|
|
Subscribe / Log in / New account

First Release of LibreSSL Portable Available

First Release of LibreSSL Portable Available

Posted Jul 13, 2014 20:52 UTC (Sun) by moltonel (subscriber, #45207)
In reply to: First Release of LibreSSL Portable Available by jengelh
Parent article: First Release of LibreSSL Portable Available

RAND_egd is the typical example of an insecure feature that should not be used, and rightfully removed from LibreSSL. The fun thing is, w3m probably doesn't make use of the feature, it just links to it. So it's arguably a w3m bug (potentially using a feature that'll reduce security), that gets exposed by trying to link against LibreSSL instead of OpenSSL.


to post comments


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds