OpenSSL to patch undisclosed high severity vulnerability this thursday

[Puntocom]

Info here: OpenSSL to Patch Undisclosed High Severity Vulnerability this Thursday

I wonder if LibreSSL will be vulnerable to this issue.

 

[rdn]

Looks like LibreSSL 2.2.1 is shaping up too portable/ChangeLog at master · libressl-portable/portable · GitHub

 

[Puntocom]

Be careful with non-official LibreSSL ports, specially since LibreSSL relies in the OS cryptographic functions and a bad implementation could be more insecure than OpenSSL: Insane Coding: Common LibreSSL porting mistakes

Official ports: LibreSSL Releases

LibreSSL: More Than 30 Days Later Ted Unangst
LibreSSL - The first 30 days and the Future Bob Beck

Donations are welcome :^)

 

[Puntocom]

Proactive security strikes again

'Not vulnerable to CVE-2015-1793' - MARC