Only thing I can find: http://undeadly.org/cgi?action=article&sid=20160301141941

Q: was CacheBleed fixed in LibreSSL?


CacheBleed fixed in LibreSSL 2.5.0

  • Added constant-time updates to address CVE-2016-0702

And that CVE-ID is CacheBleed.

Source: OpenBSD "Announce" Mailing list post from 2016-09-28 (Archived here.)


On the fly, I've been able to find this quote:

The developers of LibreSSL are working on a fix but do not have a timeline yet. We have disclosed these results to the developers of the NSS library in early January. We do not know when a fix will be deployed.

However, it's good to ask the LibreSSL team again(s that articleis old), and also notify to this site/article author, to update their article. source (see Q4)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.