OpenSSL 4.1.0 adds DTLS 1.3 and post-quantum speedups
The October 23 feature release is not a security patch and documents four DTLS issues still awaiting a fix.
48
Vendor
OpenSSL
- Mentions · 7d2
- Mentions · 30d9
- All mentions18
- First seenAug 25, 2026
- Last mentioned4d ago
Timeline
18 articles · newest firstOpenSSL 4.1.0 adds DTLS 1.3 and ships four known DTLS bugs
Two bugs can misreport connection state, one can abort handshakes after packet loss, and KeyUpdate can drop a lost NewSessionTicket.
48
OpenSSL 4.1.0 release appears on Hacker News
The feed snippet only shows 43 points and 8 comments, with no changelog or security notes.
18
OpenSSL CMS integrity-check flaw lets attackers tamper with messages
ZDI rates CVE-2026-34182 at CVSS 3.1 and says the attacker must already be able to modify the messages.
34
OpenSSL CMP format-string flaw can leak data without login
ZDI rates CVE-2026-63073 at CVSS 6.5; remote attackers need no authentication, and no fixed version is named.
48
VU#948176: Multiple TLS Libraries can Bypass Delegation Enforcement
CERT/CC says TLS libraries inconsistently enforce Name Constraints, with three assigned CVEs already fixed.
64
VU#573195: Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint Inconsistency in RFC 5280 Implementation
CERT/CC warns TLS libraries inconsistently enforce X.509 name constraints, with fixes for GnuTLS and pyca/cryptography.
54
USN-8865-1: EDK II vulnerabilities
Ubuntu patched EDK II OpenSSL flaws that could cause denial of service, including a heap overflow.
34
USN-8861-1: OpenSSL vulnerabilities
Ubuntu patches two OpenSSL QUIC denial-of-service flaws that can exhaust CPU or memory.
42
OpenSSL High-Severity Flaw Lets Attackers Leak Heap Memory in Plaintext
OpenSSL patched high-severity CVE-2026-84782, a DTLS out-of-bounds read that can leak heap memory or crash services.
72
OpenSSL Fixes High-Severity Bug That Can Leak Server Memory in Plaintext
OpenSSL patched CVE-2026-84782, a high-severity DTLS flaw that can leak heap memory or crash servers.
72
USN-8847-1: OpenSSL vulnerabilities
Ubuntu warned of OpenSSL flaws that could cause denial of service or a timing side-channel leak.
40
OpenSSL Security Advisory [29th September 2026]
OpenSSL rates DTLS handshake retransmission bug CVE-2026-84782 high severity.
72
CVE-2026-73581: Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore
Moderate Tomcat CVE-2026-73581 makes OpenSSL TLS stacks ignore CRLs for keystore certificates.
48
New OpenSSL Releases
OpenSSL plans security-fix releases, including 4.0.3 and 3.6.5, for 29 September 2026.
66
OpenSSL 4.1.0 Alpha1 Released With DTLS 1.3 and Faster Post-Quantum Cryptography
OpenSSL 4.1.0 Alpha1 adds DTLS 1.3 support, ML-DSA and ML-KEM post-quantum optimizations, and GREASE TLS compatibility, intended for testing only.
22
OpenSSL’s new alpha build speeds up post-quantum crypto
OpenSSL 4.1.0 alpha1 adds DTLS 1.3 support and speeds up ML-DSA and ML-KEM post-quantum operations across several architectures.
40
OpenSSL security advisory (AV26-846)
Canada's Cyber Centre relayed an OpenSSL advisory (AV26-846) covering vulnerabilities fixed across seven branches, urging users to update to patched releases.
35
Related CVEs
by mentions- OpenSSL DTLS retransmission out-of-bounds read leaks heap or crashes
- CVE-2026-3833<1%7.4gnutls: This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for…
- CVE-2026-34073<1%1.7cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
- CVE-2026-34182<1%9.1Issue Summary: Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fields of…
- Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary
- CVE-2026-63072<1%7.5Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can…
- CVE-2026-630761%7.5Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before…
- CVE-2026-3547<1%7.5Out-of-bounds read in ALPN parsing due to incomplete validation
- Quadratic CPU DoS in OpenSSL QUIC reassembly
- OpenSSL QUIC amplification when address validation is off
Appears with
- OpenSSLproduct · 11
- OpenSSLorganization · 5
- OpenSSL projectorganization · 3
- Zero Day Initiativeorganization · 2
- Applevendor · 2
- GnuTLSvendor · 2
- wolfSSLvendor · 2
- GnuTLSproduct · 2
- LibreSSLproduct · 2
- pyca/cryptographyproduct · 2
- Ubuntuproduct · 2
- Go crypto/x509product · 2
- OpenSSL 4.1.0product · 2
- CERT/CCorganization · 2
- wolfSSLproduct · 2
- Canonicalorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.