Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

libressl/portable

              master @ 7a95b1e
            

Fixes

CVEs

CRITICAL

Peak severity

90.0%

Coverage

Highlights

Auth Bypass: 2 prior fixes. Scrutinize any change in this area.

crypto/compat: most-fixed (3 issues). Treat as high-risk during review.

5 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The posix_open compatibility function on Windows returned a large positive integer instead of a negative error value upon failure, inadvertently bypassing error-handling conditions in calling components like tls_config_load_file.

Auth Bypass: Standard issetugid checks on OS X were vulnerable to fork-based privilege escalation. The implementation was overridden to always safely fail closed by returning 1.

Cryptographic Weakness: System implementations of arc4random on NetBSD and FreeBSD failed to safely reseed across forks or fell back to weak entropy, requiring custom overrides to ensure cryptographic security.