Issues

• DTLS listener connections race on the shared write BIO's MTU

  branch: masterbranch: 4.1issue: bug report
  openssl/openssl#33195 · Filter by author idrassi opened on Oct 11, 2026

• Data race on the shared write BIO of DTLS listener connections

  triaged: bug
  Bug

  openssl/openssl#33193 · Filter by author bob-beck opened on Oct 11, 2026
  

• broken gpg key

  openssl/openssl#33190 · Filter by author petrovr opened on Oct 11, 2026
  1

• Misaligned fs->offset in QUIC_RSTREAM for OpenSSL 4.1 on Solaris Sparc 32 Bit

  help wantedtriaged: bug
  openssl/openssl#33187 · Filter by author rainerjung opened on Oct 10, 2026
  3

• 90-test_sslapi.t failure in 3.4.0 release

  issue: bug report
  openssl/openssl#33183 · Filter by author petrovr opened on Oct 10, 2026
  1

• duplicate synopsys for i2d_TYPE set of functions

  issue: documentation
  openssl/openssl#33182 · Filter by author petrovr opened on Oct 10, 2026

• OCSP: use 32-byte nonces by default (RFC 9654)

  issue: feature request
  openssl/openssl#33181 · Filter by author ducanhmit opened on Oct 10, 2026
  1

• DTLS listener: a connection's receive queue has no limit (release blocker for 4.1.0)

  branch: masterbranch: 4.1triaged: bug
  openssl/openssl#33173 · Filter by author idrassi opened on Oct 9, 2026 · 4.1.0 final blocker
  

• DTLS listener: the accept queue (incoming_connections) has no limit and no expiry (release blocker for 4.1.0)

  branch: masterbranch: 4.1triaged: bug
  openssl/openssl#33172 · Filter by author idrassi opened on Oct 9, 2026 · 4.1.0 final blocker
  

• SSL_OP_CLEANSE_PLAINTEXT: TLS read buffer not cleansed on SSL_free() since 3.2.0

  branch: masterbranch: 3.4branch: 3.5branch: 3.6branch: 4.0branch: 4.1help wantedtriaged: bug
  openssl/openssl#33170 · Filter by author dpr78 opened on Oct 9, 2026
  2

• QUIC: handshake stalls when the ClientHello exceeds the initial congestion window (a CC-limited endpoint cannot send an ACK in Initial, and the ACK it built is forgotten)

  branch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1triaged: bugwaiting-for: contributor response
  openssl/openssl#33158 · Filter by author RidleyDiSiena opened on Oct 8, 2026
  1

  

• ML-KEM: import_pct_type=fixed is ignored, and two small error-path bugs

  issue: bug report
  openssl/openssl#33153 · Filter by author Udayd20 opened on Oct 7, 2026

• ML-KEM: printing a private key leaves the seed and dk in memory

  issue: bug report
  openssl/openssl#33152 · Filter by author Udayd20 opened on Oct 7, 2026

• test_ocsp_cert_chain.t leaks its ocsp/s_server test fixtures on HP-UX, causing a later libcrypto.so.3 relink failure

  openssl/openssl#33136 · Filter by author davidritter opened on Oct 7, 2026
  1

• DTLS 1.3 client does not retransmit ClientHello when early_data is enabled

  issue: bug report
  openssl/openssl#33127 · Filter by author Fastor01 opened on Oct 6, 2026

• 04-test_bio_dgram.t hangs on HP-UX (hpux-ipf32 and hpux-ipf64, IA64)

  help wantedtriaged: bug
  openssl/openssl#33112 · Filter by author davidritter opened on Oct 5, 2026
  1

• Decoders and i2d free private key DER buffers without clearing them

  good first issuehelp wantedtriaged: feature
  openssl/openssl#33110 · Filter by author Udayd20 opened on Oct 5, 2026
  1

  

• OSSL_CRMF_ENCRYPTEDKEY_get1_pkey() frees decrypted private key with plain OPENSSL_free() (CWE-226)

  openssl/openssl#33106 · Filter by author ravikanthreddy89 opened on Oct 5, 2026

• POLY1305_ASM not defined for libdefault.a

  branch: masterbranch: 3.4branch: 3.5branch: 3.6branch: 4.0branch: 4.1triaged: bug
  openssl/openssl#33096 · Filter by author tetlowgm opened on Oct 4, 2026
  4

  

• QUIC Retry leaves stale bytes in NewReno congestion accounting

  branch: 3.5branch: 3.6branch: 4.0branch: 4.1triaged: bug
  openssl/openssl#33079 · Filter by author idrassi opened on Oct 2, 2026

• QUIC client resends only Initial PN 0 after Retry when ClientHello spans multiple packets

  branch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1triaged: bug
  openssl/openssl#33077 · Filter by author totobdbd2 opened on Oct 2, 2026
  3

  

• SSH corruptions with 3.0.13 on AARCH64

  help wantedtriaged: bugwaiting-for: contributor response
  openssl/openssl#33072 · Filter by author Yuri6037 opened on Oct 1, 2026
  3

• Implement RFC 10032

  help wantedtriaged: feature
  openssl/openssl#33064 · Filter by author alterstep opened on Oct 1, 2026
  3

• Use after free when X509_STORE_get0_objects runs concurrently with X.509 verification

  branch: masterbranch: 4.0branch: 4.1triaged: bugtriaged: documentation
  openssl/openssl#33063 · Filter by author idrassi opened on Oct 1, 2026
  3

  

• make install fails on NonStop for 4.1.0-beta1 (since 4.1.0 initial)

  branch: 4.1triaged: bug
  openssl/openssl#33060 · Filter by author rsbeckerca opened on Sep 30, 2026
  15