Issues

• Custom allocator requirements on public boundary considered harmful

  issue: bug report
  Bug

  openssl/openssl#33462 · Filter by author bob-beck opened on Oct 30, 2026

• s390x: X25519/X448 derive skips the all-zero shared secret check on the PCC path

  openssl/openssl#33460 · Filter by author 007bsd opened on Oct 30, 2026

• SSL_copy_session_id does not refresh ssl_pkey_num after replacing the CERT

  openssl/openssl#33459 · Filter by author 007bsd opened on Oct 30, 2026

• BIO_dgram_detect_peer_addr() returns an IPv6 address with 12 uninitialized bytes

  openssl/openssl#33457 · Filter by author AlexLaroche opened on Oct 30, 2026

• NULL pointer dereference in EC_GROUP_cmp() when comparing groups without generators

  help wantedtriaged: bug
  openssl/openssl#33450 · Filter by author alsroad opened on Oct 29, 2026

• X509_VERIFY_PARAM_inherit() mishandles dest == src: use-after-free (policies) and silent loss of hosts/IPs/emails

  triaged: bug
  openssl/openssl#33447 · Filter by author albertZhangTJ opened on Oct 29, 2026

• Outer ALPN without an ECH configuration is checked against the wrong list

  branch: masterbranch: 4.0branch: 4.1triaged: bug
  openssl/openssl#33428 · Filter by author idrassi opened on Oct 28, 2026
  1

• x_attrib: INTEGER value in subjectDirectoryAttributes printed as hex with a 'wrong integer type' error

  triaged: bug
  openssl/openssl#33425 · Filter by author waroad opened on Oct 28, 2026

• x509: i2r_OSSL_PERIOD prints garbage for an intNamedDays day in a Time Specification extension

  triaged: bug
  openssl/openssl#33424 · Filter by author waroad opened on Oct 27, 2026

• [4.1.0] Regresion or Undocumented Behavioral change in the X509_check_host

  help wantedtriaged: bug
  openssl/openssl#33420 · Filter by author tregubovav-dev opened on Oct 27, 2026
  5

• Check X509_up_ref() return value in ssl_ctx_find_handshake_cert()

  branch: mastertriaged: bug
  openssl/openssl#33418 · Filter by author esyr opened on Oct 27, 2026
  

• QUIC connections die when the clock steps back

  triaged: bugtriaged: feature
  openssl/openssl#33403 · Filter by author liudongmiao opened on Oct 26, 2026
  1

• CMS_verify fails to decode content without verification in 4.1.0

  triaged: bug
  openssl/openssl#33401 · Filter by author manison opened on Oct 26, 2026

• SIGSEGV in OSSL_PROVIDER_get0_provider_ctx while decoding a system CA public key

  triaged: bug
  openssl/openssl#33399 · Filter by author elyescesar opened on Oct 26, 2026

• QUIC: support PMTUD or a configurable TX datagram size

  help wantedtriaged: feature
  openssl/openssl#33398 · Filter by author liudongmiao opened on Oct 26, 2026
  2

• RFC 9973 - Using Certificates with an External Pre-Shared Key

  help wantedtriaged: feature
  openssl/openssl#33395 · Filter by author SmallLars opened on Oct 26, 2026

• Supported TLS groups returned not always correct

  help wantedtriaged: bug
  openssl/openssl#33387 · Filter by author baentsch opened on Oct 25, 2026

• WPACKET_quic_write_vlint() writes through NULL on a null WPACKET

  triaged: bug
  openssl/openssl#33383 · Filter by author urazoff opened on Oct 25, 2026

• QUIC: a lost MAX\_STREAM\_DATA is not sent again unless its packet also carried STREAM data for that stream, so downloads can stall for good

  branch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1triaged: bug
  openssl/openssl#33373 · Filter by author HenrickStreamSec opened on Oct 24, 2026
  3

  

• openssl s_client -ct dosn't work properly

  branch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1help wantedtriaged: bug
  openssl/openssl#33354 · Filter by author scampa65 opened on Oct 23, 2026
  2

• dtls_multithread_test: test_dtls_listener_clear_replace_race fails intermittently in CI

  help wantedtriaged: bugtriaged: test
  openssl/openssl#33348 · Filter by author quarckster opened on Oct 23, 2026
  4

  

• AES-GCM: consider a 256-bit VAES/VPCLMULQDQ path for AMD EPYC Milan without AVX-512

  branch: masterhelp wantedtriaged: featuretriaged: performance
  openssl/openssl#33345 · Filter by author vmaheshw opened on Oct 23, 2026
  2

• SSL_poll can block despite a nonempty DTLS listener accept queue

  branch: masterbranch: 4.1help wantedtriaged: bug
  openssl/openssl#33344 · Filter by author idrassi opened on Oct 23, 2026
  1

• quicapitest: test_quic_write_read and test_fin_only_blocking fail in the jitter job

  triaged: test
  openssl/openssl#33338 · Filter by author quarckster opened on Oct 22, 2026
  

• sslapitest: test_early_data_skip_hrr fails intermittently on Linux CI

  triaged: bugtriaged: test
  openssl/openssl#33337 · Filter by author quarckster opened on Oct 22, 2026