autoreconf -vfi }
