3 ms·
How has LibreSSL stood up lately to the relatively frequent CVEs in OpenSSL the past few months? I know the initial months were a frenzy of removing garbage and
by _asummers 10y ago
How has LibreSSL stood up lately to the relatively frequent CVEs in OpenSSL the past few months? I know the initial months were a frenzy of removing garbage and classes of problems (#yadf) that preempted a few CVEs, but I haven't been paying attention to the commit logs to know if it was also susceptible to them.
- deleted 10y ago[deleted]
- mrweasel 10y agoA quick look through the release notes: https://www.libressl.org/releases.html https://www.libressl.org/releases.html seems to indicate that they've only been affected by six CVEs since October 2015. I haven't followed LibreSSL recently, but previously many of the CVEs that affected OpenSSL are for features that LibreSSL ripped out.
- noinsight 10y agoWikipedia has a comparison list: https://en.wikipedia.org/wiki/LibreSSL#Security_and_vulnerabilities https://en.wikipedia.org/wiki/LibreSSL#Security_and_vulnerab...