diff options
| author | Santhosh Raju <fox@FreeBSD.org> | 2021-07-24 04:49:39 +0000 |
|---|---|---|
| committer | Santhosh Raju <fox@FreeBSD.org> | 2021-07-24 04:49:39 +0000 |
| commit | e4b770114494f3d54409aef6bd23a3a2def34399 (patch) | |
| tree | d3db514133637e79a2e72e2ee035551519b113fa | |
| parent | e6929ceadcada0648db8ad0904fd38507abefa6f (diff) | |
| download | ports-e4b770114494f3d54409aef6bd23a3a2def34399.tar.gz ports-e4b770114494f3d54409aef6bd23a3a2def34399.zip | |
security/wolfssl: Updates to v4.8.1
Changes since v4.8.0:
wolfSSL Release 4.8.1 (July 16, 2021)
Release 4.8.1 of wolfSSL embedded TLS has an OCSP vulnerability fix:
Vulnerabilities
* [High] OCSP verification issue when response is for a certificate with no
relation to the chain in question BUT that response contains the NoCheck
extension which effectively disables ALL verification of that one cert.
Users who should upgrade to 4.8.1 are TLS client users doing OCSP, TLS
server users doing mutual auth with OCSP, and CertManager users doing OCSP
independent of TLS. Thanks to Jan Nauber, Marco Smeets, Werner Rueschenbaum
and Alissa Kim of Volkswagen Infotainment for the report.
| -rw-r--r-- | security/wolfssl/Makefile | 2 | ||||
| -rw-r--r-- | security/wolfssl/distinfo | 6 | ||||
| -rw-r--r-- | security/wolfssl/pkg-plist | 2 |
3 files changed, 5 insertions, 5 deletions
diff --git a/security/wolfssl/Makefile b/security/wolfssl/Makefile index dba43ab6d545..1fbff8d1c218 100644 --- a/security/wolfssl/Makefile +++ b/security/wolfssl/Makefile @@ -1,5 +1,5 @@ PORTNAME= wolfssl -PORTVERSION= 4.8.0 +PORTVERSION= 4.8.1 CATEGORIES= security devel MASTER_SITES= https://www.wolfssl.com/ \ LOCAL/fox diff --git a/security/wolfssl/distinfo b/security/wolfssl/distinfo index c79c20b75f3c..6ab0e6b36b38 100644 --- a/security/wolfssl/distinfo +++ b/security/wolfssl/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1626253987 -SHA256 (wolfssl-4.8.0.zip) = ab524d44bb7bd5516c0beead4278a1cf060c5fd5f418c6491227ed4fb8c79efc -SIZE (wolfssl-4.8.0.zip) = 11835511 +TIMESTAMP = 1627101426 +SHA256 (wolfssl-4.8.1.zip) = 149299b90a6546a91e781c645187254d19c510286bc0c2bffaad0326ad5a8b6e +SIZE (wolfssl-4.8.1.zip) = 11836201 diff --git a/security/wolfssl/pkg-plist b/security/wolfssl/pkg-plist index 6c9b9611e08b..504cd6689d8b 100644 --- a/security/wolfssl/pkg-plist +++ b/security/wolfssl/pkg-plist @@ -226,7 +226,7 @@ include/wolfssl/wolfio.h lib/libwolfssl.a lib/libwolfssl.so lib/libwolfssl.so.24 -lib/libwolfssl.so.24.5.0 +lib/libwolfssl.so.24.5.1 libdata/pkgconfig/wolfssl.pc %%PORTDOCS%%%%DOCSDIR%%/README.txt %%PORTDOCS%%%%DOCSDIR%%/example/client.c |