Compare commits
3 Commits
Author | SHA1 | Date | |
---|---|---|---|
![]() |
20323ee367 | ||
![]() |
5b093cd0c8 | ||
![]() |
6494230957 |
27
ChangeLog
27
ChangeLog
@@ -31,6 +31,33 @@ LibreSSL Portable Release Notes:
|
|||||||
This release primarily addresses a number of security issues in coordination
|
This release primarily addresses a number of security issues in coordination
|
||||||
with the OpenSSL project.
|
with the OpenSSL project.
|
||||||
|
|
||||||
|
2.1.10
|
||||||
|
|
||||||
|
* Deprecated the SSL_OP_SINGLE_DH_USE flag
|
||||||
|
|
||||||
|
2.1.9 - Reliability Update
|
||||||
|
|
||||||
|
* Fixes from OpenSSL 1.0.1q
|
||||||
|
- CVE-2015-3194 - NULL pointer dereference in client side certificate
|
||||||
|
validation.
|
||||||
|
- CVE-2015-3195 - Memory leak in PKCS7 - not reachable from TLS/SSL
|
||||||
|
|
||||||
|
* The following OpenSSL CVEs did not apply to LibreSSL
|
||||||
|
- CVE-2015-3193 - Carry propagating bug in the x86_64 Montgomery squaring
|
||||||
|
procedure.
|
||||||
|
- CVE-2015-3196 - Double free race condition of the identify hint data.
|
||||||
|
|
||||||
|
See https://marc.info/?l=openbsd-announce&m=144925068504102
|
||||||
|
|
||||||
|
2.1.8 - Security Update
|
||||||
|
|
||||||
|
* Fixes for a memory leak and out-of-bounds access in OBJ_obj2txt
|
||||||
|
reported by Qualys Security.
|
||||||
|
- CVE-2015-5333 - memory leak in OBJ_obj2txt
|
||||||
|
- CVE-2015-5334 - 1-byte buffer overflow in OBJ_obj2txt
|
||||||
|
|
||||||
|
See http://www.openwall.com/lists/oss-security/2015/10/16/1
|
||||||
|
|
||||||
2.1.7 - Security Update
|
2.1.7 - Security Update
|
||||||
|
|
||||||
* Fixes for the following issues are integrated into LibreSSL 2.1.7:
|
* Fixes for the following issues are integrated into LibreSSL 2.1.7:
|
||||||
|
Reference in New Issue
Block a user