Search results

TLS 1.3 early_data accepted with mismatched PSK/negotiated ciphersuite, causing CCM/CCM8 bad_record_mac

issue: bug reportThe issue was opened to report a bugThe issue was opened to report a bug

triaged: bugThe issue/pr is/fixes a bugThe issue/pr is/fixes a bug

Status: Open.

#31406 In openssl/openssl;

· idrassi opened on Jun 6, 2026

URI name-constraint bypass via embedded NUL byte (nc_uri, v3_ncons.c)

issue: bug reportThe issue was opened to report a bugThe issue was opened to report a bug

Status: Open.

#31392 In openssl/openssl;

· dyingc opened on Jun 4, 2026

ssl_free() (or its callers) doesn't reset ptr to NULL, which may lead to double-free

branch: 3.0Applies to openssl-3.0 branchApplies to openssl-3.0 branch

branch: 3.4Applies to openssl-3.4Applies to openssl-3.4

branch: 3.5Applies to openssl-3.5Applies to openssl-3.5

branch: 3.6Applies to openssl-3.6Applies to openssl-3.6

branch: 4.0Applies to openssl-4.0Applies to openssl-4.0

branch: masterApplies to master branchApplies to master branch

triaged: bugThe issue/pr is/fixes a bugThe issue/pr is/fixes a bug

Status: Open.

#31388 In openssl/openssl;

· esyr opened on Jun 4, 2026

Sweep tree for printf's of size_t cast to int, long, unsigned long etc. convert to %zu.

Status: Open.

#31387 In openssl/openssl;

· bob-beck opened on Jun 4, 2026

VMSify: VMSify-conf.pl incorrectly converts the TSA section certs path as a directory instead of file

issue: bug reportThe issue was opened to report a bugThe issue was opened to report a bug

triaged: bugThe issue/pr is/fixes a bugThe issue/pr is/fixes a bug

Status: Open.

#31384 In openssl/openssl;

· TeddyEngel opened on Jun 4, 2026

openssl-3.6.2: build failure with make --shuffle due to missing dependency

issue: bug reportThe issue was opened to report a bugThe issue was opened to report a bug

Status: Open.

#31379 In openssl/openssl;

· NHOrus opened on Jun 3, 2026

X509_check_host() matches IP address against dNSName SAN — RFC 9525 violation

issue: bug reportThe issue was opened to report a bugThe issue was opened to report a bug

triaged: bugThe issue/pr is/fixes a bugThe issue/pr is/fixes a bug

Status: Open.

#31377 In openssl/openssl;

· afldl opened on Jun 3, 2026

CVE-2026-31790 and CVE-2026-28386 are missing on https://openssl-library.org/news/fips-cve/

issue: documentationThe issue reports errors in (or missing) documentationThe issue reports errors in (or missing) documentation

Status: Open.

#31376 In openssl/openssl;

· john-chuah opened on Jun 3, 2026

RAND_bytes occasionally leaks

issue: bug reportThe issue was opened to report a bugThe issue was opened to report a bug

Status: Open.

#31375 In openssl/openssl;

· andysCaplin opened on Jun 3, 2026

Binaries link in Readme.md does not contain the information specified.

issue: documentationThe issue reports errors in (or missing) documentationThe issue reports errors in (or missing) documentation

Status: Open.

#31369 In openssl/openssl;

· tbentley-mdsol opened on Jun 2, 2026

torture_rw_low test fails on AIX: reader-preferring rwlock starves writers

Status: Open.

#31365 In openssl/openssl;

· ShawnShealy opened on Jun 2, 2026

Internal technical debt: Active internal calls to legacy function EVP_CIPHER_CTX_ctrl

help wanted

triaged: refactorThe issue/pr requests/implements refactoringThe issue/pr requests/implements refactoring

Status: Open.

#31358 In openssl/openssl;

· abwesend890 opened on Jun 2, 2026