Release and Advisory Timeline

Here is a timeline of all OpenSSL releases and security advisories.

Date	Content
01 Oct 2025	OpenSSL 3.6.0
30 Sep 2025	OpenSSL 3.5.4
30 Sep 2025	OpenSSL 3.4.3
30 Sep 2025	OpenSSL 3.3.5
30 Sep 2025	OpenSSL 3.2.6
30 Sep 2025	OpenSSL 3.0.18
30 Sep 2025	Security Advisory Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230) Out-of-bounds read in HTTP client no_proxy handling (CVE-2025-9232)
16 Sep 2025	OpenSSL 3.5.3
16 Sep 2025	OpenSSL 3.6.0-beta1
02 Sep 2025	OpenSSL 3.6.0-alpha1
05 Aug 2025	OpenSSL 3.5.2
01 Jul 2025	OpenSSL 3.5.1
01 Jul 2025	OpenSSL 3.4.2
01 Jul 2025	OpenSSL 3.3.4
01 Jul 2025	OpenSSL 3.2.5
01 Jul 2025	OpenSSL 3.0.17
22 May 2025	Security Advisory The x509 application adds trusted use instead of rejected use (CVE-2025-4575)
08 Apr 2025	OpenSSL 3.5.0
25 Mar 2025	OpenSSL 3.5.0-beta1
12 Mar 2025	OpenSSL 3.5.0-alpha1
11 Feb 2025	OpenSSL 3.4.1
11 Feb 2025	OpenSSL 3.3.3
11 Feb 2025	OpenSSL 3.2.4
11 Feb 2025	OpenSSL 3.1.8
11 Feb 2025	OpenSSL 3.0.16
11 Feb 2025	Security Advisory RFC7250 handshakes with unauthenticated servers don’t abort as expected (CVE-2024-12797)
20 Jan 2025	Security Advisory Timing side-channel in ECDSA signature computation (CVE-2024-13176)
22 Oct 2024	OpenSSL 3.4.0
16 Oct 2024	Security Advisory Low-level invalid GF(2^m) parameters lead to OOB memory access (CVE-2024-9143)
07 Oct 2024	OpenSSL 3.4.0-beta1
05 Sep 2024	OpenSSL 3.4.0-alpha1
03 Sep 2024	OpenSSL 3.3.2
03 Sep 2024	OpenSSL 3.2.3
03 Sep 2024	OpenSSL 3.1.7
03 Sep 2024	OpenSSL 3.0.15
03 Sep 2024	Security Advisory Possible denial of service in X.509 name checks (CVE-2024-6119)
27 Jun 2024	Security Advisory SSL_select_next_proto buffer overread (CVE-2024-5535)
04 Jun 2024	OpenSSL 3.3.1
04 Jun 2024	OpenSSL 3.2.2
04 Jun 2024	OpenSSL 3.1.6
04 Jun 2024	OpenSSL 3.0.14
28 May 2024	Security Advisory Use After Free with SSL_free_buffers (CVE-2024-4741)
16 May 2024	Security Advisory Excessive time spent checking DSA keys and parameters (CVE-2024-4603)
09 Apr 2024	OpenSSL 3.3.0
08 Apr 2024	Security Advisory Unbounded memory growth with session handling in TLSv1.3 (CVE-2024-2511)
29 Mar 2024	OpenSSL 3.3.0-beta1
20 Mar 2024	OpenSSL 3.3.0-alpha1
30 Jan 2024	OpenSSL 3.2.1
30 Jan 2024	OpenSSL 3.1.5
30 Jan 2024	OpenSSL 3.0.13
25 Jan 2024	Security Advisory PKCS12 Decoding crashes (CVE-2024-0727)
15 Jan 2024	Security Advisory Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
09 Jan 2024	Security Advisory POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
23 Nov 2023	OpenSSL 3.2.0
06 Nov 2023	Security Advisory Excessive time spent in DH check / generation with large Q parameter value (CVE-2023-5678)
26 Oct 2023	OpenSSL 3.2.0-beta1
24 Oct 2023	OpenSSL 3.1.4
24 Oct 2023	OpenSSL 3.0.12
24 Oct 2023	Security Advisory Incorrect cipher key & IV length processing (CVE-2023-5363)
28 Sep 2023	OpenSSL 3.2.0-alpha2
19 Sep 2023	OpenSSL 3.1.3
19 Sep 2023	OpenSSL 3.0.11
12 Sep 2023	OpenSSL 1.1.1w
08 Sep 2023	Security Advisory POLY1305 MAC implementation corrupts XMM registers on Windows (CVE-2023-4807)
07 Sep 2023	OpenSSL 3.2.0-alpha1
01 Aug 2023	OpenSSL 3.1.2
01 Aug 2023	OpenSSL 3.0.10
01 Aug 2023	OpenSSL 1.1.1v
31 Jul 2023	Security Advisory Excessive time spent checking DH q parameter value (CVE-2023-3817)
19 Jul 2023	Security Advisory Excessive time spent checking DH keys and parameters (CVE-2023-3446)
14 Jul 2023	Security Advisory AES-SIV implementation ignores empty associated data entries (CVE-2023-2975)
30 May 2023	OpenSSL 3.1.1
30 May 2023	OpenSSL 3.0.9
30 May 2023	OpenSSL 1.1.1u
30 May 2023	Security Advisory Possible DoS translating ASN.1 object identifiers (CVE-2023-2650)
20 Apr 2023	Security Advisory Input buffer over-read in AES-XTS implementation on 64 bit ARM (CVE-2023-1255)
28 Mar 2023	Security Advisory Invalid certificate policies in leaf certificates are silently ignored (CVE-2023-0465) Certificate policy check not enabled (CVE-2023-0466)
22 Mar 2023	Security Advisory Excessive Resource Usage Verifying X.509 Policy Constraints (CVE-2023-0464)
14 Mar 2023	OpenSSL 3.1.0
07 Feb 2023	OpenSSL 1.1.1t
07 Feb 2023	OpenSSL 3.0.8
07 Feb 2023	Security Advisory X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) Timing Oracle in RSA Decryption (CVE-2022-4304) X.509 Name Constraints Read Buffer Overflow (CVE-2022-4203) Use-after-free following BIO_new_NDEF (CVE-2023-0215) Double free after calling PEM_read_bio_ex (CVE-2022-4450) Invalid pointer dereference in d2i_PKCS7 functions (CVE-2023-0216) NULL dereference validating DSA public key (CVE-2023-0217) NULL dereference during PKCS7 data verification (CVE-2023-0401)
21 Dec 2022	OpenSSL 3.1.0-beta1
13 Dec 2022	Security Advisory X.509 Policy Constraints Double Locking (CVE-2022-3996)
01 Dec 2022	OpenSSL 3.1.0-alpha1
01 Nov 2022	OpenSSL 1.1.1s
01 Nov 2022	OpenSSL 3.0.7
01 Nov 2022	Security Advisory X.509 Email Address 4-byte Buffer Overflow (CVE-2022-3602) X.509 Email Address Variable Length Buffer Overflow (CVE-2022-3786)
11 Oct 2022	OpenSSL 3.0.6
11 Oct 2022	OpenSSL 1.1.1r
11 Oct 2022	Security Advisory Using a Custom Cipher with NID_undef may lead to NULL encryption (CVE-2022-3358)
05 Jul 2022	OpenSSL 3.0.5
05 Jul 2022	OpenSSL 1.1.1q
05 Jul 2022	Security Advisory Heap memory corruption with RSA private key operation (CVE-2022-2274) AES OCB fails to encrypt some bytes (CVE-2022-2097)
21 Jun 2022	OpenSSL 3.0.4
21 Jun 2022	OpenSSL 1.1.1p
21 Jun 2022	Security Advisory The c_rehash script allows command injection (CVE-2022-2068)
03 May 2022	OpenSSL 3.0.3
03 May 2022	OpenSSL 1.1.1o
03 May 2022	Security Advisory The c_rehash script allows command injection (CVE-2022-1292) OCSP_basic_verify may incorrectly verify the response signing certificate (CVE-2022-1343) Incorrect MAC key used in the RC4-MD5 ciphersuite (CVE-2022-1434)
15 Mar 2022	OpenSSL 3.0.2
15 Mar 2022	OpenSSL 1.1.1n
15 Mar 2022	Security Advisory Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778)
28 Jan 2022	Security Advisory BN_mod_exp may produce incorrect results on MIPS (CVE-2021-4160)
14 Dec 2021	OpenSSL 1.1.1m
14 Dec 2021	OpenSSL 3.0.1
14 Dec 2021	Security Advisory Invalid handling of X509_verify_cert() internal errors in libssl (CVE-2021-4044)
07 Sep 2021	OpenSSL 3.0.0
24 Aug 2021	OpenSSL 1.1.1l
24 Aug 2021	Security Advisory SM2 Decryption Buffer Overflow (CVE-2021-3711) Read buffer overruns processing ASN.1 strings (CVE-2021-3712)
29 Jul 2021	OpenSSL 3.0.0-beta2
17 Jun 2021	OpenSSL 3.0.0-beta1
20 May 2021	OpenSSL 3.0.0-alpha17
06 May 2021	OpenSSL 3.0.0-alpha16
22 Apr 2021	OpenSSL 3.0.0-alpha15
08 Apr 2021	OpenSSL 3.0.0-alpha14
25 Mar 2021	OpenSSL 1.1.1k
25 Mar 2021	Security Advisory CA certificate check bypass with X509_V_FLAG_X509_STRICT (CVE-2021-3450) NULL pointer deref in signature_algorithms processing (CVE-2021-3449)
11 Mar 2021	OpenSSL 3.0.0-alpha13
18 Feb 2021	OpenSSL 3.0.0-alpha12
16 Feb 2021	OpenSSL 1.1.1j
16 Feb 2021	Security Advisory Null pointer deref in X509_issuer_and_serial_hash() (CVE-2021-23841) Incorrect SSLv2 rollback protection (CVE-2021-23839) Integer overflow in CipherUpdate (CVE-2021-23840)
28 Jan 2021	OpenSSL 3.0.0-alpha11
07 Jan 2021	OpenSSL 3.0.0-alpha10
08 Dec 2020	OpenSSL 1.1.1i
08 Dec 2020	Security Advisory EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
26 Nov 2020	OpenSSL 3.0.0-alpha9
05 Nov 2020	OpenSSL 3.0.0-alpha8
15 Oct 2020	OpenSSL 3.0.0-alpha7
22 Sep 2020	OpenSSL 1.1.1h
09 Sep 2020	Security Advisory Raccoon Attack (CVE-2020-1968)
06 Aug 2020	OpenSSL 3.0.0-alpha6
16 Jul 2020	OpenSSL 3.0.0-alpha5
25 Jun 2020	OpenSSL 3.0.0-alpha4
04 Jun 2020	OpenSSL 3.0.0-alpha3
15 May 2020	OpenSSL 3.0.0-alpha2
23 Apr 2020	OpenSSL 3.0.0-alpha1
21 Apr 2020	OpenSSL 1.1.1g
21 Apr 2020	Security Advisory Segmentation fault in SSL_check_chain (CVE-2020-1967)
31 Mar 2020	OpenSSL 1.1.1f
17 Mar 2020	OpenSSL 1.1.1e
20 Dec 2019	OpenSSL 1.0.2u
06 Dec 2019	Security Advisory rsaz_512_sqr overflow bug on x86_64 (CVE-2019-1551)
10 Sep 2019	OpenSSL 1.1.1d
10 Sep 2019	OpenSSL 1.1.0l
10 Sep 2019	OpenSSL 1.0.2t
10 Sep 2019	Security Advisory ECDSA remote timing attack (CVE-2019-1547) Fork Protection (CVE-2019-1549) Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey (CVE-2019-1563)
30 Jul 2019	Security Advisory Windows builds with insecure path defaults (CVE-2019-1552)
28 May 2019	OpenSSL 1.0.2s
28 May 2019	OpenSSL 1.1.0k
28 May 2019	OpenSSL 1.1.1c
06 Mar 2019	Security Advisory ChaCha20-Poly1305 with long nonces (CVE-2019-1543)
26 Feb 2019	OpenSSL 1.1.1b
26 Feb 2019	OpenSSL 1.0.2r
26 Feb 2019	Security Advisory 0-byte record padding oracle (CVE-2019-1559)
20 Nov 2018	OpenSSL 1.1.1a
20 Nov 2018	OpenSSL 1.1.0j
20 Nov 2018	OpenSSL 1.0.2q
12 Nov 2018	Security Advisory Microarchitecture timing vulnerability in ECC scalar multiplication (CVE-2018-5407)
30 Oct 2018	Security Advisory Timing vulnerability in DSA signature generation (CVE-2018-0734)
29 Oct 2018	Security Advisory Timing vulnerability in ECDSA signature generation (CVE-2018-0735)
11 Sep 2018	OpenSSL 1.1.1
21 Aug 2018	OpenSSL 1.1.1-pre9
14 Aug 2018	OpenSSL 1.1.0i
14 Aug 2018	OpenSSL 1.0.2p
20 Jun 2018	OpenSSL 1.1.1-pre8
12 Jun 2018	Security Advisory Client DoS due to large DH parameter (CVE-2018-0732)
29 May 2018	OpenSSL 1.1.1-pre7
01 May 2018	OpenSSL 1.1.1-pre6
17 Apr 2018	OpenSSL 1.1.1-pre5
16 Apr 2018	Security Advisory Cache timing vulnerability in RSA Key Generation (CVE-2018-0737)
03 Apr 2018	OpenSSL 1.1.1-pre4
27 Mar 2018	OpenSSL 1.1.0h
27 Mar 2018	OpenSSL 1.0.2o
27 Mar 2018	Security Advisory Constructed ASN.1 types with a recursive definition could exceed the stack (CVE-2018-0739) Incorrect CRYPTO_memcmp on HP-UX PA-RISC (CVE-2018-0733) rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
20 Mar 2018	OpenSSL 1.1.1-pre3
27 Feb 2018	OpenSSL 1.1.1-pre2
15 Feb 2018	OpenSSL 1.1.1-pre1
07 Dec 2017	OpenSSL 1.0.2n
07 Dec 2017	Security Advisory Read/write after SSL object in error state (CVE-2017-3737) rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
02 Nov 2017	OpenSSL 1.1.0g
02 Nov 2017	OpenSSL 1.0.2m
02 Nov 2017	Security Advisory bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736) Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735)
31 Aug 2017	OpenSSL fips-2.0.16
30 Aug 2017	OpenSSL fips-2.0.15
28 Aug 2017	Security Advisory
25 May 2017	OpenSSL 1.1.0f
25 May 2017	OpenSSL 1.0.2l
16 Feb 2017	OpenSSL 1.1.0e
16 Feb 2017	OpenSSL fips-2.0.14
16 Feb 2017	Security Advisory Encrypt-Then-Mac renegotiation crash (CVE-2017-3733)
26 Jan 2017	OpenSSL 1.1.0d
26 Jan 2017	OpenSSL 1.0.2k
26 Jan 2017	Security Advisory Truncated packet could crash via OOB read (CVE-2017-3731) Bad (EC)DHE parameters cause a client crash (CVE-2017-3730) BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732) Montgomery multiplication may produce incorrect results (CVE-2016-7055)
14 Nov 2016	OpenSSL fips-2.0.13
10 Nov 2016	OpenSSL 1.1.0c
10 Nov 2016	Security Advisory ChaCha20/Poly1305 heap-buffer-overflow (CVE-2016-7054) CMS Null dereference (CVE-2016-7053) Montgomery multiplication may produce incorrect results (CVE-2016-7055)
26 Sep 2016	OpenSSL 1.1.0b
26 Sep 2016	OpenSSL 1.0.2j
26 Sep 2016	Security Advisory Fix Use After Free for large message sizes (CVE-2016-6309) Missing CRL sanity check (CVE-2016-7052)
22 Sep 2016	OpenSSL 1.1.0a
22 Sep 2016	OpenSSL 1.0.2i
22 Sep 2016	OpenSSL 1.0.1u
22 Sep 2016	Security Advisory OCSP Status Request extension unbounded memory growth (CVE-2016-6304) SSL_peek() hang on empty record (CVE-2016-6305) SWEET32 Mitigation (CVE-2016-2183) OOB write in MDC2_Update() (CVE-2016-6303) Malformed SHA512 ticket DoS (CVE-2016-6302) OOB write in BN_bn2dec() (CVE-2016-2182) OOB read in TS_OBJ_print_bio() (CVE-2016-2180) Pointer arithmetic undefined behaviour (CVE-2016-2177) Constant time flag not preserved in DSA signing (CVE-2016-2178) DTLS buffered message DoS (CVE-2016-2179) DTLS replay protection DoS (CVE-2016-2181) Certificate message OOB reads (CVE-2016-6306) Excessive allocation of memory in tls_get_message_header() (CVE-2016-6307)
25 Aug 2016	OpenSSL 1.1.0
04 Aug 2016	OpenSSL 1.1.0-pre6
03 May 2016	OpenSSL 1.0.2h
03 May 2016	OpenSSL 1.0.1t
03 May 2016	Security Advisory Memory corruption in the ASN.1 encoder (CVE-2016-2108) Padding oracle in AES-NI CBC MAC check (CVE-2016-2107) EVP_EncodeUpdate overflow (CVE-2016-2105) EVP_EncryptUpdate overflow (CVE-2016-2106) ASN.1 BIO excessive memory allocation (CVE-2016-2109) EBCDIC overread (CVE-2016-2176)
19 Apr 2016	OpenSSL 1.1.0-pre5
16 Mar 2016	OpenSSL 1.1.0-pre4
01 Mar 2016	OpenSSL 1.0.2g
01 Mar 2016	OpenSSL 1.0.1s
01 Mar 2016	Security Advisory Cross-protocol attack on TLS using SSLv2 (DROWN) (CVE-2016-0800) Double-free in DSA code (CVE-2016-0705) Memory leak in SRP database lookups (CVE-2016-0798) BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption (CVE-2016-0797) Fix memory issues in BIO_*printf functions (CVE-2016-0799) Side channel attack on modular exponentiation (CVE-2016-0702) Divide-and-conquer session key recovery in SSLv2 (CVE-2016-0703) Bleichenbacher oracle in SSLv2 (CVE-2016-0704)
15 Feb 2016	OpenSSL fips-2.0.10
15 Feb 2016	OpenSSL fips-2.0.11
15 Feb 2016	OpenSSL fips-2.0.12
15 Feb 2016	OpenSSL 1.1.0-pre3
28 Jan 2016	OpenSSL 1.0.2f
28 Jan 2016	OpenSSL 1.0.1r
28 Jan 2016	Security Advisory DH small subgroups (CVE-2016-0701) SSLv2 doesn’t block disabled ciphers (CVE-2015-3197) An update on DHE man-in-the-middle protection (Logjam)
14 Jan 2016	OpenSSL 1.1.0-pre2
10 Dec 2015	OpenSSL 1.1.0-pre1
03 Dec 2015	OpenSSL 1.0.2e
03 Dec 2015	OpenSSL 1.0.1q
03 Dec 2015	OpenSSL 1.0.0t
03 Dec 2015	OpenSSL 0.9.8zh
03 Dec 2015	Security Advisory BN_mod_exp may produce incorrect results on x86_64 (CVE-2015-3193) Certificate verify crash with missing PSS parameter (CVE-2015-3194) X509_ATTRIBUTE memory leak (CVE-2015-3195) Race condition handling PSK identify hint (CVE-2015-3196) Anon DH ServerKeyExchange with 0 p parameter (CVE-2015-1794)
09 Jul 2015	OpenSSL 1.0.2d
09 Jul 2015	OpenSSL 1.0.1p
09 Jul 2015	Security Advisory Alternative chains certificate forgery (CVE-2015-1793)
12 Jun 2015	OpenSSL 1.0.2c
12 Jun 2015	OpenSSL 1.0.1o
11 Jun 2015	OpenSSL 1.0.2b
11 Jun 2015	OpenSSL 1.0.1n
11 Jun 2015	OpenSSL 1.0.0s
11 Jun 2015	OpenSSL 0.9.8zg
11 Jun 2015	Security Advisory DHE man-in-the-middle protection (Logjam) Malformed ECParameters causes infinite loop (CVE-2015-1788) Exploitable out-of-bounds read in X509_cmp_time (CVE-2015-1789) PKCS7 crash with missing EnvelopedContent (CVE-2015-1790) CMS verify infinite loop with unknown hash function (CVE-2015-1792) Race condition handling NewSessionTicket (CVE-2015-1791) Invalid free in DTLS (CVE-2014-8176)
14 May 2015	OpenSSL fips-2.0.9
19 Mar 2015	OpenSSL 1.0.2a
19 Mar 2015	OpenSSL 1.0.1m
19 Mar 2015	OpenSSL 1.0.0r
19 Mar 2015	OpenSSL 0.9.8zf
19 Mar 2015	Security Advisory OpenSSL 1.0.2 ClientHello sigalgs DoS (CVE-2015-0291) Reclassified: RSA silently downgrades to EXPORT_RSA [Client] (CVE-2015-0204) Multiblock corrupted pointer (CVE-2015-0290) Segmentation fault in DTLSv1_listen (CVE-2015-0207) Segmentation fault in ASN1_TYPE_cmp (CVE-2015-0286) Segmentation fault for invalid PSS parameters (CVE-2015-0208) ASN.1 structure reuse memory corruption (CVE-2015-0287) PKCS7 NULL pointer dereferences (CVE-2015-0289) Base64 decode (CVE-2015-0292) DoS via reachable assert in SSLv2 servers (CVE-2015-0293) Empty CKE with client auth and DHE (CVE-2015-1787) Handshake with unseeded PRNG (CVE-2015-0285) Use After Free following d2i_ECPrivatekey error (CVE-2015-0209) X509_to_X509_REQ NULL pointer deref (CVE-2015-0288)
22 Jan 2015	OpenSSL 1.0.2
15 Jan 2015	OpenSSL 1.0.1l
15 Jan 2015	OpenSSL 1.0.0q
15 Jan 2015	OpenSSL 0.9.8ze
08 Jan 2015	OpenSSL 1.0.1k
08 Jan 2015	OpenSSL 1.0.0p
08 Jan 2015	OpenSSL 0.9.8zd
08 Jan 2015	Security Advisory DTLS segmentation fault in dtls1_get_record (CVE-2014-3571) DTLS memory leak in dtls1_buffer_record (CVE-2015-0206) no-ssl3 configuration sets method to NULL (CVE-2014-3569) ECDHE silently downgrades to ECDH [Client] (CVE-2014-3572) RSA silently downgrades to EXPORT_RSA [Client] (CVE-2015-0204) DH client certificates accepted without verification [Server] (CVE-2015-0205) Certificate fingerprints can be modified (CVE-2014-8275) Bignum squaring may produce incorrect results (CVE-2014-3570)
24 Oct 2014	OpenSSL fips-2.0.8
15 Oct 2014	OpenSSL 0.9.8zc
15 Oct 2014	OpenSSL 1.0.0o
15 Oct 2014	OpenSSL 1.0.1j
15 Oct 2014	Security Advisory SRTP Memory Leak (CVE-2014-3513) Session Ticket Memory Leak (CVE-2014-3567) SSL 3.0 Fallback protection Build option no-ssl3 is incomplete (CVE-2014-3568)
25 Sep 2014	OpenSSL 1.0.2-beta3
06 Aug 2014	OpenSSL 1.0.1i
06 Aug 2014	OpenSSL 1.0.0n
06 Aug 2014	OpenSSL 0.9.8zb
06 Aug 2014	Security Advisory Information leak in pretty printing functions (CVE-2014-3508) Crash with SRP ciphersuite in Server Hello message (CVE-2014-5139) Race condition in ssl_parse_serverhello_tlsext (CVE-2014-3509) Double Free when processing DTLS packets (CVE-2014-3505) DTLS memory exhaustion (CVE-2014-3506) DTLS memory leak from zero-length fragments (CVE-2014-3507) OpenSSL DTLS anonymous EC(DH) denial of service (CVE-2014-3510) OpenSSL TLS protocol downgrade attack (CVE-2014-3511) SRP buffer overrun (CVE-2014-3512)
22 Jul 2014	OpenSSL 1.0.2-beta2
11 Jul 2014	OpenSSL fips-2.0.7
05 Jun 2014	OpenSSL 0.9.8za
05 Jun 2014	OpenSSL 1.0.0m
05 Jun 2014	OpenSSL 1.0.1h
05 Jun 2014	Security Advisory SSL/TLS MITM vulnerability (CVE-2014-0224) DTLS recursion flaw (CVE-2014-0221) DTLS invalid fragment vulnerability (CVE-2014-0195) SSL_MODE_RELEASE_BUFFERS NULL pointer dereference (CVE-2014-0198) SSL_MODE_RELEASE_BUFFERS session injection or denial of service (CVE-2010-5298) Anonymous ECDH denial of service (CVE-2014-3470)
12 May 2014	OpenSSL fips-2.0.6
07 Apr 2014	OpenSSL 1.0.1g
07 Apr 2014	Security Advisory TLS heartbeat read overrun (CVE-2014-0160)
24 Feb 2014	OpenSSL 1.0.2-beta1
06 Jan 2014	OpenSSL 1.0.1f
06 Jan 2014	OpenSSL 1.0.0l
16 Dec 2013	OpenSSL fips-2.0.5
16 Dec 2013	OpenSSL fips-2.0.4
10 Apr 2013	OpenSSL fips-2.0.2
10 Apr 2013	OpenSSL fips-2.0.3
11 Feb 2013	OpenSSL 1.0.1e
06 Feb 2013	OpenSSL 1.0.0k
05 Feb 2013	OpenSSL 0.9.8y
05 Feb 2013	OpenSSL 1.0.1d
05 Feb 2013	Security Advisory SSL, TLS and DTLS Plaintext Recovery Attack (CVE-2013-0169) TLS 1.1 and 1.2 AES-NI crash (CVE-2012-2686) OCSP invalid key DoS issue (CVE-2013-0166)
19 Oct 2012	OpenSSL fips-2.0-pl1
04 Oct 2012	OpenSSL fips-2.0.1
10 May 2012	OpenSSL 0.9.8x
10 May 2012	OpenSSL 1.0.0j
10 May 2012	OpenSSL 1.0.1c
10 May 2012	Security Advisory Invalid TLS/DTLS record attack (CVE-2012-2333)
26 Apr 2012	OpenSSL 1.0.1b
24 Apr 2012	Security Advisory ASN1 BIO incomplete fix (CVE-2012-2131)
23 Apr 2012	OpenSSL 0.9.8w
19 Apr 2012	OpenSSL 1.0.0i
19 Apr 2012	OpenSSL 0.9.8v
19 Apr 2012	OpenSSL 1.0.1a
19 Apr 2012	Security Advisory ASN1 BIO vulnerability (CVE-2012-2110)
14 Mar 2012	OpenSSL 1.0.1
12 Mar 2012	OpenSSL 0.9.8u
12 Mar 2012	OpenSSL 1.0.0h
12 Mar 2012	Security Advisory CMS and S/MIME Bleichenbacher attack (CVE-2012-0884)
23 Feb 2012	OpenSSL 1.0.1-beta3
19 Jan 2012	OpenSSL 1.0.1-beta2
18 Jan 2012	OpenSSL 0.9.8t
18 Jan 2012	OpenSSL 1.0.0g
18 Jan 2012	OpenSSL fips-2.0
18 Jan 2012	OpenSSL fips-2.0-rc9
18 Jan 2012	Security Advisory DTLS DoS attack (CVE-2012-0050)
04 Jan 2012	OpenSSL 1.0.0f
04 Jan 2012	OpenSSL 0.9.8s
04 Jan 2012	Security Advisory DTLS Plaintext Recovery Attack (CVE-2011-4108) Double-free in Policy Checks (CVE-2011-4109) Uninitialized SSL 3.0 Padding (CVE-2011-4576) Malformed RFC 3779 Data Can Cause Assertion Failures (CVE-2011-4577) SGC Restart DoS Attack (CVE-2011-4619) Invalid GOST parameters DoS Attack (CVE-2012-0027)
03 Jan 2012	OpenSSL 1.0.1-beta1
03 Jan 2012	OpenSSL fips-2.0-rc8
12 Dec 2011	OpenSSL fips-2.0-rc7
04 Dec 2011	OpenSSL fips-2.0-rc6
25 Nov 2011	OpenSSL fips-2.0-rc5
19 Nov 2011	OpenSSL fips-2.0-rc4
18 Nov 2011	OpenSSL fips-2.0-rc3
09 Nov 2011	OpenSSL fips-2.0-rc2
26 Oct 2011	OpenSSL fips-2.0-rc1
25 Sep 2011	OpenSSL fips-1.2.1
25 Sep 2011	OpenSSL fips-1.2.2
25 Sep 2011	OpenSSL fips-1.2.3
06 Sep 2011	OpenSSL 1.0.0e
06 Sep 2011	Security Advisory CRL verification vulnerability in OpenSSL TLS ephemeral ECDH crashes in OpenSSL
08 Feb 2011	OpenSSL 0.9.8r
08 Feb 2011	OpenSSL 1.0.0d
08 Feb 2011	Security Advisory OCSP stapling vulnerability in OpenSSL
02 Dec 2010	OpenSSL 1.0.0c
02 Dec 2010	OpenSSL 0.9.8q
02 Dec 2010	Security Advisory OpenSSL Ciphersuite Downgrade Attack OpenSSL JPAKE validation error
16 Nov 2010	OpenSSL 1.0.0b
16 Nov 2010	OpenSSL 0.9.8p
16 Nov 2010	Security Advisory TLS extension parsing race condition.
01 Jun 2010	OpenSSL 1.0.0a
01 Jun 2010	OpenSSL 0.9.8o
01 Jun 2010	Security Advisory Invalid ASN1 module definition for CMS. Invalid Return value check in pkey_rsa_verifyrecover
29 Mar 2010	OpenSSL 1.0.0
24 Mar 2010	OpenSSL 0.9.8n
24 Mar 2010	Security Advisory “Record of death” vulnerability in OpenSSL 0.9.8f through 0.9.8m
25 Feb 2010	OpenSSL 0.9.8m
20 Jan 2010	OpenSSL 1.0.0-beta5
20 Jan 2010	OpenSSL 0.9.8m-beta1
11 Nov 2009	Security Advisory Man-in-the-middle Renegotiation Attack
10 Nov 2009	OpenSSL 1.0.0-beta4
05 Nov 2009	OpenSSL 0.9.8l
15 Jul 2009	OpenSSL 1.0.0-beta3
21 Apr 2009	OpenSSL 1.0.0-beta2
01 Apr 2009	OpenSSL 1.0.0-beta1
25 Mar 2009	OpenSSL 0.9.8k
25 Mar 2009	Security Advisory ASN1 printing crash Incorrect Error Checking During CMS verification. Invalid ASN1 clearing check
07 Jan 2009	OpenSSL 0.9.8j
07 Jan 2009	Security Advisory Incorrect checks for malformed signatures
15 Sep 2008	OpenSSL 0.9.8i
28 May 2008	OpenSSL 0.9.8h
19 Oct 2007	OpenSSL 0.9.8g
11 Oct 2007	OpenSSL 0.9.8f
05 Oct 2007	OpenSSL fips-1.2.0
23 Feb 2007	OpenSSL 0.9.8e
23 Feb 2007	OpenSSL 0.9.7m
28 Sep 2006	OpenSSL 0.9.8d
28 Sep 2006	OpenSSL 0.9.7l
28 Sep 2006	Security Advisory ASN.1 Denial of Service Attacks (CVE-2006-2937, CVE-2006-2940) SSL_get_shared_ciphers() buffer overflow (CVE-2006-3738) SSLv2 Client Crash (CVE-2006-4343)
05 Sep 2006	OpenSSL 0.9.7k
05 Sep 2006	OpenSSL 0.9.8c
05 Sep 2006	Security Advisory RSA Signature Forgery (CVE-2006-4339)
04 May 2006	OpenSSL 0.9.8b
04 May 2006	OpenSSL 0.9.7j
07 Feb 2006	OpenSSL FIPS.1.0
14 Oct 2005	OpenSSL 0.9.7i
11 Oct 2005	OpenSSL 0.9.7h
11 Oct 2005	OpenSSL 0.9.8a
11 Oct 2005	Security Advisory Potential SSL 2.0 Rollback (CAN-2005-2969)
05 Jul 2005	OpenSSL 0.9.8
21 Jun 2005	OpenSSL 0.9.8-beta6
13 Jun 2005	OpenSSL 0.9.8-beta5
06 Jun 2005	OpenSSL 0.9.8-beta4
30 May 2005	OpenSSL 0.9.8-beta3
24 May 2005	OpenSSL 0.9.8-beta2
19 May 2005	OpenSSL 0.9.8-beta1
11 Apr 2005	OpenSSL 0.9.7g
22 Mar 2005	OpenSSL 0.9.7f
25 Oct 2004	OpenSSL 0.9.7e
17 Mar 2004	OpenSSL 0.9.6m
17 Mar 2004	OpenSSL engine-0.9.6m
17 Mar 2004	OpenSSL 0.9.7d
17 Mar 2004	Security Advisory 1. Null-pointer assignment during SSL handshake 2. Out-of-bounds read affects Kerberos ciphersuites
04 Nov 2003	OpenSSL 0.9.6l
04 Nov 2003	OpenSSL engine-0.9.6l
04 Nov 2003	Security Advisory Denial of Service in ASN.1 parsing
30 Sep 2003	OpenSSL 0.9.7c
30 Sep 2003	OpenSSL 0.9.6k
30 Sep 2003	OpenSSL engine-0.9.6k
30 Sep 2003	Security Advisory Vulnerabilities in ASN.1 parsing
10 Apr 2003	OpenSSL 0.9.6j
10 Apr 2003	OpenSSL 0.9.7b
10 Apr 2003	OpenSSL engine-0.9.6j
19 Mar 2003	Security Advisory Klima-Pokorny-Rosa attack on RSA in SSL/TLS
17 Mar 2003	Security Advisory
19 Feb 2003	OpenSSL 0.9.7a
19 Feb 2003	OpenSSL 0.9.6i
19 Feb 2003	OpenSSL engine-0.9.6i
19 Feb 2003	Security Advisory Timing-based attacks on SSL/TLS with CBC encryption
30 Dec 2002	OpenSSL 0.9.7
17 Dec 2002	OpenSSL 0.9.7-beta6
06 Dec 2002	OpenSSL 0.9.7-beta5
05 Dec 2002	OpenSSL 0.9.6h
05 Dec 2002	OpenSSL engine-0.9.6h
19 Nov 2002	OpenSSL 0.9.7-beta4
09 Aug 2002	OpenSSL 0.9.6g
09 Aug 2002	OpenSSL engine-0.9.6g
08 Aug 2002	OpenSSL 0.9.6f
08 Aug 2002	OpenSSL engine-0.9.6f
30 Jul 2002	OpenSSL 0.9.6e
30 Jul 2002	OpenSSL engine-0.9.6e
30 Jul 2002	OpenSSL 0.9.7-beta3
30 Jul 2002	Security Advisory
16 Jun 2002	OpenSSL 0.9.7-beta2
01 Jun 2002	OpenSSL 0.9.7-beta1
09 May 2002	OpenSSL 0.9.6d
09 May 2002	OpenSSL engine-0.9.6d
17 Apr 2002	OpenSSL 0.9.6d-beta1
17 Apr 2002	OpenSSL engine-0.9.6d-beta1
15 Feb 2002	OpenSSL engine-0.9.6c
21 Dec 2001	OpenSSL 0.9.6c
09 Jul 2001	OpenSSL 0.9.6b
09 Jul 2001	OpenSSL engine-0.9.6b
05 Apr 2001	OpenSSL engine-0.9.6a
05 Apr 2001	OpenSSL 0.9.6a
30 Mar 2001	OpenSSL 0.9.6a-beta3
30 Mar 2001	OpenSSL engine-0.9.6a-beta3
21 Mar 2001	OpenSSL 0.9.6a-beta2
21 Mar 2001	OpenSSL engine-0.9.6a-beta2
13 Mar 2001	OpenSSL 0.9.6a-beta1
13 Mar 2001	OpenSSL engine-0.9.6a-beta1
10 Oct 2000	OpenSSL 0.9.6
10 Oct 2000	OpenSSL 0.9.6-beta1
10 Oct 2000	OpenSSL 0.9.6-beta2
24 Sep 2000	OpenSSL engine-0.9.6
21 Sep 2000	OpenSSL 0.9.6-beta3
21 Sep 2000	OpenSSL engine-0.9.6-beta3
17 Sep 2000	OpenSSL engine-0.9.6-beta2
11 Sep 2000	OpenSSL engine-0.9.6-beta1
25 May 2000	OpenSSL 0.9.5
01 Apr 2000	OpenSSL 0.9.5a
23 Mar 2000	OpenSSL 0.9.5a-beta2
20 Mar 2000	OpenSSL 0.9.5a-beta1
27 Feb 2000	OpenSSL 0.9.5beta2
24 Feb 2000	OpenSSL 0.9.5beta1
09 Aug 1999	OpenSSL 0.9.4
29 May 1999	OpenSSL 0.9.3a
24 May 1999	OpenSSL 0.9.3
23 May 1999	OpenSSL 0.9.3beta2
20 May 1999	OpenSSL 0.9.3beta1
22 Mar 1999	OpenSSL 0.9.2b
23 Dec 1998	OpenSSL 0.9.1c
21 Dec 1998	OpenSSL SSLeay.0.8.1b
21 Dec 1998	OpenSSL SSLeay.0.9.0b
21 Dec 1998	OpenSSL SSLeay.0.9.1b