设为首页收藏本站

LUPA开源社区

 找回密码
 注册
文章 帖子 博客
LUPA开源社区 首页 业界资讯 软件追踪 查看内容

LibreSSL 2.2.0发布,安全套接字库

2015-6-14 23:32| 发布者: joejoe0332| 查看: 651| 评论: 0|原作者: oschina|来自: oschina

摘要: LibreSSL 2.2.0 发布,此版本是最新的 OpenBSD-current 版本,最新的 OpenBSD-stable 版本是 2.1.7。更新内容: * AIX Support - thanks to Michael Felt * Cygwin Support - thanks to Corinna Vinschen * Refactor ...

LibreSSL 2.2.0 发布,此版本是最新的 OpenBSD-current 版本,最新的 OpenBSD-stable 版本是 2.1.7。


更新内容:

  * AIX Support - thanks to Michael Felt

  * Cygwin Support - thanks to Corinna Vinschen

  * Refactored build macros, support packaging libtls independently.
    There are more pieces required to support building and using OpenSSL
    with libtls, but this is an initial start at providing an
    independent package for people to start hacking on.

  * Removal of OPENSSL_issetugid and all library getenv calls.
    Applications can and should no longer rely on environment variables
    for changing library behavior. OPENSSL_CONF/SSLEAY_CONF is still
    supported with the openssl(1) command.

  * libtls API and documentation additions

  * Various bug fixes and simplifications to libssl and libcrypto

  * Fixes for the following issues are integrated into
     LibreSSL 2.1.7 and 2.2.0:
    - CVE-2015-1788 - Malformed ECParameters causes infinite loop
    - CVE-2015-1789 - Exploitable out-of-bounds read in X509_cmp_time
    - CVE-2015-1792 - CMS verify infinite loop with unknown hash function
                      (this code is not enabled by default)

  * The following CVEs did not apply to LibreSSL or were fixed in earlier
    releases:
    - CVE-2015-4000 - DHE man-in-the-middle protection (Logjam)
    - CVE-2015-1790 - PKCS7 crash with missing EnvelopedContent
    - CVE-2014-8176 - Invalid free in DTLS

  * Fixes for the following CVEs are still in review for LibreSSL
    - CVE-2015-1791 - Race condition handling NewSessionTicket

LibreSSL 是一个免费版本的 SSL/TLS 协议,来自于 OpenSSL

LibreSSL 支持多平台,开发者宣称“我们不想要伤透你们的心”。


酷毙

雷人

鲜花

鸡蛋

漂亮
上一篇:TeX Live 2015发布下一篇:NLog 4.0发布
  • 快毕业了,没工作经验,
    找份工作好难啊?
    赶紧去人才芯片公司磨练吧!!

最新评论

关于LUPA|人才芯片工程|人才招聘|LUPA认证|LUPA教育|LUPA开源社区 ( 浙B2-20090187 浙公网安备 33010602006705号   

返回顶部