More OpenSSL security fixes

OpenSSL 3.5 [LTS] released - 08 Apr 2025

More info:

https://openssl-library.org/source/

https://github.com/openssl/openssl/blob/master/CHANGES.md#openssl-35

https://marc.info/?l=openssl-users&m=174411928201074&w=2

 

OpenSSL 3.6 Alpha Release Announcement
Sep 2, 2025
https://openssl-library.org/post/2025-09-02-openssl-3.6-alpha/

Read there more.

 

They say that version 3.6 will be released on 01 Oct 2025
https://openssl-library.org/roadmap/index.html

Whether that will be a beta version, I don't know at the moment.

 

Openssl 3.5.3 Release Announcement
Sep 16, 2025

https://openssl-library.org/post/2025-09-16-openssl-3.5.3/

Read there more!

 

OpenSSL 3.6 Beta Release Announcement
Sep 16, 2025

https://openssl-library.org/post/2025-09-16-openssl-3.6-beta/

Long quote:
- Quoting -

The OpenSSL Project is pleased to announce that OpenSSL 3.6 Beta1 pre-release is available, adding significant functionality to the OpenSSL Library.

OpenSSL 3.6.0 is a feature pre-release adding significant new functionality, bug fixes and mitigations:

• Added FIPS 140-3 PCT on DH key generation.
• Added NIST security categories for PKEY objects.
• Added support for EVP_SKEY opaque symmetric key objects to the key derivation and key exchange provider methods. Added EVP_KDF_CTX_set_SKEY(), EVP_KDF_derive_SKEY(), and EVP_PKEY_derive_SKEY() functions.
• The FIPS provider now performs a PCT on key import for RSA, EC and ECX. This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
• Added LMS signature verification support as per [SP 800-208]. This support is present in both the FIPS and default providers.
• An ANSI-C toolchain is no longer sufficient for building OpenSSL. The code should build on compilers supporting C-99 features.
• The VxWorks platforms have been removed.
• Added an openssl configutl utility for processing the openssl configuration file and dumping the equal configuration file.
• Added support for FIPS 186-5 deterministic ECDSA signature generation to the FIPS provider.
• Deprecated EVP_PKEY_ASN1_METHOD related functions.

- End quoting -

Read there more!

 

OpenSSL Release Announcement for 3.5.4, 3.4.3, 3.3.5, 3.2.6, 3.0.18, 1.1.1zd and 1.0.2zm

Sep 30, 2025

Long list at :
https://openssl-library.org/post/2025-09-30-release-announcement/

List is too long to quote. See the details for all the versions at that link.

Read there more!

 

PS:

I don't see there at the moment newer info about the 3.6 Beta.