factotum/libressl-portable
1
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

update changelog

Browse Source
This commit is contained in:
Brent Cook 2018-06-13 11:40:32 -05:00
parent 4fcfc82d83
commit d4bf25f6c0
1 changed files with 19 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
ChangeLog
View File

@ -28,18 +28,33 @@ history is also available from Git.
LibreSSL Portable Release Notes: LibreSSL Portable Release Notes:
2.7.4 - Security fixes
* Avoid a timing side-channel leak when generating DSA and ECDSA
signatures. This is caused by an attempt to do fast modular
arithmetic, which introduces branches that leak information
regarding secret values. Issue identified and reported by Keegan
Ryan of NCC Group.
* Reject excessively large primes in DH key generation. Problem
reported by Guido Vranken to OpenSSL
(https://github.com/openssl/openssl/pull/6457) and based on his
diff.
2.7.3 - Bug fixes 2.7.3 - Bug fixes
* Removed incorrect NULL checks in DH_set0_key(). Reported by Ondrej Sury * Removed incorrect NULL checks in DH_set0_key(). Reported by Ondrej
Sury
* Fixed an issue normalizing CPU architecture in the configure script, * Fixed an issue normalizing CPU architecture in the configure script,
which disabled assembly optimizations on platforms that get detected which disabled assembly optimizations on platforms that get detected
as 'amd64', opposed to 'x86_64' as 'amd64', opposed to 'x86_64'
* Limited tls_config_clear_keys() to only clear private keys. * Limited tls_config_clear_keys() to only clear private keys.
This was inadvertently clearing the keypair, which includes the OCSP staple This was inadvertently clearing the keypair, which includes the OCSP
and pubkey hash - if an application called tls_configure() followed by staple and pubkey hash - if an application called tls_configure()
tls_config_clear_keys(), this would prevent OCSP staples from working. followed by tls_config_clear_keys(), this would prevent OCSP staples
from working.
2.7.2 - Stable release 2.7.2 - Stable release