3 ms·
So 4 out of 14 needed fixing in -current, while the rest were either already fixed or not relevant to libressl. It would be interesting to know who fixed the o
by clarry 12y ago
So 4 out of 14 needed fixing in -current, while the rest were either already fixed or not relevant to libressl. It would be interesting to know who fixed the ones that were fixed already, and when.
- deleted 12y ago[deleted]
- vog 12y agoI guess that most of these were "fixed" by simply throwing away lots of garbage code from OpenSSL during the evolution of LibreSSL.
- oskarth 12y agoThere are no quotation marks about it; it still counts.
- InclinedPlane 12y agoDon't undersell that man, priority zero in security is reducing the threat surface.
- vog 12y agoYou may be interested in the experience report of Ted Unangst about fixing security issues in OpenBSD: http://www.tedunangst.com/flak/post/making-security-sausage http://www.tedunangst.com/flak/post/making-security-sausage