All pull requests

Pull requests

• Cmake is fun and useful.

  approval: review pendingcla: 1.0 no AI
  #33189·bob-beck opened Oct 11, 2026Contributor·2 tasks·

  ·

• ocsp: use 32-byte nonces and validate nonce length (RFC 9654)

  approval: review pending
  #33188·ducanhmit opened Oct 11, 2026·

  ·
  1

• [4.0] Cleanse the TLS read buffer when the record layer is freed

  approval: review pending
  #33186·dpr78 opened Oct 10, 2026·

  ·

• [master] Cleanse the TLS read buffer when the record layer is freed

  approval: review pending
  #33185·dpr78 opened Oct 10, 2026·1 task done·

  ·
  1

• Fix heap OOB read in ossl_i2c_ASN1_INTEGER with negative length

  approval: review pendinghold: cla required
  #33184·kalt2212 opened Oct 10, 2026·

  ·

• Add setters for X.509 unique identifiers

  approval: review pendinghold: cla required
  #33175·hdhabeka-spec opened Oct 9, 2026·

  ·

• Using simultaneous SKEY derivation in TLS

  approval: review pendingseverity: ABI changeseverity: fips change
  #33168·beldmit opened Oct 8, 2026Member·1 of 2 tasks·

  ·
  11

• Correct PEM X509 docs regarding TRUSTED CERTIFICATE blocks

  approval: ready to mergebranch: masterbranch: 3.4branch: 3.5branch: 3.6branch: 4.0branch: 4.1cla: trivialtests: exemptedtriaged: bugtriaged: documentation
  #33166·chrissorr opened Oct 8, 2026·1 task done·

  ·
  1

  4

• [3.5] CHANGES.md, NEWS.md: 3.5.9 fixups

  approval: review pendingbranch: 3.5cla: 1.0 no AIhold: wait for mastertriaged: cleanup
  #33165·esyr opened Oct 8, 2026Member·

  ·

• [3.4] CHANGES.md, NEWS.md: 3.4.8 fixups

  approval: review pendingbranch: 3.4cla: 1.0 no AIhold: wait for mastertriaged: cleanup
  #33164·esyr opened Oct 8, 2026Member·

  ·

• [3.6] CHANGES.md, NEWS.md: 3.6.5 fixups

  approval: review pendingbranch: 3.6cla: 1.0 no AIhold: wait for mastertriaged: cleanup
  #33163·esyr opened Oct 8, 2026Member·

  ·

• [4.0] CHANGES.md, NEWS.md: 4.0.3 fixups

  approval: review pendingbranch: 4.0cla: 1.0 no AIhold: wait for mastertriaged: cleanup
  #33162·esyr opened Oct 8, 2026Member·

  ·

• [4.1] CHANGES.md, NEWS.md: 4.0.3 fixups

  approval: ready to mergebranch: 4.1cla: 1.0 no AIhold: wait for mastertests: exemptedtriaged: cleanuptriaged: documentation
  #33161·esyr opened Oct 8, 2026Member·

  ·
  1

• Add missing stdio.h include for PQ fuzzers

  approval: review pendingcla: trivial
  #33160·Mrmaxmeier opened Oct 8, 2026·

  ·
  2

• reject zero-length TLS 1.2 Handshake and Alert records

  approval: review pending
  #33159·anishbhujbal7 opened Oct 8, 2026·

  ·
  1

  1

• [NSF] Fix a NULL-pointer dereference in EVP_EncryptUpdate with AES-OCB

  severity: fips changeteam: NSF
  #33157·Trust-Worthy opened Oct 7, 2026Contributor·1 task done·

  ·
  3

• Suppress benign TSan race in allocator initialization

  approval: donecla: trivial
  #33156·insightlabs38-pixel opened Oct 7, 2026·

  ·
  1

  3

• ML-KEM: clear the private key copies made when printing a key

  approval: review pendingbranch: master
  #33155·Udayd20 opened Oct 7, 2026·1 of 2 tasks·

  ·
  1

• ML-KEM: honour import_pct_type=fixed and fix two error paths

  approval: review pending
  #33154·Udayd20 opened Oct 7, 2026·2 tasks·

  ·
  1

• QUIC: don't answer a refused Retry token with another Retry

  approval: ready to mergebranch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1tests: presenttriaged: bug
  #33149·ngauder opened Oct 7, 2026Contributor·1 task done·

  ·
  11

• Check the cipher IV length before generating IVs into fixed buffers

  approval: review pending
  #33148·ducanhmit opened Oct 7, 2026·1 task done·

  ·
  3

• crypto/x509/x509_lu.c: avoid freeing X509_OBJECTs in X509_STORE_get0_objects()

  approval: review pendingbranch: masterbranch: 4.0branch: 4.1cla: 1.0 no AItriaged: bug
  #33147·esyr opened Oct 7, 2026Member·

  ·
  1

  5

• Accumulate CRL reasons for CRLs returned by a get_crl callback

  approval: review pending
  #33145·ducanhmit opened Oct 7, 2026·1 task done·

  ·
  1

• x509: fix duplicate detection in unsorted store object stacks

  approval: review pendingbranch: masterbranch: 4.0branch: 4.1
  #33141·npajkovsky opened Oct 7, 2026·

  ·
  1

  

• [NSF] AEAD: re-init regression test and AES-SIV bugfix

  approval: review pendingteam: NSF
  #33139·bbbrumley opened Oct 7, 2026Contributor·1 task done·

  ·
  7