LibreSSL 3.1.2 Released

2020-05-20 Thread Brent Cook
We have released LibreSSL 3.1.2, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. It includes the following fix: * A TLS client with peer verification disabled may crash when contacting a server that sends an empty certificate list. The LibreSSL project c

OpenBSD Errata: May 22nd, 2020 (unbound)

2020-05-20 Thread T.J. Townsend
Errata patches for unbound and unwind have been released for OpenBSD 6.6 and 6.7. Specially crafted queries may crash unbound and unwind. Both can be tricked into amplifying an incoming query. Binary updates for the amd64, i386, and arm64 platforms are available via the syspatch utility. Source c

OpenBSD Errata: May 22nd, 2020 (libssl)

2020-05-20 Thread T.J. Townsend
Errata patches for LibreSSL have been released for OpenBSD 6.7. A TLS client with peer verification disabled may crash when contacting a server that sends an empty certificate list. Binary updates for the amd64, i386, and arm64 platforms are available via the syspatch utility. Source code patches