We have released LibreSSL 2.1.2, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
This release greatly improves performance, interoperability and portability,
while continuing to be easy to build and integrate into your software projects.
This release includes:
We have released LibreSSL 2.1.5, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
This release is relatively small, focused on bug fixes before 2.2.x
development begins along-side OpenBSD 5.8.
This or earlier LibreSSL releases may also address issues that are
We have released LibreSSL 2.2.2, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
This release marks the end of the OpenBSD 5.8 development cycle,
featuring expanded portable build support, code improvements, removal of
obsolete workarounds.
SSLv3 deprecation
We have released LibreSSL 2.2.1, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
This release continues from the OpenBSD 5.8 development tree, featuring
expanded OS support, code improvements, and feature removal. Also note
that SSLv3 support has not been
We have released LibreSSL 2.3.0, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
This release is the first snapshot based on the development OpenBSD 5.9
branch. As such, it is likely to change more compared to the stable
2.2.x and 2.1.x branches. The ABI/API
We have released LibreSSL 2.2.5 and 2.1.9, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
This release is based on the stable OpenBSD 5.8 and 5.7 branches, which
include two fixes from the Dec 3, 2015 OpenSSL release:
- CVE-2015-3194 - NULL pointer
We have released a number of LibreSSL updates, which will be arriving in
the LibreSSL directory of your local OpenBSD mirror soon.
LibreSSL 2.2.6 and 2.1.10 contain a single change to deprecate use of
the SSL_OP_SINGLE_DH_USE flag. It is now enabled unconditionally.
Thanks to Antonio Sanso for
We have released LibreSSL 2.3.3, which will be arriving in the LibreSSL
directory of your local OpenBSD mirror soon.
This release marks the beginning of stable 2.3.x branch, with all
API/ABI changes now moving to the 2.4.x development branch. LibreSSL 2.3.3
is identical to the version that will
OpenNTPD 5.9p1 has just been released. t will be available from the
mirrors listed at http://www.openntpd.org/ shortly.
OpenNTPD is a FREE, secure, and easy to use implementation of the
Network Time Protocol. It provides the ability to sync the local clock
to remote NTP servers and can act as NTP
We have released LibreSSL 2.3.9 and 2.4.4, which are availeble in the
LibreSSL directory of your local OpenBSD mirror. Both include the following
reliability change:
* Avoid continual processing of an unlimited number of TLS records,
which can cause a denial-of-service condition.
We have released LibreSSL 2.5.5 and 2.6.0, which is available in the
LibreSSL directory of your local OpenBSD mirror. LibreSSL 2.5.5 is
derived from the stable branch tracking OpenBSD 6.1. LibreSSL 2.6.0 is
the first release from the development branch that eventually
ship with OpenBSD 6.2.
We have released LibreSSL 2.6.2, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon. This is the third
development release from the 2.6 series, which will eventually be part of
OpenBSD 6.2. It includes the following fixes:
* Provide a useful error with libtls if
We have released LibreSSL 2.6.3, based on OpenBSD 6.2, which will be the new
stable release series. LibreSSL 2.4.x support has also ended. LibreSSL 2.6.3
contains the following changes from the previous stable release:
* Added support for providing CRLs to libtls - once a CRL is provided via
OpenNTPD 6.2p3 has just been released, which is based on the OpenBSD 6.2
release.
It will be available from the mirrors listed at http://www.openntpd.org/
shortly.
OpenNTPD is a FREE, secure, and easy to use implementation of the Network Time
Protocol. It provides the ability to sync the local
We have released LibreSSL 2.7.3, which will be arriving in the LibreSSL
directory of your local OpenBSD mirror soon. This is the first bugfix
release from the 2.7 series, which includes the following changes from 2.7.2:
* Removed incorrect NULL checks in DH_set0_key(). Reported by Ondrej Sury.
We have released LibreSSL 2.7.4 and 2.6.5, security updates for the
current stable release branches. They contain the following changes:
* Avoid a timing side-channel leak when generating DSA and ECDSA
signatures. This is caused by an attempt to do fast modular
arithmetic, which
We have released LibreSSL 2.6.4, the first stable maintenance release from the
2.6.x series. It contains the following changes from the 2.6.3 release:
* Made tls_config_parse_protocols() work correctly when passed a NULL
pointer for a protocol string. Issue found by semarie@, who also
We have released LibreSSL 2.8.0, which is available from your local
OpenBSD mirror.
This is the first development release from the 2.8 series, which will
eventually be part of OpenBSD 6.4. It includes the following changes:
* Extensive documentation updates and additional API history.
*
We have released LibreSSL 2.7.2, which will be arriving in the LibreSSL
directory of your local OpenBSD mirror soon. LibreSSL 2.7.2 is the first
stable release from the 2.7 series, and is also included with OpenBSD 6.3.
It includes the following changes from 2.7.1
* Updated and added extensive
We have released LibreSSL 2.7.1, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon. This is the second
release from the 2.7 series, which will be part of OpenBSD 6.3.
It includes the following changes from 2.7.0
* Fixed a bug in int_x509_param_set_hosts, calling
We have released LibreSSL 2.7.0, which you can now download from
LibreSSL directory of your local OpenBSD mirror. This is the first
release from the 2.7 series, which will be part of OpenBSD 6.3.
It includes the following changes:
* Added support for many OpenSSL 1.0.2 and 1.1 APIs, based on
We would like to announce that we have released LibreSSL 2.8.2, which is
available in the LibreSSL directory of your local OpenBSD mirror. This
announcement comes a few days after it was first available on October
18th, 2018, along with OpenBSD 6.4. This is the first stable release from
the 2.8
We have released LibreSSL 2.8.1, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
This is the second development release from the 2.8 series, which will
eventually be part of OpenBSD 6.4. It includes the following changes:
* Added Wycheproof test vectors for
We have released LibreSSL 2.9.0, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
This is the first development release from the 2.9 series, which will
eventually be part of OpenBSD 6.5. It includes the following changes:
* CRYPTO_LOCK is now automatically
We have released LibreSSL 2.8.3, which will be arriving in the LibreSSL
directory of your local OpenBSD mirror soon. This is the first stable update
from the 2.8 series.
It includes the following changes:
* Fixed warnings about clock_gettime on Windows Visual Studio builds.
* Fixed CMake
We have released LibreSSL 2.7.5, a stable update for the
2.7.x series. It contains the following changes:
* Fixed warnings about clock_gettime on Windows Visual Studio builds.
* Fixed CMake builds on systems where getpagesize is defined as an
inline function.
* Fixed manpage
We have released LibreSSL 2.9.2, which will be arriving in the LibreSSL
directory of your local OpenBSD mirror soon.
It includes the following changes:
* Fixed portable builds with older versions of MacOS,
Android targets < API 21, and Solaris 10.
* Fixed SRTP profile advertisement for
We have released LibreSSL 2.9.1, which will be arriving in the LibreSSL
directory of your local OpenBSD mirror soon. This is the first stable release
from the 2.9 series, which is also included with OpenBSD 6.5
It includes the following changes and improvements from LibreSSL 2.8.x:
* API and
We have released LibreSSL 3.0.0, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
This is the first development release from the 3.0.x series, which will
eventually be part of OpenBSD 6.6. It includes the following changes:
* Completed the port of RSA_METHOD
We have released LibreSSL 3.0.1, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
This is the second development release from the 3.0 series, which will
eventually be part of OpenBSD 6.6. It includes the following changes:
* Ported Billy Brumley's fix for
We have released LibreSSL 3.0.2, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
This is the first stable release from the 3.0 series, which is included
with OpenBSD 6.6. It includes the following changes:
* Use a valid curve when constructing an EC_KEY that
We have released LibreSSL 3.1.0, which will be arriving in the LibreSSL
directory of your local OpenBSD mirror soon.
The signify signing key has been rotated this time around, and the public key
for future releases should appear as follows, while the GPG key remains the
same (releases are
We have released LibreSSL 3.1.1, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
This is the first stable release from the 3.1 series, which is included
with OpenBSD 6.7. It includes the following changes from 3.0:
* New Features
- Completed initial TLS
We have released LibreSSL 3.1.2, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
It includes the following fix:
* A TLS client with peer verification disabled may crash when
contacting a server that sends an empty certificate list.
The LibreSSL project
We have released LibreSSL 3.2.2, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
This is the first stable release from the 3.2 series, which is included
with OpenBSD 6.8. It includes the following changes from LibreSSL 3.2.1:
* This is the first stable
We have released LibreSSL 3.1.4, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
It includes the following interoperability and bug fixes for the
TLSv1.3 client:
* Improve client certificate selection to allow EC certificates
instead of only RSA
We have released LibreSSL 3.2.1, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
This is the second development release from the 3.2.x series, which will
eventually be part of OpenBSD 6.8. It includes the following changes:
* Propagate alerts from the read
We have released LibreSSL 3.2.0, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
This is the first development release from the 3.2.x series, which will
eventually be part of OpenBSD 6.8. It includes the following changes:
* Enable TLS 1.3 server side in
We have released LibreSSL 3.1.3, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon.
It includes the following fix:
* libcrypto may fail to build a valid certificate chain due to
expired untrusted issuer certificates.
The LibreSSL project continues
We have released LibreSSL 3.3.1, 3.2.3, and 3.1.5, which will be arriving
in the LibreSSL directory of your local OpenBSD mirror soon.
It includes the following security fix:
* Malformed ASN.1 in a certificate revocation list or a timestamp
response token can lead to a NULL pointer
OpenNTPD 6.8p1 has been released, and is now available from your local
OpenBSD mirror. This is the first stable release based on OpenBSD 6.8.
It includes the following changes since OpenNTPD 6.2p3:
* The ntpd daemon now gets and sets the clock in a secure way when booting
even when a
We have released LibreSSL 3.3.0, which will be arriving in the LibreSSL
directory of your local OpenBSD mirror soon.
This is the first development release from the 3.3.x series, which will
eventually be part of OpenBSD 6.9. It includes the following changes:
* Make openssl(1) s_server ignore
43 matches
Mail list logo