Search results

ML-DSA private key loading crashes when secure heap is active

issue: bug reportThe issue was opened to report a bugThe issue was opened to report a bug

Status: Open.

#30302 In openssl/openssl;

· dstaesse opened on Mar 7, 2026

<code>X509_trusted</code> has a deceptive name and is pretty useless

issue: bug reportThe issue was opened to report a bugThe issue was opened to report a bug

Status: Open.

#30292 In openssl/openssl;

· DDvO opened on Mar 6, 2026

CMS regression: signed attributes with ED448

issue: bug reportThe issue was opened to report a bugThe issue was opened to report a bug

Status: Open.

#30291 In openssl/openssl;

· danvangeest opened on Mar 6, 2026

<code>ossl_x509v3_cache_extensions()</code> could return much more efficiently on <code>EXFLAG_SET</code>

issue: feature requestThe issue was opened to request a featureThe issue was opened to request a feature

Status: Open.

#30290 In openssl/openssl;

· DDvO opened on Mar 6, 2026

Memory leak in ossl_rsa_fromdata() error path when OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ is enabled (missing BN_clear_free for p/q)

good first issueBite size change that could be a good startBite size change that could be a good start

help wanted

triaged: bugThe issue/pr is/fixes a bugThe issue/pr is/fixes a bug

Status: Open.

#30288 In openssl/openssl;

· Kenaz123 opened on Mar 6, 2026

Stack Buffer Over-Read in DES OFB/CFB via Unchecked <code>num</code> Parameter

issue: bug reportThe issue was opened to report a bugThe issue was opened to report a bug

Status: Open.

#30284 In openssl/openssl;

· OwenSanzas opened on Mar 6, 2026

fuzz/provider.c: incorrect API call sequence makes cipher and digest paths dead code

Status: Open.

#30281 In openssl/openssl;

· OwenSanzas opened on Mar 6, 2026

fuzz/quic-server.c: fuzzer is non-functional due to missing certificate setup

Status: Open.

#30278 In openssl/openssl;

· OwenSanzas opened on Mar 6, 2026

Intermittent Freeze when running ech test

triaged: bugThe issue/pr is/fixes a bugThe issue/pr is/fixes a bug

Status: Open.

#30277 In openssl/openssl;

· slontis opened on Mar 6, 2026

HMAC_Init should not be used directly in a few places.

branch: 3.0Applies to openssl-3.0 branchApplies to openssl-3.0 branch

branch: 3.5Applies to openssl-3.5Applies to openssl-3.5

branch: 3.6Applies to openssl-3.6Applies to openssl-3.6

branch: featureThe issue or PR is relevant only to one of the feature branches.The issue or PR is relevant only to one of the feature branches.

severity: fips changeThe pull request changes FIPS provider sourcesThe pull request changes FIPS provider sources

triaged: bugThe issue/pr is/fixes a bugThe issue/pr is/fixes a bug

Status: Open.

#30268 In openssl/openssl;

· slontis opened on Mar 5, 2026

Curl with client certificate in expect script intermittently echoes PEM pass phrase

issue: bug reportThe issue was opened to report a bugThe issue was opened to report a bug

Status: Open.

#30262 In openssl/openssl;

· 99999osd opened on Mar 4, 2026

Whether HashML-DSA (FIPS 204 §5.4 PreHash Mode) Supported in OpenSSL 3.5 and OpenSSL 4.0

issue: questionThe issue was opened to ask a questionThe issue was opened to ask a question

Status: Open.

#30260 In openssl/openssl;

· yangjinlin01 opened on Mar 4, 2026