OpenSSL 4.1.0-beta2

2026-10-10T08:51:58Z•f44dc0dacfc60d93294c9eb5b4b12b579dca0a5df0247ea2d62b9e17cd1fd73f
CVE-2026-35189CVE-2026-35191CVE-2026-42772CVE-2026-54872CVE-2026-54873CVE-2026-54875CVE-2026-72897CVE-2026-75804CVE-2026-75805CVE-2026-84782CVE-2026-84783CRLDPDTLSDTLS-1.3GREASEML-DSAML-KEMOpenSSLQUICSM2X.509beta-releasedenial-of-serviceelliptic-curve-cryptographyfeature-releaseout-of-boundspost-quantum-cryptographysecurity-patchsecurity-updatetiming-side-channeluse-after-free

What happened

OpenSSL release feed covering OpenSSL 4.1.0 beta/alpha feature previews and security patch releases for the 4.0, 3.6, 3.5, and 3.4 branches. The security updates address high-severity issues including DTLS handshake retransmission flaws, X.509 use-after-free, excessive memory allocation, multiple QUIC denial-of-service conditions, elliptic-curve timing leaks, SM2 non-constant-time operations, and an out-of-bounds access during handshakes. OpenSSL 4.1.0 adds DTLS 1.3, GREASE, DTLS listener support, IKEv2 KDF, post-quantum cryptographic optimizations, and other compatibility changes.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
openssl_releases
Record identifier
f44dc0dacfc60d93294c9eb5b4b12b579dca0a5df0247ea2d62b9e17cd1fd73f
Enrichment time
2026-10-10T08:51:58Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.