OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken 2026-10-26 at 01:33 By Anamarija Pogorelec The OpenSSL project released version 4.1.0, adding support for DTLS 1.3 and listing four known bugs in the DTLS code that ships with it. DTLS is the variant of TLS built for datagram transports such as UDP, and version […]
OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken Read More »
High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL 2026-09-30 at 09:55 By Eduard Kovacs Roughly a dozen vulnerabilities have been patched in each of the open source cryptographic libraries. The post High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL Read More »
OpenSSL’s new alpha build speeds up post-quantum crypto 2026-09-10 at 01:15 By Sinisa Markovic The OpenSSL project released the first alpha of OpenSSL 4.1.0, giving developers an early look at a version built for encrypted communication over unreliable connections and faster post-quantum cryptography. This marks the opening test build for a version still months from […]
OpenSSL’s new alpha build speeds up post-quantum crypto Read More »
OpenSSL Silently Fixes ‘HollowByte’ DoS Vulnerability 2026-07-20 at 15:32 By Ionut Arghire Attackers could send waves of malicious payloads to trigger buffer pre-allocations that are not freed, exhausting server memory. The post OpenSSL Silently Fixes ‘HollowByte’ DoS Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
OpenSSL Silently Fixes ‘HollowByte’ DoS Vulnerability Read More »
OpenSSL Patches High-Severity Vulnerability Found With AI 2026-06-09 at 20:08 By Eduard Kovacs A total of 18 vulnerabilities have been patched in the latest OpenSSL releases, including many that were potentially discovered by AI. The post OpenSSL Patches High-Severity Vulnerability Found With AI appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]
OpenSSL Patches High-Severity Vulnerability Found With AI Read More »
OpenSSL 4.0.0 release cuts deprecated protocols and gains post-quantum support 2026-04-14 at 18:57 By Anamarija Pogorelec OpenSSL 4.0.0 removes several long-deprecated features, adds support for Encrypted Client Hello, and introduces API-level changes that will require code updates for applications built against older versions. SSLv3, SSLv2 client hello, and engines are gone SSLv3 support has been […]
OpenSSL 4.0.0 release cuts deprecated protocols and gains post-quantum support Read More »
Data Leakage Vulnerability Patched in OpenSSL 2026-04-08 at 18:47 By Eduard Kovacs A total of seven vulnerabilities, most of which can be exploited for DoS attacks, have been patched in OpenSSL. The post Data Leakage Vulnerability Patched in OpenSSL appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Data Leakage Vulnerability Patched in OpenSSL Read More »
OpenSSL 3.6.2 lands with eight CVE fixes 2026-04-08 at 08:12 By Sinisa Markovic OpenSSL 3.6.2 patches eight CVEs across a range of components. The project rates the most severe issue in the release as Moderate. What got fixed The release fixes incorrect failure handling in RSA KEM RSASVE encapsulation (CVE-2026-31790) and a loss of key […]
OpenSSL 3.6.2 lands with eight CVE fixes Read More »
High-Severity Remote Code Execution Vulnerability Patched in OpenSSL 2026-01-28 at 09:48 By Eduard Kovacs A total of 12 vulnerabilities have been fixed in OpenSSL, all discovered by a single cybersecurity firm. The post High-Severity Remote Code Execution Vulnerability Patched in OpenSSL appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
High-Severity Remote Code Execution Vulnerability Patched in OpenSSL Read More »
OpenSSL Vulnerabilities Allow Private Key Recovery, Code Execution, DoS Attacks 2025-10-01 at 17:08 By Eduard Kovacs Three vulnerabilities have been patched with the release of OpenSSL updates. The post OpenSSL Vulnerabilities Allow Private Key Recovery, Code Execution, DoS Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
OpenSSL Vulnerabilities Allow Private Key Recovery, Code Execution, DoS Attacks Read More »
OpenSSL prepares for a quantum future with 3.5.0 release 2025-04-09 at 11:26 By Help Net Security The OpenSSL Project has released version 3.5.0 of its widely used open-source cryptographic library, introducing new features and notable changes that signal its evolution toward future-ready cryptography. This feature release includes support for post-quantum cryptography (PQC), server-side QUIC, and […]
OpenSSL prepares for a quantum future with 3.5.0 release Read More »
High-Severity OpenSSL Vulnerability Found by Apple Allows MitM Attacks 2025-02-11 at 20:09 By Eduard Kovacs OpenSSL has patched CVE-2024-12797, a high-severity vulnerability found by Apple that can allow man-in-the-middle attacks. The post High-Severity OpenSSL Vulnerability Found by Apple Allows MitM Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
High-Severity OpenSSL Vulnerability Found by Apple Allows MitM Attacks Read More »
Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039) 2024-11-12 at 23:03 By Zeljka Zorz November 2024 Patch Tuesday is here, and Microsoft has dropped fixes for 89 new security issues in its various products, two of which – CVE-2024-43451 and CVE-2024-49039 – are actively exploited by attackers. The exploited vulnerabilities (CVE-2024-43451, CVE-2024-49039) CVE-2024-43451 is yet another […]
Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039) Read More »
OpenSSL 3.2.0 released: New cryptographic algorithms, support for TCP fast open, and more! 27/11/2023 at 10:32 By Help Net Security OpenSSL is a full-featured toolkit for general-purpose cryptography and secure communication. The final version of OpenSSL 3.2.0 is now available. Major changes in OpenSSL 3.2.0 This release incorporates the following potentially significant or incompatible changes: […]