Issues

• Supported TLS groups returned not always correct

  issue: bug report
  openssl/openssl#33387 · Filter by author baentsch opened on Oct 25, 2026

• Configuration failure with apps feature disabled

  issue: bug report
  openssl/openssl#33386 · Filter by author ajtribick opened on Oct 25, 2026

• PACKET_get_quic_length_prefixed() does not set the sub-packet's msgstart

  issue: bug report
  openssl/openssl#33385 · Filter by author urazoff opened on Oct 25, 2026

• WPACKET_quic_write_vlint() writes through NULL on a null WPACKET

  issue: bug report
  openssl/openssl#33383 · Filter by author urazoff opened on Oct 25, 2026

• QUIC: a lost MAX\_STREAM\_DATA is not sent again unless its packet also carried STREAM data for that stream, so downloads can stall for good

  branch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1triaged: bug
  openssl/openssl#33373 · Filter by author HenrickStreamSec opened on Oct 24, 2026
  1

• test/dtlsv1listentest.c -- collision of symbol GOOD

  branch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1good first issuehelp wantedtriaged: feature
  openssl/openssl#33367 · Filter by author lzsiga opened on Oct 23, 2026
  1

• openssl s_client -ct dosn't work properly

  branch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1help wantedtriaged: bug
  openssl/openssl#33354 · Filter by author scampa65 opened on Oct 23, 2026
  2

• dtls_multithread_test: test_dtls_listener_clear_replace_race fails intermittently in CI

  triaged: test
  openssl/openssl#33348 · Filter by author quarckster opened on Oct 23, 2026
  4

• AES-GCM: consider a 256-bit VAES/VPCLMULQDQ path for AMD EPYC Milan without AVX-512

  branch: masterhelp wantedtriaged: featuretriaged: performance
  openssl/openssl#33345 · Filter by author vmaheshw opened on Oct 23, 2026
  2

• SSL_poll can block despite a nonempty DTLS listener accept queue

  branch: masterbranch: 4.1help wantedtriaged: bug
  openssl/openssl#33344 · Filter by author idrassi opened on Oct 23, 2026
  1

• quicapitest: test_quic_write_read and test_fin_only_blocking fail in the jitter job

  triaged: test
  openssl/openssl#33338 · Filter by author quarckster opened on Oct 22, 2026

• sslapitest: test_early_data_skip_hrr fails intermittently on Linux CI

  triaged: test
  openssl/openssl#33337 · Filter by author quarckster opened on Oct 22, 2026

• pkcs7: eight pk7_lib.c functions dereference absent OPTIONAL content, crashing openssl smime -resign

  branch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1triaged: bug
  openssl/openssl#33334 · Filter by author 007bsd opened on Oct 22, 2026

• cmp: caPubs install in ossl_cmp_msg_check_update() is not gated on verified protection

  branch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1help wantedtriaged: bug
  openssl/openssl#33333 · Filter by author 007bsd opened on Oct 22, 2026

• OSSL_HTTP_get() forwards caller Authorization/Cookie headers to a cross-origin redirect target

  help wantedtriaged: feature
  openssl/openssl#33332 · Filter by author 007bsd opened on Oct 22, 2026
  1

• DTLS 1.3: records with omitted length field (RFC 9147 §4.2.1) always discarded in dtls_process_record()

  branch: masterbranch: 4.1triaged: bug
  openssl/openssl#33329 · Filter by author codingkoala opened on Oct 22, 2026
  2

  

• pkcs12 -export -jdktrust double-frees a non-built-in trust OID (abort / use-after-free)

  branch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1help wantedtriaged: bug
  openssl/openssl#33319 · Filter by author mi11ione opened on Oct 22, 2026
  

• test framework: spaced FIPSversion gate (e.g. >= 3.4.0) degenerates to exact-version match

  branch: masterbranch: 3.5branch: 4.0branch: 4.1triaged: bugtriaged: test
  openssl/openssl#33318 · Filter by author levitte opened on Oct 22, 2026
  2

  

• X509_NAME_print_ex (openssl x509 -subject, -nameopt oid) truncates attribute type OIDs longer than 79 characters

  branch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1help wantedtriaged: bug
  openssl/openssl#33315 · Filter by author mi11ione opened on Oct 22, 2026
  1

  

• CONF_modules_unload() loses module ownership on allocation failure

  branch: 3.5branch: 3.6branch: 4.0branch: 4.1help wantedtriaged: bug
  openssl/openssl#33307 · Filter by author sa6mwa opened on Oct 21, 2026
  2

• Allocation failure recursively enters error-string initialization

  branch: masterbranch: 3.6branch: 4.0branch: 4.1help wantedtriaged: bug
  openssl/openssl#33306 · Filter by author sa6mwa opened on Oct 21, 2026
  1

• Failed thread-cleanup registration discards a nested error-state cleanup handler

  branch: masterbranch: 3.6branch: 4.0branch: 4.1help wantedtriaged: bug
  openssl/openssl#33305 · Filter by author sa6mwa opened on Oct 21, 2026
  1

• Allocation-error reporting re-enters base initialization and error-state TLS setup

  branch: masterbranch: 3.6branch: 4.0branch: 4.1help wantedtriaged: bug
  openssl/openssl#33304 · Filter by author sa6mwa opened on Oct 21, 2026
  1

• OSSL_LIB_CTX_set0_default() ignores failure to store the requested context

  branch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1help wantedtriaged: bug
  openssl/openssl#33303 · Filter by author sa6mwa opened on Oct 21, 2026
  1

• RAND and default-context initialization allocate state after base initialization fails

  branch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1help wantedtriaged: bug
  openssl/openssl#33302 · Filter by author sa6mwa opened on Oct 21, 2026
  1