LibreSSL 2.1.2 released

2014-12-08 Thread Brent Cook
We have released LibreSSL 2.1.2, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This release greatly improves performance, interoperability and portability, while continuing to be easy to build and integrate into your software projects. This release includes:

LibreSSL 2.1.5 released

2015-03-16 Thread Brent Cook
We have released LibreSSL 2.1.5, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This release is relatively small, focused on bug fixes before 2.2.x development begins along-side OpenBSD 5.8. This or earlier LibreSSL releases may also address issues that are

LibreSSL 2.2.2 released

2015-08-05 Thread Brent Cook
We have released LibreSSL 2.2.2, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This release marks the end of the OpenBSD 5.8 development cycle, featuring expanded portable build support, code improvements, removal of obsolete workarounds. SSLv3 deprecation

LibreSSL 2.2.1 released

2015-07-08 Thread Brent Cook
We have released LibreSSL 2.2.1, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This release continues from the OpenBSD 5.8 development tree, featuring expanded OS support, code improvements, and feature removal. Also note that SSLv3 support has not been

LibreSSL 2.3.0 Released

2015-09-23 Thread Brent Cook
We have released LibreSSL 2.3.0, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This release is the first snapshot based on the development OpenBSD 5.9 branch. As such, it is likely to change more compared to the stable 2.2.x and 2.1.x branches. The ABI/API

LibreSSL 2.2.5 and 2.1.9 released

2015-12-07 Thread Brent Cook
We have released LibreSSL 2.2.5 and 2.1.9, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This release is based on the stable OpenBSD 5.8 and 5.7 branches, which include two fixes from the Dec 3, 2015 OpenSSL release: - CVE-2015-3194 - NULL pointer

LibreSSL 2.3.2, 2.2.6, and 2.1.10 released

2016-01-28 Thread Brent Cook
We have released a number of LibreSSL updates, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. LibreSSL 2.2.6 and 2.1.10 contain a single change to deprecate use of the SSL_OP_SINGLE_DH_USE flag. It is now enabled unconditionally. Thanks to Antonio Sanso for

LibreSSL 2.3.3 Released

2016-03-22 Thread Brent Cook
We have released LibreSSL 2.3.3, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This release marks the beginning of stable 2.3.x branch, with all API/ABI changes now moving to the 2.4.x development branch. LibreSSL 2.3.3 is identical to the version that will

OpenNTPD 5.9p1 released

2016-03-29 Thread Brent Cook
OpenNTPD 5.9p1 has just been released. t will be available from the mirrors listed at http://www.openntpd.org/ shortly. OpenNTPD is a FREE, secure, and easy to use implementation of the Network Time Protocol. It provides the ability to sync the local clock to remote NTP servers and can act as NTP

LibreSSL 2.3.9 and 2.4.4 released

2016-11-06 Thread Brent Cook
We have released LibreSSL 2.3.9 and 2.4.4, which are availeble in the LibreSSL directory of your local OpenBSD mirror. Both include the following reliability change: * Avoid continual processing of an unlimited number of TLS records, which can cause a denial-of-service condition.

LibreSSL 2.5.5, 2.6.0 released

2017-07-13 Thread Brent Cook
We have released LibreSSL 2.5.5 and 2.6.0, which is available in the LibreSSL directory of your local OpenBSD mirror. LibreSSL 2.5.5 is derived from the stable branch tracking OpenBSD 6.1. LibreSSL 2.6.0 is the first release from the development branch that eventually ship with OpenBSD 6.2.

LibreSSL 2.6.2 Released

2017-09-26 Thread Brent Cook
We have released LibreSSL 2.6.2, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the third development release from the 2.6 series, which will eventually be part of OpenBSD 6.2. It includes the following fixes: * Provide a useful error with libtls if

LibreSSL 2.6.3 Released

2017-11-06 Thread Brent Cook
We have released LibreSSL 2.6.3, based on OpenBSD 6.2, which will be the new stable release series. LibreSSL 2.4.x support has also ended. LibreSSL 2.6.3 contains the following changes from the previous stable release: * Added support for providing CRLs to libtls - once a CRL is provided via

OpenNTPD 6.2p3 Released

2017-10-30 Thread Brent Cook
OpenNTPD 6.2p3 has just been released, which is based on the OpenBSD 6.2 release. It will be available from the mirrors listed at http://www.openntpd.org/ shortly. OpenNTPD is a FREE, secure, and easy to use implementation of the Network Time Protocol. It provides the ability to sync the local

LibreSSL 2.6.4 Released

2017-12-21 Thread Brent Cook

LibreSSL 2.7.3 Released

2018-05-05 Thread Brent Cook
We have released LibreSSL 2.7.3, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the first bugfix release from the 2.7 series, which includes the following changes from 2.7.2: * Removed incorrect NULL checks in DH_set0_key(). Reported by Ondrej Sury.

LibreSSL 2.7.4, 2.6.5 Released

2018-06-13 Thread Brent Cook
We have released LibreSSL 2.7.4 and 2.6.5, security updates for the current stable release branches. They contain the following changes: * Avoid a timing side-channel leak when generating DSA and ECDSA signatures. This is caused by an attempt to do fast modular arithmetic, which

LibreSSL 2.6.4 Released (fixed)

2017-12-21 Thread Brent Cook
We have released LibreSSL 2.6.4, the first stable maintenance release from the 2.6.x series. It contains the following changes from the 2.6.3 release: * Made tls_config_parse_protocols() work correctly when passed a NULL pointer for a protocol string. Issue found by semarie@, who also

LibreSSL 2.8.0 Released

2018-08-08 Thread Brent Cook
We have released LibreSSL 2.8.0, which is available from your local OpenBSD mirror. This is the first development release from the 2.8 series, which will eventually be part of OpenBSD 6.4. It includes the following changes: * Extensive documentation updates and additional API history. *

LibreSSL 2.7.2 Released

2018-04-01 Thread Brent Cook
We have released LibreSSL 2.7.2, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. LibreSSL 2.7.2 is the first stable release from the 2.7 series, and is also included with OpenBSD 6.3. It includes the following changes from 2.7.1 * Updated and added extensive

LibreSSL 2.7.1 Released

2018-03-23 Thread Brent Cook
We have released LibreSSL 2.7.1, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the second release from the 2.7 series, which will be part of OpenBSD 6.3. It includes the following changes from 2.7.0 * Fixed a bug in int_x509_param_set_hosts, calling

LibreSSL 2.7.0 Released

2018-03-22 Thread Brent Cook
We have released LibreSSL 2.7.0, which you can now download from LibreSSL directory of your local OpenBSD mirror. This is the first release from the 2.7 series, which will be part of OpenBSD 6.3. It includes the following changes: * Added support for many OpenSSL 1.0.2 and 1.1 APIs, based on

LibreSSL 2.8.2 Released

2018-10-23 Thread Brent Cook
We would like to announce that we have released LibreSSL 2.8.2, which is available in the LibreSSL directory of your local OpenBSD mirror. This announcement comes a few days after it was first available on October 18th, 2018, along with OpenBSD 6.4. This is the first stable release from the 2.8

LibreSSL 2.8.1 Released

2018-09-26 Thread Brent Cook
We have released LibreSSL 2.8.1, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the second development release from the 2.8 series, which will eventually be part of OpenBSD 6.4. It includes the following changes: * Added Wycheproof test vectors for

LibreSSL 2.9.0 released

2018-12-15 Thread Brent Cook
We have released LibreSSL 2.9.0, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the first development release from the 2.9 series, which will eventually be part of OpenBSD 6.5. It includes the following changes: * CRYPTO_LOCK is now automatically

LibreSSL 2.8.3 released

2018-12-15 Thread Brent Cook
We have released LibreSSL 2.8.3, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the first stable update from the 2.8 series. It includes the following changes: * Fixed warnings about clock_gettime on Windows Visual Studio builds. * Fixed CMake

LibreSSL 2.7.5 released

2018-12-15 Thread Brent Cook
We have released LibreSSL 2.7.5, a stable update for the 2.7.x series. It contains the following changes: * Fixed warnings about clock_gettime on Windows Visual Studio builds. * Fixed CMake builds on systems where getpagesize is defined as an inline function. * Fixed manpage

LibreSSL 2.9.2 Released

2019-05-20 Thread Brent Cook
We have released LibreSSL 2.9.2, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. It includes the following changes: * Fixed portable builds with older versions of MacOS, Android targets < API 21, and Solaris 10. * Fixed SRTP profile advertisement for

LibreSSL 2.9.1 Released

2019-04-21 Thread Brent Cook
We have released LibreSSL 2.9.1, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the first stable release from the 2.9 series, which is also included with OpenBSD 6.5 It includes the following changes and improvements from LibreSSL 2.8.x: * API and

LibreSSL 3.0.0 Released

2019-08-05 Thread Brent Cook
We have released LibreSSL 3.0.0, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the first development release from the 3.0.x series, which will eventually be part of OpenBSD 6.6. It includes the following changes: * Completed the port of RSA_METHOD

LibreSSL 3.0.1 Released

2019-09-30 Thread Brent Cook
We have released LibreSSL 3.0.1, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the second development release from the 3.0 series, which will eventually be part of OpenBSD 6.6. It includes the following changes: * Ported Billy Brumley's fix for

LibreSSL 3.0.2 Released

2019-10-18 Thread Brent Cook
We have released LibreSSL 3.0.2, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the first stable release from the 3.0 series, which is included with OpenBSD 6.6. It includes the following changes: * Use a valid curve when constructing an EC_KEY that

LibreSSL 3.1.0 Released

2020-04-08 Thread Brent Cook
We have released LibreSSL 3.1.0, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. The signify signing key has been rotated this time around, and the public key for future releases should appear as follows, while the GPG key remains the same (releases are

LibreSSL 3.1.1 released

2020-05-08 Thread Brent Cook
We have released LibreSSL 3.1.1, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the first stable release from the 3.1 series, which is included with OpenBSD 6.7. It includes the following changes from 3.0: * New Features - Completed initial TLS

LibreSSL 3.1.2 Released

2020-05-20 Thread Brent Cook
We have released LibreSSL 3.1.2, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. It includes the following fix: * A TLS client with peer verification disabled may crash when contacting a server that sends an empty certificate list. The LibreSSL project

LibreSSL 3.2.2 Released

2020-10-18 Thread Brent Cook
We have released LibreSSL 3.2.2, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the first stable release from the 3.2 series, which is included with OpenBSD 6.8. It includes the following changes from LibreSSL 3.2.1: * This is the first stable

LibreSSL 3.1.4 Released

2020-08-17 Thread Brent Cook
We have released LibreSSL 3.1.4, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. It includes the following interoperability and bug fixes for the TLSv1.3 client: * Improve client certificate selection to allow EC certificates instead of only RSA

LibreSSL 3.2.1 Released

2020-08-24 Thread Brent Cook
We have released LibreSSL 3.2.1, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the second development release from the 3.2.x series, which will eventually be part of OpenBSD 6.8. It includes the following changes: * Propagate alerts from the read

LibreSSL 3.2.0 Released

2020-05-31 Thread Brent Cook
We have released LibreSSL 3.2.0, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the first development release from the 3.2.x series, which will eventually be part of OpenBSD 6.8. It includes the following changes: * Enable TLS 1.3 server side in

LibreSSL 3.1.3 Released

2020-06-15 Thread Brent Cook
We have released LibreSSL 3.1.3, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. It includes the following fix: * libcrypto may fail to build a valid certificate chain due to expired untrusted issuer certificates. The LibreSSL project continues

LibreSSL 3.3.1, 3.2.3, and 3.1.5 Released

2020-12-08 Thread Brent Cook
We have released LibreSSL 3.3.1, 3.2.3, and 3.1.5, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. It includes the following security fix: * Malformed ASN.1 in a certificate revocation list or a timestamp response token can lead to a NULL pointer

OpenNTPD 6.8p1 released

2020-12-08 Thread Brent Cook
OpenNTPD 6.8p1 has been released, and is now available from your local OpenBSD mirror. This is the first stable release based on OpenBSD 6.8. It includes the following changes since OpenNTPD 6.2p3: * The ntpd daemon now gets and sets the clock in a secure way when booting even when a

LibreSSL 3.3.0 Released

2020-11-23 Thread Brent Cook
We have released LibreSSL 3.3.0, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the first development release from the 3.3.x series, which will eventually be part of OpenBSD 6.9. It includes the following changes: * Make openssl(1) s_server ignore