LibreSSL 2.1.7 and 2.2.0 Released

Contributed by tj on 2015-06-11 from the logjammin' dept.

Brent Cook (bcook@) has announced the latest LibreSSL releases, which contain fixes for several CVEs:

We have released LibreSSL 2.2.0, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.

This release is the first from the OpenBSD 5.8 development tree and
features mainly on build system improvements and new OS support.

We have also released LibreSSL 2.1.7, which contains additional security
fixes.

Of special note is the upcoming removal of SSLv3:

Note: This will likely be the last 2.2.x release with support for SSLv3,
as it will be removed entirely from the main LibreSSL tree.

(Comments are closed)

Comments

By Jorden Verwer (145.131.158.89) on 2015-06-12 14:33

In other words, LibreSSL will drop support for SSL. ;)
Comments
1. By Anonymous Coward (209.181.89.124) on 2015-06-16 18:24
  
  > In other words, LibreSSL will drop support for SSL. ;)
  
  Does that mean SSLv3 just needs more work to go back in, or does that mean the standard itself is broken and needs to be avoided?
  Comments
  1. By Anonymous Coward (80.44.54.27) on 2015-06-17 06:06
    
    > > In other words, LibreSSL will drop support for SSL. ;)
    >
    > Does that mean SSLv3 just needs more work to go back in, or does that mean the standard itself is broken and needs to be avoided?
    
    SSLv3 as a standard is broken. Weaknesses have been discovered...

Latest Articles

Sun, Aug 25
- 09:13 rpki-client 9.2 released (0)
Sat, Aug 24
- 11:46 No unmodified files remain from original import of OpenBSD (0)
Wed, Aug 14
- 20:39 Game of Trees 0.102 released! (0)
- 05:31 The BSDCan 2024 Playlist is now complete (0)
Thu, Aug 08
- 09:26 OpenBSD -current moves to 7.6-beta (1)
Mon, Jul 29
- 12:27 Possible future vmm(4)/vmd(8) on arm64 (1)
Sat, Jul 27
- 11:05 UDP parallel input committed to -current (0)
Wed, Jul 24
- 05:28 Incoming: UDP parallel input (1)
Sun, Jul 21
- 16:54 Libva's VA-API (Video Acceleration API) imported into xenocara (3)

Credits

Copyright © 2004-2008 Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to April 2nd 2004 as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]