From owner-dev-commits-ports-all@freebsd.org Sat Jul 24 04:51:13 2021 Return-Path: Delivered-To: dev-commits-ports-all@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 27660656DB1; Sat, 24 Jul 2021 04:51:13 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4GWv0J5nsPz3tqH; Sat, 24 Jul 2021 04:51:12 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id AF2322586; Sat, 24 Jul 2021 04:51:12 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 16O4pCl2047766; Sat, 24 Jul 2021 04:51:12 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 16O4pCCe047765; Sat, 24 Jul 2021 04:51:12 GMT (envelope-from git) Date: Sat, 24 Jul 2021 04:51:12 GMT Message-Id: <202107240451.16O4pCCe047765@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Santhosh Raju Subject: git: e4b770114494 - main - security/wolfssl: Updates to v4.8.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: fox X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: e4b770114494f3d54409aef6bd23a3a2def34399 Auto-Submitted: auto-generated X-BeenThere: dev-commits-ports-all@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: Commit messages for all branches of the ports repository List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Jul 2021 04:51:13 -0000 The branch main has been updated by fox: URL: https://cgit.FreeBSD.org/ports/commit/?id=e4b770114494f3d54409aef6bd23a3a2def34399 commit e4b770114494f3d54409aef6bd23a3a2def34399 Author: Santhosh Raju AuthorDate: 2021-07-24 04:49:39 +0000 Commit: Santhosh Raju CommitDate: 2021-07-24 04:49:39 +0000 security/wolfssl: Updates to v4.8.1 Changes since v4.8.0: wolfSSL Release 4.8.1 (July 16, 2021) Release 4.8.1 of wolfSSL embedded TLS has an OCSP vulnerability fix: Vulnerabilities * [High] OCSP verification issue when response is for a certificate with no relation to the chain in question BUT that response contains the NoCheck extension which effectively disables ALL verification of that one cert. Users who should upgrade to 4.8.1 are TLS client users doing OCSP, TLS server users doing mutual auth with OCSP, and CertManager users doing OCSP independent of TLS. Thanks to Jan Nauber, Marco Smeets, Werner Rueschenbaum and Alissa Kim of Volkswagen Infotainment for the report. --- security/wolfssl/Makefile | 2 +- security/wolfssl/distinfo | 6 +++--- security/wolfssl/pkg-plist | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/security/wolfssl/Makefile b/security/wolfssl/Makefile index dba43ab6d545..1fbff8d1c218 100644 --- a/security/wolfssl/Makefile +++ b/security/wolfssl/Makefile @@ -1,5 +1,5 @@ PORTNAME= wolfssl -PORTVERSION= 4.8.0 +PORTVERSION= 4.8.1 CATEGORIES= security devel MASTER_SITES= https://www.wolfssl.com/ \ LOCAL/fox diff --git a/security/wolfssl/distinfo b/security/wolfssl/distinfo index c79c20b75f3c..6ab0e6b36b38 100644 --- a/security/wolfssl/distinfo +++ b/security/wolfssl/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1626253987 -SHA256 (wolfssl-4.8.0.zip) = ab524d44bb7bd5516c0beead4278a1cf060c5fd5f418c6491227ed4fb8c79efc -SIZE (wolfssl-4.8.0.zip) = 11835511 +TIMESTAMP = 1627101426 +SHA256 (wolfssl-4.8.1.zip) = 149299b90a6546a91e781c645187254d19c510286bc0c2bffaad0326ad5a8b6e +SIZE (wolfssl-4.8.1.zip) = 11836201 diff --git a/security/wolfssl/pkg-plist b/security/wolfssl/pkg-plist index 6c9b9611e08b..504cd6689d8b 100644 --- a/security/wolfssl/pkg-plist +++ b/security/wolfssl/pkg-plist @@ -226,7 +226,7 @@ include/wolfssl/wolfio.h lib/libwolfssl.a lib/libwolfssl.so lib/libwolfssl.so.24 -lib/libwolfssl.so.24.5.0 +lib/libwolfssl.so.24.5.1 libdata/pkgconfig/wolfssl.pc %%PORTDOCS%%%%DOCSDIR%%/README.txt %%PORTDOCS%%%%DOCSDIR%%/example/client.c