diff --git a/security/libressl/Makefile b/security/libressl/Makefile
index bd62c6386211..574151ad0833 100644
--- a/security/libressl/Makefile
+++ b/security/libressl/Makefile
@@ -1,64 +1,64 @@
 PORTNAME=	libressl
-PORTVERSION=	3.5.3
+PORTVERSION=	3.5.4
 CATEGORIES=	security devel
 MASTER_SITES=	OPENBSD/LibreSSL
 
 MAINTAINER=	brnrd@FreeBSD.org
 COMMENT=	Free version of the SSL/TLS protocol forked from OpenSSL
 WWW=		https://www.libressl.org/
 
 LICENSE=	BSD4CLAUSE
 LICENSE_FILE=	${WRKSRC}/COPYING
 
 FLAVORS=	default libtls
 FLAVOR?=	${FLAVORS:[1]}
 libtls_DESCR=	pkg-descr-libtls
 libtls_PKGNAMESUFFIX=	-libtls
 libtls_PLIST=	pkg-plist-libtls
 
 CPE_VENDOR=	openbsd
 
 OPTIONS_DEFINE=	LIBTLS MAN3 NC
 OPTIONS_DEFAULT=	MAN3 NC
 LIBTLS_DESC=	Only install libtls (no libcrypto/libssl)
 MAN3_DESC=	Install API manpages (section 3)
 NC_DESC=	Install TLS-enabled netcat
 
 CONFLICTS_INSTALL=		libressl-devel
 libtls_CONFLICTS_INSTALL=	libretls
 default_CONFLICTS_INSTALL=	openssl \
 				openssl-devel
 
 .if ${FLAVOR:U} == default
 OPTIONS_EXCLUDE=	LIBTLS
 .elif ${FLAVOR:U} == libtls
 OPTIONS_SLAVE=		LIBTLS
 OPTIONS_EXCLUDE=	MAN3
 .endif
 
 LIBTLS_CONFIGURE_ENABLE=	libtls-only
 NC_CONFIGURE_ENABLE=		nc
 
 GNU_CONFIGURE=	yes
 USES=		cpe libtool pathfix pkgconfig
 USE_LDCONFIG=	yes
 OPTIONS_SUB=	yes
 CFLAGS+=	-fpic -DPIC -Wl,-rpath,${PREFIX}/lib -Wl,--as-needed
 LDFLAGS+=	-pthread
 
 INSTALL_TARGET=	install-strip
 TEST_TARGET=	check
 
 post-patch-MAN3-off:
 	${REINPLACE_CMD} -e '/^install-man:/s/install-man3//' \
 		-e '/$$(MAKE) $$(AM_MAKEFLAGS) install-data-hook/d' \
 		${WRKSRC}/man/Makefile.in
 
 post-install:
 	${RM} -r ${STAGEDIR}/${PREFIX}/etc/ssl/cert.pem
 
 post-stage-MAN3-on:
 	(cd ${STAGEDIR}${MANPREFIX}; ${FIND} man/man3 -not -type d | \
 		${SED} 's/$$/.gz/' >> ${TMPPLIST})
 
 .include <bsd.port.mk>
diff --git a/security/libressl/distinfo b/security/libressl/distinfo
index e5ee238c306c..6f8bf05bc4d6 100644
--- a/security/libressl/distinfo
+++ b/security/libressl/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1653036708
-SHA256 (libressl-3.5.3.tar.gz) = 3ab5e5eaef69ce20c6b170ee64d785b42235f48f2e62b095fca5d7b6672b8b28
-SIZE (libressl-3.5.3.tar.gz) = 4039561
+TIMESTAMP = 1675878889
+SHA256 (libressl-3.5.4.tar.gz) = 0379da1344a2f71ad4a4e3be30ef9d82eecddce7f8dc2ae66631a1dfe14343ac
+SIZE (libressl-3.5.4.tar.gz) = 4039834