3 ms·
Can you explain why LibreSSL is a bad choice for the next OS X version? Maybe OpenSSL & LibreSSL are not fixed on exactly the same day (but around the same time
by therealmarv 11y ago
Can you explain why LibreSSL is a bad choice for the next OS X version? Maybe OpenSSL & LibreSSL are not fixed on exactly the same day (but around the same time region) but this is not bad IMHO.
- nerdy 11y agoSimply saying with regards to this issue it didn't provide advance protection (that was my impression after reading the comment anyhow)
- zymhan 11y agoYou claimed that LibreSSL is a great step forward, but there's no reason to think that it's a "great step".
- glass- 11y ago> there's no reason The last time a bunch of OpenSSL CVEs dropped, there were 14 of them; two of which were rated sev: High. LibreSSL was affected by 5 out of the 14, none of which were high-severity. This time around there are seven vulnerabilities and LibreSSL is affected by four of them[1]. So there's at least 12 reasons. [0] https://marc.info/?l=openbsd-cvs&m=142677372515025&w=2 [1] https://marc.info/?l=openbsd-announce&m=143406498020131&w=2