1. 13
    CVE-2017-8301: TLS verification vulnerability in LibreSSL 2.5.1 - 2.5.3 release security seclists.org
    mjturner avatar via mjturner 5 years ago |
    Archive.org Archive.today Ghostarchive
    | 4 comments
  1. 3
    tb avatar tb 5 years ago | link

    Fixed in 2.5.4. This is the reason for the libressl erratum that was released yesterday for OpenBSD 6.1-stable. The github thread on libressl-portable may be of interest.

    1. 1
      mjturner avatar mjturner 5 years ago | link

      First time I’ve used it and syspatch worked perfectly. Rather nicely, openup now uses it too.

    2. river avatar river 5 years ago | link

      [Comment removed by author]

      1. 9
        tedu avatar tedu 5 years ago | link

        Introduced. The desired semantics of the function in question are weird. It was actually an attempt to do the opposite.

        1. 7
          apy avatar apy 5 years ago | link

          Hey man, you’re supposed to be removing bugs, not adding them!