Cloudanix Zero.

package

OpenSSL: security advisories, deprecations and releases

Cryptography and TLS library used across operating systems and software.

Get OpenSSL alerts Free. No account. One email, and only when something touches your stack.

Items, 90 days: 9
Critical: 0
Last critical: none
This week: 1

What your digest would have held this week

1 item from the last 7 days. Zero sends only the ones that touch your stack.

HIGH OpenSSL 3.6 has reached end of life

Security 3

HIGH OpenSSL releases · 3 Oct 2026

OpenSSL 4.0.3 security patch release

OpenSSL 4.0.3 patches 15 issues including DTLS retransmission, use-after-free, QUIC amplification, CPU DoS, timing side-channels and NULL dereference.

CVE-2026-35189 CVE-2026-35191 CVE-2026-42772 CVE-2026-54872 CVE-2026-54873 CVE-2026-54875 CVE-2026-72897 CVE-2026-75804 CVE-2026-75805 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 CVE-2026-84783 CVE-2026-84784
HIGH OpenSSL releases · 3 Oct 2026

OpenSSL 3.4.8 security patch release

OpenSSL 3.4.8 fixes 12 CVEs including DTLS handshake issues, QUIC DoS vectors, timing side-channels, and memory exhaustion.

CVE-2026-35189 CVE-2026-42772 CVE-2026-54872 CVE-2026-54873 CVE-2026-54875 CVE-2026-72897 CVE-2026-75804 CVE-2026-75805 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 CVE-2026-84784
HIGH OpenSSL releases · 3 Oct 2026

OpenSSL 3.6.5 security patch release

OpenSSL 3.6.5 fixes multiple high-severity vulnerabilities including DTLS retransmission issues, QUIC amplification credit problems, CPU DoS via fragment reassembly, timing side-channels, NULL pointer dereference, and out-of-bounds access.

CVE-2026-35189 CVE-2026-35191 CVE-2026-42772 CVE-2026-54872 CVE-2026-54873 CVE-2026-54875 CVE-2026-72897 CVE-2026-75804 CVE-2026-75805 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 CVE-2026-84784

Also covered by OpenSSL releases

Deprecations 4

HIGH NEW THIS WEEK ACT BY 1 NOV 2026 endoflife.date · 1 Nov 2026

OpenSSL 3.6 has reached end of life

OpenSSL 3.6 reached end of life on 2026-11-01, as listed by endoflife.date.
HIGH ACT BY 22 OCT 2026 endoflife.date · 22 Oct 2026

OpenSSL 3.4 has reached end of life

OpenSSL 3.4 reached end of life on 2026-10-22, as listed by endoflife.date.
HIGH ACT BY 22 OCT 2026 endoflife.date · 2 Oct 2026

OpenSSL 3.4 reaches end of life on 2026-10-22

OpenSSL 3.4 reaches end of life on 2026-10-22, as listed by endoflife.date.
HIGH ACT BY 1 NOV 2026 endoflife.date · 2 Oct 2026

OpenSSL 3.6 reaches end of life on 2026-11-01

OpenSSL 3.6 reaches end of life on 2026-11-01, as listed by endoflife.date.

Releases 2

INFO endoflife.date · 26 Oct 2026

OpenSSL 4.1 released

OpenSSL 4.1 was released on 2026-10-23.
MEDIUM OpenSSL releases · 23 Oct 2026

OpenSSL 4.1.0 feature release

OpenSSL 4.1.0 adds DTLS 1.3, GREASE, IKEv2 KDF, ML-DSA/ML-KEM optimizations, and drops several legacy build targets.

Only hear about OpenSSL when it touches your stack

Tell Zero what you run. You get one email, and only on the days something above applies to you.

Get OpenSSL alerts