Repository navigation
·
302 commits
to master
since this release
Immutable
release. Only release title and notes can be modified.
Portable changes
- Added support for building on macOS Golden Gate, 27.0
- Fixed incorrect code generation by the MSVC ARM64 optimizer in
constant-time bignum code. - Allow overriding TLS_DEFAULT_CA_FILE in CMake builds.
- Windows socketpair() emulation now sets close-on-exec on the right
handle.
Security and reliability fixes
- Remove RelativeDistinguishedName support for CRL distribution points
- Ensure verify callbacks always returning 1 can see a hostname
mismatch - Correct botched size check in dtls1_preprocess_fragment()
- Limit size of buffered DTLS handshake messages
- Avoid potential overread on interrupted retransmission in DTLS
- Fix OCSP responder authorization bypass in libtls and ocspcheck(8)
Full changelog: https://github.com/libressl/portable/blob/OPENBSD_7_9/ChangeLog