Re:OpenSSL Security Advisory
by zymhan on Thursday June 11, 2015 @04:30PM
(#9702181)
You claimed that LibreSSL is a great step forward, but there's no reason to think that it's a "great step".
[ Parent
| on HN ]
> there's no reason
The last time a bunch of OpenSSL CVEs dropped, there were 14 of them; two of which were rated sev: High. LibreSSL was affected by 5 out of the 14, none of which were high-severity.
This time around there are seven vulnerabilities and LibreSSL is affected by four of them[1].
So there's at least 12 reasons.
[0] https://marc.info/?l=openbsd-cvs&m=142677372515025&w=2
[1] https://marc.info/?l=openbsd-announce&m=143406498020131&w=2