1. 13
    CVE-2017-8301: TLS verification vulnerability in LibreSSL 2.5.1 - 2.5.3 release security seclists.org
    mjturner avatar via mjturner 4 years ago | cached | 4 comments

  1.  

  2. 3
    tb avatar tb 4 years ago | link

    Fixed in 2.5.4. This is the reason for the libressl erratum that was released yesterday for OpenBSD 6.1-stable. The github thread on libressl-portable may be of interest.

    1. 1
      mjturner avatar mjturner 4 years ago | link

      First time I’ve used it and syspatch worked perfectly. Rather nicely, openup now uses it too.

    2. river avatar river 4 years ago | link

      [Comment removed by author]

      1. 9
        tedu avatar tedu 4 years ago | link

        Introduced. The desired semantics of the function in question are weird. It was actually an attempt to do the opposite.

        1. 7
          apy avatar apy 4 years ago | link

          Hey man, you’re supposed to be removing bugs, not adding them!