[openssl-dev] Bugs fixed in one place but not another

Brian Smith brian at briansmith.org
Fri Jun 24 00:16:10 UTC 2016


Salz, Rich <rsalz at akamai.com> wrote:
>> Sometimes I report bugs and/or fix bugs which get fixed in [1] and/or [2].
>> Please make sure you consider the impact of those changes on your own
>> projects.
>
> Not sure what you're asking for.

In general, I noticed that OpenSSL and LibreSSL don't seem to pay
attention to the bugs that are fixed in BoringSSL and *ring*. See, for
example:
* https://boringssl.googlesource.com/boringssl/+/95b97693403d5c8f09b2870ad9a6d7d198246da4%5E!/
* https://boringssl.googlesource.com/boringssl/+/75b833cc819a9d189adb0fdd56327bee600ff9e9
* https://boringssl.googlesource.com/boringssl/+/44bedc348d9491e63c7ed1438db100a4b8a830be

I think it would be a good idea for OpenSSL and LibreSSL to fix the bugs too.

Cheers,
Brian
-- 
https://briansmith.org/


More information about the openssl-dev mailing list