3 ms·
They didn't mention anywhere whether or not CVE-2015-0207 was patched, so I'm left to assume it's still vulnerable (but hopefully a patch is being written for i
by some_furry 12y ago
They didn't mention anywhere whether or not CVE-2015-0207 was patched, so I'm left to assume it's still vulnerable (but hopefully a patch is being written for it).
- parfe 12y agoThe patch for this issue is integrated in LibreSSL 2.1.6: * CVE-2015-0207 - Segmentation fault in DTLSv1_listen LibreSSL is not vulnerable, but the fix was safe to merge. http://marc.info/?l=openbsd-tech&m=142677928417277&w=2 http://marc.info/?l=openbsd-tech&m=142677928417277&w=2
- some_furry 12y agoOh, thank you very much. Every day, LibreSSL looks more attractive. I should take the time to learn to compile PHP to hook into it instead of openssl.