OpenSSL 4.1.0-beta2
2026-10-10T08:51:58Z•f44dc0dacfc60d93294c9eb5b4b12b579dca0a5df0247ea2d62b9e17cd1fd73f
CVE-2026-35189CVE-2026-35191CVE-2026-42772CVE-2026-54872CVE-2026-54873CVE-2026-54875CVE-2026-72897CVE-2026-75804CVE-2026-75805CVE-2026-84782CVE-2026-84783CRLDPDTLSDTLS-1.3GREASEML-DSAML-KEMOpenSSLQUICSM2X.509beta-releasedenial-of-serviceelliptic-curve-cryptographyfeature-releaseout-of-boundspost-quantum-cryptographysecurity-patchsecurity-updatetiming-side-channeluse-after-free
What happened
OpenSSL release feed covering OpenSSL 4.1.0 beta/alpha feature previews and security patch releases for the 4.0, 3.6, 3.5, and 3.4 branches. The security updates address high-severity issues including DTLS handshake retransmission flaws, X.509 use-after-free, excessive memory allocation, multiple QUIC denial-of-service conditions, elliptic-curve timing leaks, SM2 non-constant-time operations, and an out-of-bounds access during handshakes. OpenSSL 4.1.0 adds DTLS 1.3, GREASE, DTLS listener support, IKEv2 KDF, post-quantum cryptographic optimizations, and other compatibility changes.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- openssl_releases
- Record identifier
- f44dc0dacfc60d93294c9eb5b4b12b579dca0a5df0247ea2d62b9e17cd1fd73f
- Enrichment time
- 2026-10-10T08:51:58Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.