Repository navigation
v4.2.2
·
378 commits
to master
since this release
Immutable
release. Only release title and notes can be modified.
Portable changes
- Added support for building on macOS Golden Gate, 27.0
- Fixed incorrect code generation by the MSVC ARM64 optimizer in
constant-time bignum code. - Windows socketpair() emulation now sets close-on-exec on the right
handle.
Security and reliability fixes
- Remove RelativeDistinguishedName support for CRL distribution points
- Fix off-by-one in the X.509 verifier depth checking
- Ensure verify callbacks always returning 1 can see a hostname
mismatch - Correct botched size check in dtls1_preprocess_fragment()
- Limit size of buffered DTLS handshake messages
- Avoid potential overread on interrupted retransmission in DTLS
- Fix OCSP responder authorization bypass in libtls and ocspcheck(8)
Full changelog: https://github.com/libressl/portable/blob/OPENBSD_7_8/ChangeLog