| Written by Mario
|
|
|
If you need to contact us write an email to [email protected] and we will answer
as soons as possible.
|
| Apache 2.4.46 with updated OpenSSL 1.1.1i or LibreSSL 3.2.3 available |
| Written by TrustyHausBot |
| Thu, 10 Dec 2020 06:41:21 GMT |
Without much fanfare, both the OpenSSL and LibreSSL releases have been updated.
Changes:
Changes between 1.1.1h and 1.1.1i [8 Dec 2020]
*) Fixed NULL pointer deref in the GENERAL_NAME_cmp function
This function could crash if both GENERAL_NAMEs contain an EDIPARTYNAME.
If an attacker can control both items being compared then this could lead
to a possible denial of service attack. OpenSSL itself uses the
GENERAL_NAME_cmp function for two purposes:
1) Comparing CR...
Read more
|
| Apache 2.4.46 with updated OpenSSL 1.1.1h or LibreSSL 3.1.4 availabe |
| Written by TrustyHausBot |
| Thu, 24 Sep 2020 19:12:17 GMT |
Without much fanfare, both the OpenSSL and LibreSSL releases have been updated.
I've had the LibreSSL releases a few weeks and lagged on getting them out with all the fires around this area.
Now is as good a time as any to put them up.
Changes:
Changes between OpenSSL 1.1.1g and 1.1.1h [22 Sep 2020]
*) Certificates with explicit curve parameters are now disallowed in
verification chains if the X509_V_FLAG_X509_STRICT flag is used.
[Tomas Mraz]
*) The 'MinProtocol' and 'MaxProt...
Read more
|
| Announcing the release of Apache 2.4.46 |
| Written by TrustyHausBot |
| Wed, 05 Aug 2020 15:35:02 GMT |
This release is a bug fix & stability release.
This release includes:
APR Version: 1.7.0
APU Version: 1.6.1
Brotli Version: 1.0.7
Jansson Version: 2.13.1
Libcurl Version: 7.70.0
LibXML2 Version: 2.9.10
LUA Version: 5.2.4
NGHTTP2 Version: 1.41.0
OpenSSL Version: 1.1.1g or LibreSSL 3.1.3
PCRE Version: 8.44
SQLite3 Version: 3.32.3
ZLib Version: 1.2.10
LibreSSL releases are now VS16.
VC14 & 15 modules can be used in these b...
Read more
|
| Apache 2.4.43 with updated LibreSSL 3.1.2 availabe |
| Written by TrustyHausBot |
| Sun, 24 May 2020 20:58:58 GMT |
Announcing the release of Apache 2.4.43 with LibreSSL 3.0.2
I know I stated the next LibreSSL build was going to be VS16, but I'm having major problems getting it to build in VS16 and I do not want to wait any longer to get this out. I already skipped 3.1.0 & 3.1.1 because they were problematic even with VC14. LibreSSL is trying to get TLS/1.3 available and has led to problems on both. The TLS/1.3 code is in this version but has not been activated yet.
As is usual the numbers have change in t...
Read more
|
|
