Download Latest Version OpenSSL 3.6.2 source code.tar.gz (55.1 MB)
Email in envelope

Get an email when there's a new version of OpenSSL Project

Home / openssl-3.0.20
Name Modified Size InfoDownloads / Week
Parent folder
openssl-3.0.20.tar.gz 2026-04-07 15.3 MB
openssl-3.0.20.tar.gz.asc 2026-04-07 833 Bytes
openssl-3.0.20.tar.gz.sha1 2026-04-07 64 Bytes
openssl-3.0.20.tar.gz.sha256 2026-04-07 88 Bytes
OpenSSL 3.0.20 source code.tar.gz 2026-04-07 15.4 MB
OpenSSL 3.0.20 source code.zip 2026-04-07 18.3 MB
README.md 2026-04-07 1.3 kB
Totals: 7 Items   49.0 MB 3

OpenSSL 3.0.20 is a security patch release. The most severe CVE fixed in this release is Moderate.

This release incorporates the following bug fixes and mitigations:

  • Fixed incorrect failure handling in RSA KEM RSASVE encapsulation. (CVE-2026-31790)

  • Fixed potential use-after-free in DANE client code. (CVE-2026-28387)

  • Fixed NULL pointer dereference when processing a delta CRL. (CVE-2026-28388)

  • Fixed possible NULL dereference when processing CMS KeyAgreeRecipientInfo. (CVE-2026-28389)

  • Fixed possible NULL dereference when processing CMS KeyTransportRecipientInfo. (CVE-2026-28390)

  • Fixed heap buffer overflow in hexadecimal conversion. (CVE-2026-31789)

Source: README.md, updated 2026-04-07