index
:
openssl
OpenSSL-engine-0_9_6-stable
OpenSSL-fips-0_9_7-stable
OpenSSL-fips-0_9_8-stable
OpenSSL-fips-1_2-stable
OpenSSL-fips-2_0-dev
OpenSSL-fips-2_0-stable
OpenSSL-fips2-0_9_7-stable
OpenSSL_0_9_6-stable
OpenSSL_0_9_7-stable
OpenSSL_0_9_8-stable
OpenSSL_0_9_8fg-stable
OpenSSL_1_0_0-stable
OpenSSL_1_0_1-stable
OpenSSL_1_0_2-stable
OpenSSL_1_1_0-stable
OpenSSL_1_1_1-stable
SSLeay
dependabot/github_actions/actions/setup-python-7
dependabot/github_actions/coverallsapp/github-action-2.3.8
dependabot/github_actions/cross-platform-actions/action-1.6.0
dependabot/github_actions/docker/setup-docker-action-5.5.0
dependabot/github_actions/dtolnay/rust-toolchain-e2a55d2ffb04f378e9626c28d38b36d230d1e12f
feature/acert-cli
feature/dtls-1.3
feature/ech
feature/engineremoval
feature/evp_skey
feature/hqc
feature/hss
feature/merkle-tree-certificates
feature/method-store-freeze
feature/ossl_fn
feature/quic-0-rtt
feature/removesslv3
master
openssl-3.0
openssl-3.1
openssl-3.2
openssl-3.3
openssl-3.4
openssl-3.5
openssl-3.6
openssl-4.0
openssl-4.1
tls1.3-draft-18
tls1.3-draft-19
TLS/SSL and crypto library.
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
Commit message (
Expand
)
Author
Age
Files
Lines
*
Prepare for release of 3.6.3
openssl-3.6.3
openssl-machine
2026-06-09
3
-4
/
+4
*
make update
openssl-machine
2026-06-09
3
-128
/
+110
*
Copyright year updates
openssl-machine
2026-06-09
151
-151
/
+151
*
CHANGES.md, NEWS.md: update for 3.6.3
Eugene Syromiatnikov
2026-06-09
2
-2
/
+425
*
Fix potential NULL dereference in OSSL_CRMF_ENCRYPTEDVALUE_decrypt()
Igor Ustinov
2026-06-08
1
-4
/
+6
*
Test for CVE-2026-45447 (UAF in PKCS7_verify)
Igor Ustinov
2026-06-08
2
-1
/
+63
*
Fix possible use-after-free in OpenSSL PKCS7_verify()
Igor Ustinov
2026-06-08
1
-3
/
+6
*
Fix handling of empty-ciphertext messages in AES-GCM-SIV and AES-SIV
Dmitry Belyavskiy
2026-06-08
3
-11
/
+159
*
Apply the buffered IV on the AES-OCB EVP_Cipher() path
Viktor Dukhovni
2026-06-08
2
-0
/
+279
*
Match the local q DHX parameter against the peer's q
Norbert Pocs
2026-06-08
1
-1
/
+4
*
Use the correct issuer when validating rootCAKeyUpdate
Bob Beck
2026-06-08
1
-2
/
+4
*
Enforce implicit rejection for CMS/PKCS#7 decryption
Dmitry Belyavskiy
2026-06-08
4
-17
/
+11
*
Test for CVE-2026-42766
Igor Ustinov
2026-06-08
3
-1
/
+157
*
Fix potential NULL dereference processing CMS PasswordRecipientInfo
Igor Ustinov
2026-06-08
1
-0
/
+5
*
Fix NULL Dereference in Certificate Verification with OCSP Checking
Daniel Kubec
2026-06-08
1
-0
/
+10
*
Fix NULL dereference in QUIC address validation
Alexandr Nedvedicky
2026-06-08
1
-2
/
+4
*
Fix Double-free When Checking OCSP Stapled Response
Daniel Kubec
2026-06-08
1
-0
/
+1
*
Add test for path challenge flood mitigation
Alexandr Nedvedicky
2026-06-08
5
-1
/
+212
*
QUIC stack must limit the number of PATH_CHALLENGE frames processed in RX
Alexandr Nedvedicky
2026-06-08
9
-24
/
+145
*
Add tests for CVE-2026-34182
Neil Horman
2026-06-08
1
-0
/
+188
*
Reject potentially forged encrypted CMS AuthEnvelopedData messages
Neil Horman
2026-06-08
1
-4
/
+6
*
pkcs12: verify that the pbmac1 key length is safe
Alicja Kario
2026-06-08
4
-8
/
+13
*
Avoid length truncation in ASN1_STRING_set
Viktor Dukhovni
2026-06-08
1
-7
/
+17
*
cms: kek_unwrap_key: test for fix out-of-bounds read in check-byte validation
Nikola Pajkovsky
2026-06-08
3
-3
/
+48
*
cms: kek_unwrap_key: Fix out-of-bounds read in check-byte validation
Nikola Pajkovsky
2026-06-08
1
-1
/
+1
*
Reject oversized inputs in ASN1_mbstring_ncopy()
Viktor Dukhovni
2026-06-08
1
-3
/
+28
*
apps/s_client.c: read one byte less to avoid triggerring overflow protection
Eugene Syromiatnikov
2026-06-08
1
-2
/
+2
*
quic: cleanse derived IV on setup failure
Minh Vu
2026-06-08
1
-1
/
+1
*
add fingerprint of the new PGP key
Dmitry Misharov
2026-06-08
1
-0
/
+3
*
Check custom extensions are handled correct with 3rd party QUIC
Matt Caswell
2026-06-08
1
-0
/
+69
*
There is no need to call custom_ext_copy_old_cb after reallocing dst->meths
Matt Caswell
2026-06-08
1
-3
/
+0
*
Reapply "Preserve connection custom extensions in SSL_set_SSL_CTX()"
Matt Caswell
2026-06-08
4
-3
/
+84
*
doc: Clarify SSL_CERT_DIR uses semicolon separator on Windows
kovan
2026-06-03
2
-2
/
+4
*
statem: fix missing fatal if valid_flags mfail in process cert req
Jakub Zelenka
2026-06-03
1
-2
/
+4
*
crypto/hpke/hpke_util: Fixes redundant mdname is valid check.
Abel Tom
2026-06-03
1
-3
/
+2
*
Fix broken hex data by reformatting
Norbert Pocs
2026-06-03
42
-34515
/
+3651
*
rsa_sig: reject short buffers in raw verify_recover
rootvector2
2026-06-02
1
-0
/
+8
*
doc: Add a missing comma in -traditional option explanation.
Cristian Yxen
2026-06-02
1
-1
/
+1
*
test: fix unreachable code in test_kdf_pbkdf2_large_output in evp_kdf_test.c
Anton Moryakov
2026-06-02
1
-1
/
+1
*
poly1305: prevent crash on final without a key
007bsd
2026-06-01
2
-0
/
+32
*
quic: fix keyslot cctx leak by not checking EL state in teardown
Jakub Zelenka
2026-06-01
1
-3
/
+0
*
ktls: Fix invalid memory access on retry with moving write buffer
Ilya Maximets
2026-06-01
3
-12
/
+171
*
CHANGES.md: reissue session ticket on ciphersuite mismatch
Daniel Kubec
2026-06-01
1
-1
/
+4
*
crypto/evp: fix double free of tmp_keymgmt in sig/kem/asym init
rootvector2
2026-05-31
3
-0
/
+6
*
quic: fix handling of the first rxe mfail in qrx_process_pkt
Jakub Zelenka
2026-05-29
1
-1
/
+7
*
test/stack_test.c: Change structure SS typedef into TST_SS
Wolfgang Beck
2026-05-29
1
-31
/
+31
*
slh_dsa: Remove redundant cleanup to prevent double free
yangxuqing
2026-05-29
1
-1
/
+0
*
Refactor BN_mod() and BN_nnmod() arguments to match documentation
Richard Levitte
2026-05-29
2
-8
/
+8
*
quic: delay el keyslot teardown after creation in setup
Jakub Zelenka
2026-05-29
1
-38
/
+62
*
crypto/aes/asm/asm-sha{1,256}-armv8.pl: add missing function alignment
Nikola Pajkovsky
2026-05-28
2
-0
/
+2
[next]