{"url":"https://api.github.com/repos/openssl/openssl/releases/280307460","assets_url":"https://api.github.com/repos/openssl/openssl/releases/280307460/assets","upload_url":"https://uploads.github.com/repos/openssl/openssl/releases/280307460/assets{?name,label}","html_url":"https://github.com/openssl/openssl/releases/tag/openssl-3.6.1","id":280307460,"author":{"login":"openssl-machine","id":25405787,"node_id":"MDQ6VXNlcjI1NDA1Nzg3","avatar_url":"https://avatars.githubusercontent.com/u/25405787?v=4","gravatar_id":"","url":"https://api.github.com/users/openssl-machine","html_url":"https://github.com/openssl-machine","followers_url":"https://api.github.com/users/openssl-machine/followers","following_url":"https://api.github.com/users/openssl-machine/following{/other_user}","gists_url":"https://api.github.com/users/openssl-machine/gists{/gist_id}","starred_url":"https://api.github.com/users/openssl-machine/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openssl-machine/subscriptions","organizations_url":"https://api.github.com/users/openssl-machine/orgs","repos_url":"https://api.github.com/users/openssl-machine/repos","events_url":"https://api.github.com/users/openssl-machine/events{/privacy}","received_events_url":"https://api.github.com/users/openssl-machine/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAHR-9c4QtScE","tag_name":"openssl-3.6.1","target_commitish":"master","name":"OpenSSL 3.6.1","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-01-27T13:33:56Z","updated_at":"2026-01-27T13:52:16Z","published_at":"2026-01-27T13:52:16Z","assets":[{"url":"https://api.github.com/repos/openssl/openssl/releases/assets/346641624","id":346641624,"node_id":"RA_kwDOAHR-9c4UqVTY","name":"openssl-3.6.1.tar.gz","label":"","uploader":{"login":"openssl-machine","id":25405787,"node_id":"MDQ6VXNlcjI1NDA1Nzg3","avatar_url":"https://avatars.githubusercontent.com/u/25405787?v=4","gravatar_id":"","url":"https://api.github.com/users/openssl-machine","html_url":"https://github.com/openssl-machine","followers_url":"https://api.github.com/users/openssl-machine/followers","following_url":"https://api.github.com/users/openssl-machine/following{/other_user}","gists_url":"https://api.github.com/users/openssl-machine/gists{/gist_id}","starred_url":"https://api.github.com/users/openssl-machine/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openssl-machine/subscriptions","organizations_url":"https://api.github.com/users/openssl-machine/orgs","repos_url":"https://api.github.com/users/openssl-machine/repos","events_url":"https://api.github.com/users/openssl-machine/events{/privacy}","received_events_url":"https://api.github.com/users/openssl-machine/received_events","type":"User","user_view_type":"public","site_admin":false},"content_type":"application/x-gtar","state":"uploaded","size":54891951,"digest":"sha256:b1bfedcd5b289ff22aee87c9d600f515767ebf45f77168cb6d64f231f518a82e","download_count":489886,"created_at":"2026-01-27T13:49:05Z","updated_at":"2026-01-27T13:49:22Z","browser_download_url":"https://github.com/openssl/openssl/releases/download/openssl-3.6.1/openssl-3.6.1.tar.gz"},{"url":"https://api.github.com/repos/openssl/openssl/releases/assets/346641627","id":346641627,"node_id":"RA_kwDOAHR-9c4UqVTb","name":"openssl-3.6.1.tar.gz.asc","label":"","uploader":{"login":"openssl-machine","id":25405787,"node_id":"MDQ6VXNlcjI1NDA1Nzg3","avatar_url":"https://avatars.githubusercontent.com/u/25405787?v=4","gravatar_id":"","url":"https://api.github.com/users/openssl-machine","html_url":"https://github.com/openssl-machine","followers_url":"https://api.github.com/users/openssl-machine/followers","following_url":"https://api.github.com/users/openssl-machine/following{/other_user}","gists_url":"https://api.github.com/users/openssl-machine/gists{/gist_id}","starred_url":"https://api.github.com/users/openssl-machine/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openssl-machine/subscriptions","organizations_url":"https://api.github.com/users/openssl-machine/orgs","repos_url":"https://api.github.com/users/openssl-machine/repos","events_url":"https://api.github.com/users/openssl-machine/events{/privacy}","received_events_url":"https://api.github.com/users/openssl-machine/received_events","type":"User","user_view_type":"public","site_admin":false},"content_type":"text/plain; charset=utf-8","state":"uploaded","size":833,"digest":"sha256:a549571f98ac883a6eca7a2c21021a9d2129e6f4bcad2a261f9bd2487fb80f4b","download_count":4518,"created_at":"2026-01-27T13:49:05Z","updated_at":"2026-01-27T13:49:05Z","browser_download_url":"https://github.com/openssl/openssl/releases/download/openssl-3.6.1/openssl-3.6.1.tar.gz.asc"},{"url":"https://api.github.com/repos/openssl/openssl/releases/assets/346641628","id":346641628,"node_id":"RA_kwDOAHR-9c4UqVTc","name":"openssl-3.6.1.tar.gz.sha1","label":"","uploader":{"login":"openssl-machine","id":25405787,"node_id":"MDQ6VXNlcjI1NDA1Nzg3","avatar_url":"https://avatars.githubusercontent.com/u/25405787?v=4","gravatar_id":"","url":"https://api.github.com/users/openssl-machine","html_url":"https://github.com/openssl-machine","followers_url":"https://api.github.com/users/openssl-machine/followers","following_url":"https://api.github.com/users/openssl-machine/following{/other_user}","gists_url":"https://api.github.com/users/openssl-machine/gists{/gist_id}","starred_url":"https://api.github.com/users/openssl-machine/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openssl-machine/subscriptions","organizations_url":"https://api.github.com/users/openssl-machine/orgs","repos_url":"https://api.github.com/users/openssl-machine/repos","events_url":"https://api.github.com/users/openssl-machine/events{/privacy}","received_events_url":"https://api.github.com/users/openssl-machine/received_events","type":"User","user_view_type":"public","site_admin":false},"content_type":"application/octet-stream","state":"uploaded","size":63,"digest":"sha256:d00c4f940d9d97d1ed28608d989ad22676297d53f379cc8a0758e35efda482a5","download_count":803,"created_at":"2026-01-27T13:49:05Z","updated_at":"2026-01-27T13:49:05Z","browser_download_url":"https://github.com/openssl/openssl/releases/download/openssl-3.6.1/openssl-3.6.1.tar.gz.sha1"},{"url":"https://api.github.com/repos/openssl/openssl/releases/assets/346641626","id":346641626,"node_id":"RA_kwDOAHR-9c4UqVTa","name":"openssl-3.6.1.tar.gz.sha256","label":"","uploader":{"login":"openssl-machine","id":25405787,"node_id":"MDQ6VXNlcjI1NDA1Nzg3","avatar_url":"https://avatars.githubusercontent.com/u/25405787?v=4","gravatar_id":"","url":"https://api.github.com/users/openssl-machine","html_url":"https://github.com/openssl-machine","followers_url":"https://api.github.com/users/openssl-machine/followers","following_url":"https://api.github.com/users/openssl-machine/following{/other_user}","gists_url":"https://api.github.com/users/openssl-machine/gists{/gist_id}","starred_url":"https://api.github.com/users/openssl-machine/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openssl-machine/subscriptions","organizations_url":"https://api.github.com/users/openssl-machine/orgs","repos_url":"https://api.github.com/users/openssl-machine/repos","events_url":"https://api.github.com/users/openssl-machine/events{/privacy}","received_events_url":"https://api.github.com/users/openssl-machine/received_events","type":"User","user_view_type":"public","site_admin":false},"content_type":"application/octet-stream","state":"uploaded","size":87,"digest":"sha256:e3f3baadfd144b16ae2dafacab33807cbd70bd964cffd954aff2257c89c3bea8","download_count":3325,"created_at":"2026-01-27T13:49:05Z","updated_at":"2026-01-27T13:49:05Z","browser_download_url":"https://github.com/openssl/openssl/releases/download/openssl-3.6.1/openssl-3.6.1.tar.gz.sha256"}],"tarball_url":"https://api.github.com/repos/openssl/openssl/tarball/openssl-3.6.1","zipball_url":"https://api.github.com/repos/openssl/openssl/zipball/openssl-3.6.1","body":"OpenSSL 3.6.1 is a security patch release. The most severe CVE fixed in this\r\nrelease is High.\r\n\r\nThis release incorporates the following bug fixes and mitigations:\r\n\r\n  * Fixed Improper validation of PBMAC1 parameters in PKCS#12 MAC verification.\r\n    ([CVE-2025-11187])\r\n\r\n  * Fixed Stack buffer overflow in CMS `AuthEnvelopedData` parsing.\r\n    ([CVE-2025-15467])\r\n\r\n  * Fixed NULL dereference in `SSL_CIPHER_find()` function on unknown cipher ID.\r\n    ([CVE-2025-15468])\r\n\r\n  * Fixed `openssl dgst` one-shot codepath silently truncates inputs >16 MiB.\r\n    ([CVE-2025-15469])\r\n\r\n  * Fixed TLS 1.3 `CompressedCertificate` excessive memory allocation.\r\n    ([CVE-2025-66199])\r\n\r\n  * Fixed Heap out-of-bounds write in `BIO_f_linebuffer` on short writes.\r\n    ([CVE-2025-68160])\r\n\r\n  * Fixed Unauthenticated/unencrypted trailing bytes with low-level OCB\r\n    function calls.\r\n    ([CVE-2025-69418])\r\n\r\n  * Fixed Out of bounds write in `PKCS12_get_friendlyname()` UTF-8 conversion.\r\n    ([CVE-2025-69419])\r\n\r\n  * Fixed Missing `ASN1_TYPE` validation in `TS_RESP_verify_response()`\r\n    function.\r\n    ([CVE-2025-69420])\r\n\r\n  * Fixed NULL Pointer Dereference in `PKCS12_item_decrypt_d2i_ex()` function.\r\n    ([CVE-2025-69421])\r\n\r\n  * Fixed Missing `ASN1_TYPE` validation in PKCS#12 parsing.\r\n    ([CVE-2026-22795])\r\n\r\n  * Fixed `ASN1_TYPE` Type Confusion in the `PKCS7_digest_from_attributes()`\r\n    function.\r\n    ([CVE-2026-22796])\r\n\r\n  * Fixed a regression in `X509_V_FLAG_CRL_CHECK_ALL` flag handling by\r\n    restoring its pre-3.6.0 behaviour.\r\n\r\n  * Fixed a regression in handling stapled OCSP responses causing handshake\r\n    failures for OpenSSL 3.6.0 servers with various client implementations.\r\n\r\n[CVE-2026-22796]: https://www.openssl.org/news/vulnerabilities.html#CVE-2026-22796\r\n[CVE-2026-22795]: https://www.openssl.org/news/vulnerabilities.html#CVE-2026-22795\r\n[CVE-2025-69421]: https://www.openssl.org/news/vulnerabilities.html#CVE-2025-69421\r\n[CVE-2025-69420]: https://www.openssl.org/news/vulnerabilities.html#CVE-2025-69420\r\n[CVE-2025-69419]: https://www.openssl.org/news/vulnerabilities.html#CVE-2025-69419\r\n[CVE-2025-69418]: https://www.openssl.org/news/vulnerabilities.html#CVE-2025-69418\r\n[CVE-2025-68160]: https://www.openssl.org/news/vulnerabilities.html#CVE-2025-68160\r\n[CVE-2025-66199]: https://www.openssl.org/news/vulnerabilities.html#CVE-2025-66199\r\n[CVE-2025-15469]: https://www.openssl.org/news/vulnerabilities.html#CVE-2025-15469\r\n[CVE-2025-15468]: https://www.openssl.org/news/vulnerabilities.html#CVE-2025-15468\r\n[CVE-2025-15467]: https://www.openssl.org/news/vulnerabilities.html#CVE-2025-15467\r\n[CVE-2025-11187]: https://www.openssl.org/news/vulnerabilities.html#CVE-2025-11187","discussion_url":"https://github.com/openssl/openssl/discussions/29801","reactions":{"url":"https://api.github.com/repos/openssl/openssl/releases/280307460/reactions","total_count":15,"+1":6,"-1":0,"laugh":0,"hooray":5,"confused":0,"heart":4,"rocket":0,"eyes":0}}