Skip to content

libressl: 2.5.3 -> 2.5.4 #25523

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
May 5, 2017
Merged

libressl: 2.5.3 -> 2.5.4 #25523

merged 1 commit into from
May 5, 2017
+2 −2

Conversation

joachifm
Copy link
Contributor

@joachifm joachifm commented May 5, 2017

Contains a fix for CVE-2017-8301: TLS verification vulnerability in
LibreSSL 2.5.1 - 2.5.3 1 2

@joachifm
libressl: 2.5.3 -> 2.5.4

Verified

This commit was signed with the committer’s verified signature. The key has expired.
joachifm Joachim F.
GPG key ID: 7544761007FE4E08
Expired
Verified
Learn about vigilant mode
e2bc4e4 
Contains a fix for CVE-2017-8301: TLS verification vulnerability in
LibreSSL 2.5.1 - 2.5.3 [1][2]

[1]: http://seclists.org/oss-sec/2017/q2/145
[2]: libressl/portable#307
@joachifm joachifm added the 8.has: package (update) This PR updates a package to a newer version label May 5, 2017
@mention-bot
Copy link

@joachifm, thanks for your PR! By analyzing the history of the files in this pull request, we identified @fpletz to be a potential reviewer.

@Mic92 Mic92 added the 1.severity: security Issues which raise a security issue, or PRs that fix one label May 5, 2017
@joachifm joachifm merged commit ea92931 into NixOS:master May 5, 2017
@joachifm
Copy link
Contributor Author

joachifm commented May 5, 2017

Merging, don't think there's anything to worry about. Darwin was already failing.

@joachifm joachifm deleted the libressl-2_5_4 branch May 6, 2017 12:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
1.severity: security Issues which raise a security issue, or PRs that fix one 8.has: package (update) This PR updates a package to a newer version
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
3 participants
@joachifm @mention-bot @Mic92