summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Prepare for release of 3.4.6openssl-3.4.6openssl-machine2026-06-093-4/+4
* make updateopenssl-machine2026-06-093-29/+29
* Copyright year updatesopenssl-machine2026-06-09132-132/+132
* CHANGES.md, NEWS.md: update for 3.4.6Eugene Syromiatnikov2026-06-092-2/+332
* Fix potential NULL dereference in OSSL_CRMF_ENCRYPTEDVALUE_get1_encCert()Igor Ustinov2026-06-081-4/+6
* Test for CVE-2026-45447 (UAF in PKCS7_verify)Igor Ustinov2026-06-082-1/+63
* Fix possible use-after-free in OpenSSL PKCS7_verify()Igor Ustinov2026-06-081-3/+6
* Fix handling of empty-ciphertext messages in AES-GCM-SIV and AES-SIVDmitry Belyavskiy2026-06-083-11/+159
* [providers/implementations/ciphers] make aes-gcm-siv work with zero-length me...Billy Brumley2026-06-083-9/+38
* Apply the buffered IV on the AES-OCB EVP_Cipher() pathViktor Dukhovni2026-06-082-0/+279
* Match the local q DHX parameter against the peer's qNorbert Pocs2026-06-081-1/+4
* Use the correct issuer when validating rootCAKeyUpdateBob Beck2026-06-081-2/+4
* Enforce implicit rejection for CMS/PKCS#7 decryptionDmitry Belyavskiy2026-06-084-17/+11
* Test for CVE-2026-42766Igor Ustinov2026-06-083-1/+156
* Fix potential NULL dereference processing CMS PasswordRecipientInfoIgor Ustinov2026-06-081-0/+5
* QUIC stack must limit the number of PATH_CHALLENGE frames processed in RXAlexandr Nedvedicky2026-06-089-24/+145
* Add tests for CVE-2026-34182Neil Horman2026-06-081-4/+191
* Reject potentially forged encrypted CMS AuthEnvelopedData messagesNeil Horman2026-06-082-6/+8
* CMS: Produce error when AEAD algorithms are used in enveloped dataJakub Zelenka2026-06-0810-15/+41
* pkcs12: verify that the pbmac1 key length is safeAlicja Kario2026-06-084-8/+13
* Avoid length truncation in ASN1_STRING_setViktor Dukhovni2026-06-081-7/+17
* cms: kek_unwrap_key: test for fix out-of-bounds read in check-byte validationNikola Pajkovsky2026-06-083-3/+48
* cms: kek_unwrap_key: Fix out-of-bounds read in check-byte validationNikola Pajkovsky2026-06-081-4/+4
* Reject oversized inputs in ASN1_mbstring_ncopy()Viktor Dukhovni2026-06-081-3/+28
* apps/s_client.c: read one byte less to avoid triggerring overflow protectionEugene Syromiatnikov2026-06-081-2/+2
* quic: cleanse derived IV on setup failureMinh Vu2026-06-081-1/+1
* add fingerprint of the new PGP keyDmitry Misharov2026-06-081-0/+3
* doc: Clarify SSL_CERT_DIR uses semicolon separator on Windowskovan2026-06-032-2/+4
* statem: fix missing fatal if valid_flags mfail in process cert reqJakub Zelenka2026-06-031-2/+4
* crypto/hpke/hpke_util: Fixes redundant mdname is valid check.Abel Tom2026-06-031-3/+2
* Fix broken hex data by reformattingNorbert Pocs2026-06-0340-34169/+3619
* rsa_sig: reject short buffers in raw verify_recoverrootvector22026-06-021-1/+9
* doc: Add a missing comma in -traditional option explanation.Cristian Yxen2026-06-021-1/+1
* test: fix unreachable code in test_kdf_pbkdf2_large_output in evp_kdf_test.cAnton Moryakov2026-06-021-1/+1
* poly1305: prevent crash on final without a key007bsd2026-06-012-0/+32
* ktls: Fix invalid memory access on retry with moving write bufferIlya Maximets2026-06-013-12/+171
* CHANGES.md: reissue session ticket on ciphersuite mismatchDaniel Kubec2026-06-011-1/+4
* crypto/evp: fix double free of tmp_keymgmt in sig/kem/asym initrootvector22026-05-313-0/+6
* quic: fix handling of the first rxe mfail in qrx_process_pktJakub Zelenka2026-05-291-1/+7
* test/stack_test.c: Change structure SS typedef into TST_SSWolfgang Beck2026-05-291-31/+31
* Refactor BN_mod() and BN_nnmod() arguments to match documentationRichard Levitte2026-05-292-8/+8
* quic: delay el keyslot teardown after creation in setupJakub Zelenka2026-05-291-38/+62
* Run CIFuzz workflow on scheduleDmitry Misharov2026-05-281-1/+4
* test: skip verify_recover regression for FIPSMayank Jangid2026-05-271-59/+11
* test: use 2048-bit RSA key for FIPS verify_recover regressionMayank Jangid2026-05-271-1/+1
* test: add explicit FIPS verify_recover regressionMayank Jangid2026-05-271-16/+59
* test: skip verify_recover regression with old FIPS providersMayank Jangid2026-05-271-0/+8
* rsa_sig: reject short buffers in verify_recoverMayank Jangid2026-05-272-0/+88
* Fix memory leak in load_key_certs_crls() when add/push failsherbenderbler2026-05-271-4/+11
* doc: match provider-asym_cipher(7) prototypes with core_dispatch.holszomal2026-05-271-2/+2
generated by cgit (git 2.51.2) at 2026-10-25 14:19:39 +0100