summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Prepare for release of 4.0.1openssl-4.0.1openssl-machine2026-06-093-4/+4
* make updateopenssl-machine2026-06-092-34/+34
* Copyright year updatesopenssl-machine2026-06-09120-120/+120
* CHANGES.md, NEWS.md: update for 4.0.1Eugene Syromiatnikov2026-06-092-2/+470
* Fix potential NULL dereference in OSSL_CRMF_ENCRYPTEDVALUE_decrypt()Igor Ustinov2026-06-081-4/+6
* Test for CVE-2026-45447 (UAF in PKCS7_verify)Igor Ustinov2026-06-082-1/+63
* Fix possible use-after-free in OpenSSL PKCS7_verify()Igor Ustinov2026-06-081-3/+6
* Fix handling of empty-ciphertext messages in AES-GCM-SIV and AES-SIVDmitry Belyavskiy2026-06-083-11/+159
* Apply the buffered IV on the AES-OCB EVP_Cipher() pathViktor Dukhovni2026-06-082-0/+279
* Add further unit tests for e-mail validationBob Beck2026-06-081-0/+39
* Fix length miscalculation in validate_emailBob Beck2026-06-081-3/+3
* Match the local q DHX parameter against the peer's qNorbert Pocs2026-06-081-1/+4
* Use the correct issuer when validating rootCAKeyUpdateBob Beck2026-06-081-2/+4
* Enforce implicit rejection for CMS/PKCS#7 decryptionDmitry Belyavskiy2026-06-084-17/+11
* Test for CVE-2026-42766Igor Ustinov2026-06-083-1/+157
* Fix potential NULL dereference processing CMS PasswordRecipientInfoIgor Ustinov2026-06-081-0/+5
* Fix NULL Dereference in Certificate Verification with OCSP CheckingDaniel Kubec2026-06-081-0/+10
* Fix NULL dereference in QUIC address validationAlexandr Nedvedicky2026-06-081-2/+4
* Fix Double-free When Checking OCSP Stapled ResponseDaniel Kubec2026-06-081-0/+1
* Add test for path challenge flood mitigationAlexandr Nedvedicky2026-06-085-1/+212
* QUIC stack must limit the number of PATH_CHALLENGE frames processed in RXAlexandr Nedvedicky2026-06-089-24/+145
* Add tests for CVE-2026-34182Neil Horman2026-06-081-0/+188
* Reject potentially forged encrypted CMS AuthEnvelopedData messagesNeil Horman2026-06-081-4/+6
* pkcs12: verify that the pbmac1 key length is safeAlicja Kario2026-06-084-8/+12
* Avoid length truncation in ASN1_STRING_setViktor Dukhovni2026-06-081-7/+17
* cms: kek_unwrap_key: test for fix out-of-bounds read in check-byte validationNikola Pajkovsky2026-06-083-3/+48
* cms: kek_unwrap_key: Fix out-of-bounds read in check-byte validationNikola Pajkovsky2026-06-081-1/+1
* Reject oversized inputs in ASN1_mbstring_ncopy()Viktor Dukhovni2026-06-081-3/+28
* pkey(1) missing setup for interactive pass promptViktor Dukhovni2026-06-081-4/+8
* apps/s_client.c: read one byte less to avoid triggerring overflow protectionEugene Syromiatnikov2026-06-081-2/+2
* quic: cleanse derived IV on setup failureMinh Vu2026-06-081-1/+1
* add fingerprint of the new PGP keyDmitry Misharov2026-06-081-0/+3
* Check custom extensions are handled correct with 3rd party QUICMatt Caswell2026-06-081-0/+69
* There is no need to call custom_ext_copy_old_cb after reallocing dst->methsMatt Caswell2026-06-081-3/+0
* Reapply "Preserve connection custom extensions in SSL_set_SSL_CTX()"Matt Caswell2026-06-084-3/+84
* aes_wrap: prevent crash on update without a key007bsd2026-06-032-0/+34
* doc: Clarify SSL_CERT_DIR uses semicolon separator on Windowskovan2026-06-032-2/+4
* statem: fix missing fatal if valid_flags mfail in process cert reqJakub Zelenka2026-06-031-2/+4
* crypto/hpke/hpke_util: Fixes redundant mdname is valid check.Abel Tom2026-06-031-3/+2
* Fix broken hex data by reformattingNorbert Pocs2026-06-0343-34824/+3690
* rsa_sig: reject short buffers in raw verify_recoverrootvector22026-06-021-0/+8
* doc: Add a missing comma in -traditional option explanation.Cristian Yxen2026-06-021-1/+1
* test: fix unreachable code in test_kdf_pbkdf2_large_output in evp_kdf_test.cAnton Moryakov2026-06-021-1/+1
* poly1305: prevent crash on final without a key007bsd2026-06-012-0/+32
* quic: fix keyslot cctx leak by not checking EL state in teardownJakub Zelenka2026-06-011-3/+0
* ktls: Fix invalid memory access on retry with moving write bufferIlya Maximets2026-06-013-12/+171
* CHANGES.md: reissue session ticket on ciphersuite mismatchDaniel Kubec2026-06-011-1/+4
* crypto/evp: fix double free of tmp_keymgmt in sig/kem/asym initrootvector22026-05-313-0/+6
* quic: fix handling of the first rxe mfail in qrx_process_pktJakub Zelenka2026-05-291-1/+7
* test/stack_test.c: Change structure SS typedef into TST_SSWolfgang Beck2026-05-291-31/+31
generated by cgit (git 2.51.2) at 2026-10-25 09:34:39 +0100