Re: [EXTERNAL] New OpenSSL Releases

The details of the issues this release addresses, and the associated fixes,
have not been made public at this time and are not in the git repository.
They will be made public next week.

Matt

On Wed, 24 Sept 2025 at 07:45, 'Martin Bonner' via openssl-users <
[email protected]> wrote:

> I forwarded the information internally, and a colleague asked for more
> details. I said there weren't any at the moment, and within 15 minutes he
> had replied pointing at the commit that is almost certainly the cause of
> this release.  Given it is so easy to find, is there any point in being so
> coy about what the problem is?
>
> Martin Bonner
>
>
> -----Original Message-----
> From: Tomas Mraz <[email protected]>
> Sent: 23 September 2025 14:57
> To: [email protected]; [email protected]
> Subject: [EXTERNAL] New OpenSSL Releases
>
> The OpenSSL project team would like to announce the upcoming release of
> OpenSSL versions 3.5.4, 3.4.3, 3.3.5, 3.2.5 and 3.0.18.
>
> We will be also releasing extended support OpenSSL versions 1.0.2zm and
> 1.1.1zd which will be available to premium support customers.
>
> These releases will be made available on Tuesday 30th September 2025
> between 1300-1700 UTC.
>
> These are security-fix releases. The highest severity issue fixed in each
> of these releases is Moderate:
>
> https://openssl-library.org/policies/general/security-policy/index.html
>
> Yours
> The OpenSSL Project Team
>
> --
> You received this message because you are subscribed to the Google Groups
> "openssl-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion visit
> https://groups.google.com/a/openssl.org/d/msgid/openssl-users/b6525571ac6bce35570fced2470872048a3af381.camel%40openssl.org
> .
> Any email and files/attachments transmitted with it are intended solely
> for the use of the individual or entity to whom they are addressed. If this
> message has been sent to you in error, you must not copy, distribute or
> disclose of the information it contains. Please notify Entrust immediately
> and delete the message from your system.
>
> --
> You received this message because you are subscribed to the Google Groups
> "openssl-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion visit
> https://groups.google.com/a/openssl.org/d/msgid/openssl-users/PH3PPF7A88A980A281EE072C788850361F9F31CA%40PH3PPF7A88A980A.namprd11.prod.outlook.com
> .
>

-- 
You received this message because you are subscribed to the Google Groups "openssl-project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-project/CAODx15fWmK0Pj_uiO6%3DXZKoj77cgg9GZ2VoRZe3rVmD3VF3%2BOw%40mail.gmail.com.