582020 – dev-libs/libressl-2.2.6: 2.2.7 available fixing several vulnerabilities

Bug 582020 - dev-libs/libressl-2.2.6: 2.2.7 available fixing several vulnerabilities

Summary: dev-libs/libressl-2.2.6: 2.2.7 available fixing several vulnerabilities

Status:	RESOLVED OBSOLETE

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Gentoo Security

URL:	http://ftp.openbsd.org/pub/OpenBSD/Li...
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2016-05-03 21:20 UTC by Török Edwin
Modified:	2016-07-06 12:42 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Török Edwin 2016-05-03 21:20:15 UTC

LibreSSL 2.2.7 is available, please update the ebuild.


Reproducible: Always

Steps to Reproduce:
1. Run 'openssl version'
2. Check http://www.libressl.org/releases.html for latest release number
Actual Results:  
LibreSSL 2.2.6

Expected Results:  
LibreSSL 2.2.7

See http://marc.info/?l=openbsd-announce&m=146228598930416&w=2 and the release notes in this bug's URL.
LibreSSL 2.2.7/2.3.4 seems to be the equivalent for the vulnerability fixes in OpenSSL 1.0.2h (although I don't know why libressl.org still says March 22, the releases page says May 3).

Comment 1 Aaron Bauman (RETIRED) gentoo-dev

2016-07-06 12:42:30 UTC

Package is unstable and newer versions are already in the tree.