LibreSSL 2.1.5 Released
by from OpenBSD Journal on (#555Y)
The LibreSSL team has released LibreSSL 2.1.5, which the team characterizes as
relatively small, focused on bug fixes before 2.2.xdevelopment begins along-side OpenBSD 5.8.
In what could be a useful test of the LibreSSL project's code cleanup operation, the team notes that
This or earlier LibreSSL releases may also address issues that are to berevealed by The OpenSSL Project Team on the 19th of March, 2015.The LibreSSL team is not typically apprised of OpenSSL-related securityissues in advance. We will address any previously-unknown issues thatare found to affect LibreSSL in future releases.
You can read the full announcement here, and it also follows in full after the fold.
UPDATE 2015-03-17 16:20 CET: Bob Beck (beck@) now reports that the OpenSSL project has communicated details of the still-embargoed OpenSSL vulnerabilities to LibreSSL core developers.
Read more...