oss-sec mailing list archives

Re: Qualys Security Advisory - LibreSSL (CVE-2015-5333 and CVE-2015-5334)

From: Andreas Stieger <astieger () suse com>
Date: Fri, 16 Oct 2015 15:42:48 +0200

Hello,

On 10/16/2015 12:06 PM, Agostino Sarubbo wrote:

On Thursday 15 October 2015 17:54:16 Qualys Security Advisory wrote:

We would like to thank the LibreSSL team for their great work and
their incredibly quick response,


Are these issues fixed upstream?
If yes, is there a release which fixes the issues?
If there isn't a release, do we have the link of the commit/diff?


One could check http://www.libressl.org/releases.html

LibreSSL 2.2.4, 2.1.8, 2.0.6 (Oct 15, 2015)
OpenBSD Errata

http://ftp.openbsd.org/pub/OpenBSD/patches/5.8/common/007_obj2txt.patch.sig

Andreas

-- 
Andreas Stieger <astieger () suse com>
Project Manager Security
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton,
HRB 21284 (AG Nürnberg)

Attachment: signature.asc
Description: OpenPGP digital signature

Current thread:

Qualys Security Advisory - LibreSSL (CVE-2015-5333 and CVE-2015-5334) Qualys Security Advisory (Oct 15)
- Re: Qualys Security Advisory - LibreSSL (CVE-2015-5333 and CVE-2015-5334) Agostino Sarubbo (Oct 16)
  - Re: Qualys Security Advisory - LibreSSL (CVE-2015-5333 and CVE-2015-5334) Andreas Stieger (Oct 16)
  - Re: Qualys Security Advisory - LibreSSL (CVE-2015-5333 and CVE-2015-5334) Stuart Henderson (Oct 16)