| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| openssl-3.6.2.tar.gz | 2026-04-07 | 54.9 MB | |
| openssl-3.6.2.tar.gz.asc | 2026-04-07 | 833 Bytes | |
| openssl-3.6.2.tar.gz.sha1 | 2026-04-07 | 63 Bytes | |
| openssl-3.6.2.tar.gz.sha256 | 2026-04-07 | 87 Bytes | |
| OpenSSL 3.6.2 source code.tar.gz | 2026-04-07 | 55.1 MB | |
| OpenSSL 3.6.2 source code.zip | 2026-04-07 | 58.8 MB | |
| README.md | 2026-04-07 | 1.7 kB | |
| Totals: 7 Items | 168.8 MB | 12 | |
OpenSSL 3.6.2 is a security patch release. The most severe CVE fixed in this release is Moderate.
This release incorporates the following bug fixes and mitigations:
-
Fixed incorrect failure handling in RSA KEM RSASVE encapsulation. (CVE-2026-31790)
-
Fixed loss of key agreement group tuple structure when the
DEFAULTkeyword is used in the server-side configuration of the key-agreement group list. (CVE-2026-2673) -
Fixed out-of-bounds read in AES-CFB-128 on x86-64 CPUs with AVX-512 support. (CVE-2026-28386)
-
Fixed potential use-after-free in DANE client code. (CVE-2026-28387)
-
Fixed NULL pointer dereference when processing a delta CRL. (CVE-2026-28388)
-
Fixed possible NULL dereference when processing CMS KeyAgreeRecipientInfo. (CVE-2026-28389)
-
Fixed possible NULL dereference when processing CMS KeyTransportRecipientInfo. (CVE-2026-28390)
-
Fixed heap buffer overflow in hexadecimal conversion. (CVE-2026-31789)