News for hackers. Stuff that matters.

A comment on Alpine Edge has switched to libressl.

Re:Alpine Edge has switched to libressl by _asummers on Wednesday October 12, 2016 @08:09AM (#12692093)
How has LibreSSL stood up lately to the relatively frequent CVEs in OpenSSL the past few months? I know the initial months were a frenzy of removing garbage and classes of problems (#yadf) that preempted a few CVEs, but I haven't been paying attention to the commit logs to know if it was also susceptible to them.
[ Parent | on HN ]
Re:Alpine Edge has switched to libressl by mrweasel on Wednesday October 12, 2016 @08:36AM (#12692241)
A quick look through the release notes: https://www.libressl.org/releases.html seems to indicate that they've only been affected by six CVEs since October 2015.

I haven't followed LibreSSL recently, but previously many of the CVEs that affected OpenSSL are for features that LibreSSL ripped out.

[ Parent | on HN ]
Re:Alpine Edge has switched to libressl by noinsight on Wednesday October 12, 2016 @12:16PM (#12694168)
Wikipedia has a comparison list:

https://en.wikipedia.org/wiki/LibreSSL#Security_and_vulnerab...

[ Parent | on HN ]