Re:Qualys Security Advisory – LibreSSL
by snksnk on Monday October 19, 2015 @03:35AM
(#10411630)
> We would like to thank the LibreSSL team for their great work and their incredibly quick response, and Red Hat Product Security for promptly assigning CVE-IDs to these issues.
I am glad that bugs are found. It shows that the audit is thorough, since bugs can still be expected in LibreSSL (still quite new) and OpenSMTPD (audit was explicitly requested).
> Patch: http://ftp.openbsd.org/pub/OpenBSD/patches/5.8/common/007_ob...
> Releases: http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/
I am glad that bugs are found. It shows that the audit is thorough, since bugs can still be expected in LibreSSL (still quite new) and OpenSMTPD (audit was explicitly requested).