Before initial release

Prior to release of LibreSSL portable the following features were removed.

  1. MD2 and SEED algorithms 1

  2. SSLv2 1

  3. Compression 1

  4. Kerberos support1

  5. GOST1 (Alternative implementation added in later version)

  6. CHIL1

  7. Cryptodev engine

LibreSSL 2.0

LibreSSL 2.0.0

12 Jul 2014 First release of LibreSSL portable is available Ports changeset
Initial release of LibreSSL portable

LibreSSL 2.0.1

13 Jul 2014 LibreSSL 2.0.1 released Ports changeset
This release includes a number of portability fixes based on the initial feedback we have received from the community. This includes among other things two new configure options to set OPENSSLDIR and ENGINESDIR. We have removed a few hard-coded compiler options that were problematic on some systems as well as -Werror. We have also re-synced with the latest OpenBSD sources as a number of issues were fixed upstream. This release also includes pkg-config support.

LibreSSL 2.0.2

16 Jul 2014 LibreSSL portable 2.0.2 released Ports changeset
This release addresses the Linux forking and pid wrap issue reported recently in the press.

LibreSSL 2.0.3

22 Jul 2014 LibreSSL 2.0.3 released/Ports changeset
This release includes a number of portability fixes based on the the feedback we have received from the community. It also includes some improvements to the fork detection support.

LibreSSL 2.0.4

03 Aug 2014 LibreSSL 2.0.4 released/Ports changeset This version includes more portability changes, as well as other work. most noticeable may be the deletion of the of the SRP code (which has not been enabled in any LibreSSL release).

  1. Secure Remote Password (SRP) 2

LibreSSL 2.0.5

17 Aug 2014 LibreSSL 2.0.5 released/Ports changeset
This version forward-ports security fixes from OpenSSL 1.0.1i, including fixes for the following CVEs: CVE-2014-3506, CVE-2014-3507, CVE-2014-3509, CVE-2014-3510, CVE-2014-3511
CVE-2014-3508 (partially vulnerable) LibreSSL 2.0.4 was not found vulnerable to the following CVEs:<<BR>> CVE-2014-5139, CVE-2014-3512, CVE-2014-3505

LibreSSL 2.0.6

15 Oct 2015 See #LibreSSL_2.2.4

LibreSSL 2.1

For OpenBSD 5.7 (released 2015-05-01)

LibreSSL 2.1.0

13 Oct 2014 LibreSSL 2.1.0 released/LibreSSL 2.1.0
This release continues on with further work from after OpenBSD 5.6 code freeze. Our intention is to finalize LibreSSL 2.1 with OpenBSD 5.7

LibreSSL 2.1.1

17 Oct 2014 LibreSSL 2.1.1 released/LibreSSL 2.1.1
This release includes:

As well as continued ongoing fixes as we proactively change the codebase to reflect modern safe programming practices. The success of this is reflected in the fact that LibreSSL was not vulnerable to the two memory leak issues released on "OpenSSL Tuesday" - They were in fact initially fixed in LibreSSL.

LibreSSL 2.1.2

16 Dec 2014 LibreSSL 2.1.2 released/LibreSSL 2.1.2
This release greatly improves performance, interoperability and portability, while continuing to be easy to build and integrate into your software projects.
This release includes:

See these code commits for details:

LibreSSL 2.1.3

22 Jan 2015 LibreSSL 2.1.3 released/LibreSSL 2.1.3PR197005

  1. GOST R 34.10-94 signature authentication.2

This release enhances security, OS and software compatibility, including:

LibreSSL 2.1.4

04 Mar 2015 LibreSSL 2.1.4 released/LibreSSL 2.1.4PR198269PR198270
This release adds a number of new security features, makes building privilege-separated programs simpler, and improves the libtls API.

This release also includes a binary package for convenience integrating LibreSSL on Windows platforms, and the latest source tarball is signed with GPG and signify for easier integration into existing build systems.
Feedback is welcome. Bugs, patches, and features requests can be reported to tech@openbsd.org or at GitHub
As the OpenBSD 5.7 development effort comes to a close, so does the LibreSSL 2.1.x branch. The next release will begin the 2.2.x development branch.
User-visible features:

Code improvements:

Security updates:

LibreSSL 2.1.5

17 Mar 2015 LibreSSL 2.1.5 released/LibreSSL 2.1.5PR198651PR198681
This release is relatively small, focused on bug fixes before 2.2.x development begins along-side OpenBSD 5.8.
This or earlier LibreSSL releases may also address issues that are to be revealed by The OpenSSL Project Team on the 19th of March, 2015. The LibreSSL team is not typically apprised of OpenSSL-related security issues in advance. We will address any previously-unknown issues that are found to affect LibreSSL in future releases.

Issues addressed since 2.1.4:

LibreSSL 2.1.6

19 Mar 2015 LibreSSL 2.1.6 released/LibreSSL 2.1.6PR198718
This release primarily addresses a number of security issues in coordination with the OpenSSL project.

Fixes for the following issues are integrated into LibreSSL 2.1.6: CVE-2015-0286, CVE-2015-0287, CVE-2015-0289, CVE-2015-0209, CVE-2015-0288.
The patch for this issue is integrated in LibreSSL 2.1.6: CVE-2015-0207 - LibreSSL is not vulnerable, but the fix was safe to merge.
The following issues were addressed in earlier LibreSSL releases: CVE-2015-0204 (2.1.2), CVE-2015-0292 (2.0.0), CVE-2015-1787 (2.0.1)
The following issues did not apply to LibreSSL 2.1.6: CVE-2015-0291, CVE-2015-0290, CVE-2015-0208, CVE-2015-0293, CVE-2015-0285

This release also enables the building of libtls by default, as the API and ABI are declared stable within the LibreSSL 2.1.x series. Further changes to libtls will resume with LibreSSL 2.2.x.

1 OpenBSD 5.6 Release announcement
2 LibreSSL Portable ChangeLog

LibreSSL 2.1.7

11 Jun 2015

LibreSSL 2.1.8

15 Oct 2015 See LibreSSL 2.2.4

LibreSSL 2.1.9

08 Dec 2015 See LibreSSL 2.2.5

LibreSSL 2.2

For OpenBSD 5.8 (release 2015-11-01)

LibreSSL 2.2.0

11 Jun 2015
As part of OpenBSD 5.7
Bumps libcrypto shlibver from 32 to 33

User-visible features:

Code improvements:

Security updates:

OPENSSL_NO_EGD

LibreSSL 2.2.1

08 July 2015 LibreSSL 2.2.1 released Code Review Ports commit

Shared library versions

libcrypto

34

libssl

33

libtls

4

Build fixes, feature added, features removed

LibreSSL 2.2.2

06 Aug 2015 LibreSSL 2.2.2 released Code Review

Shared library versions

libcrypto

35

libssl

35

libtls

6

The LibreSSL project continues improvement of the codebase to reflect modern, safe programming practices. We welcome feedback and improvements from the broader community. Thanks to all of the contributors who helped make this release possible.

LibreSSL 2.2.3

29 Aug 2015 LibreSSL 2.2.3 Released

LibreSSL 2.2.4

15 Oct 2015 Oct 15 OpenBSD errata and LibreSSL releases

LibreSSL 2.2.5

08 Dec 2015 LibreSSL 2.2.5 and 2.1.9 released

See OpenBSD errata, Dec 3, 2015 for details.

LibreSSL 2.2.6

See 2.3.2

LibreSSL 2.2.7

See 2.3.4

LibreSSL 2.3

Based on the development branch for OpenBSD 5.9 (release 2016-05-01).

The API will be stable around March 2016. This version will be security/libressl-devel until the OpenBSD project declares the API stable.

This version marks the removal of SHA-0 and SSLv3.

LibreSSL 2.3.0

23 Sep 2015 LibreSSL 2.3.0 Released Code Review

Shared library versions

libcrypto

35

libssl

36

libtls

7

LibreSSL 2.3.1

03 Nov 2015 LibreSSL 2.3.1 released Code Review

2.3.1 - ASN.1 and time handling cleanups

LibreSSL 2.3.2

29 Jan 2016 LibreSSL 2.3.2, 2.2.6 and 2.2.10 released Code Review

LibreSSL 2.3.3

23 Mar 2016 LibreSSL 2.3.3 Released

This release marks the beginning of stable development of the 2.3.x branch. LibreSSL 2.3.3 is identical to the version that will be shipped with OpenBSD 5.9 in May 2016. At that time, LibreSSL 2.1.x support will also end.

LibreSSL 2.3.3 has the following changes:

LibreSSL 2.3.3

22 March 2016 http://marc.info/?l=openbsd-announce&m=146228598930416

We have released LibreSSL 2.3.3, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon.

This release marks the beginning of stable development of the 2.3.x branch. LibreSSL 2.3.3 is identical to the version that will be shipped with OpenBSD 5.9 in May 2016. At that time, LibreSSL 2.1.x support will also end.

LibreSSL 2.3.3 has the following changes:

LibreSSL 2.3.4

03 May 2016 http://marc.info/?l=openbsd-announce&m=146457845605121

We have released LibreSSL 2.3.4, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon.

This release is based on the stable OpenBSD 5.9 branch.

The LibreSSL project continues improvement of the codebase to reflect modern, safe programming practices. We welcome feedback and improvements from the broader community. Thanks to all of the contributors who helped make this release possible.

LibreSSL 2.3.5

31 May 2016 http://marc.info/?l=openbsd-announce&m=146475052720713

We have released LibreSSL 2.3.5, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon.

This release is based on the stable OpenBSD 5.9 branch.

The LibreSSL project continues improvement of the codebase to reflect modern, safe programming practices. We welcome feedback and improvements from the broader community. Thanks to all of the contributors who helped make this release possible.

LibreSSL 2.3.6

09 Jun 2016 http://marc.info/?l=openbsd-announce&m=146522317201596

LibreSSL 2.4

LibreSSL 2.4.0

31 May 2016 http://marc.info/?l=openbsd-announce&m=146475052720713

We have released LibreSSL 2.4.0, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon.

This release is the first snapshot based on the development OpenBSD 6.0 branch. As such, it is likely to change more compared to the 2.3.x and 2.2.x branches. See http://www.libressl.org/releases.html for more details.

LibreSSL 2.4.0 contains the following changes:

The LibreSSL project continues improvement of the codebase to reflect modern, safe programming practices. We welcome feedback and improvements from the broader community. Thanks to all of the contributors who helped make this release possible.

LibreSSL 2.4.1

09 Jun 2016 http://marc.info/?l=openbsd-announce&m=146522317201596

We have released LibreSSL 2.4.1, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon.

This release is based on the development OpenBSD 6.0 branch.

The LibreSSL project continues improvement of the codebase to reflect modern, safe programming practices. We welcome feedback and improvements from the broader community. Thanks to all of the contributors who helped make this release possible.

LibreSSL/History (last edited 2018-03-14 04:38:17 by MarkLinimon)