OpenSSL Release Announcement for 3.6.2, 3.5.6, 3.4.5, 3.3.7, 3.0.20, 1.1.1zg and 1.0.2zp

{
  "id": "059deb6603e10e7f18d856bd9d52f08508f76e6b59ccbe2bc91a85a0676bbf5b",
  "url": "https://openssl-library.org/post/2026-04-07-release-announcement/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "OpenSSL Release Announcement for 3.6.2, 3.5.6, 3.4.5, 3.3.7, 3.0.20, 1.1.1zg and 1.0.2zp",
    "summary": "OpenSSL released seven library versions containing security fixes. Versions 1.1.1zg and 1.0.2zp are for premium support customers only.",
    "evidence": "The OpenSSL Project team announces the release of new versions of our open-source toolkit for SSL/TLS.",
    "products": [
      {
        "name": {
          "value": "OpenSSL Library",
          "evidence": "OpenSSL Library 3.6.2"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.6.2",
            "evidence": "OpenSSL Library 3.6.2"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "OpenSSL Library",
          "evidence": "OpenSSL Library 3.5.6"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.5.6",
            "evidence": "OpenSSL Library 3.5.6"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "OpenSSL Library",
          "evidence": "OpenSSL Library 3.4.5"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.4.5",
            "evidence": "OpenSSL Library 3.4.5"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "OpenSSL Library",
          "evidence": "OpenSSL Library 3.3.7"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.3.7",
            "evidence": "OpenSSL Library 3.3.7"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "OpenSSL Library",
          "evidence": "OpenSSL Library 3.0.20"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.0.20",
            "evidence": "OpenSSL Library 3.0.20"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "OpenSSL Library",
          "evidence": "OpenSSL Library 1.1.1zg"
        },
        "prerequisites": [
          {
            "value": "premium support customers only",
            "evidence": "(premium support customers only)"
          }
        ],
        "fixed_versions": [
          {
            "value": "1.1.1zg",
            "evidence": "OpenSSL Library 1.1.1zg"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "OpenSSL Library",
          "evidence": "OpenSSL Library 1.0.2zp"
        },
        "prerequisites": [
          {
            "value": "premium support customers only",
            "evidence": "(premium support customers only)"
          }
        ],
        "fixed_versions": [
          {
            "value": "1.0.2zp",
            "evidence": "OpenSSL Library 1.0.2zp"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-31790",
        "evidence": "CVE-2026-31790 - Incorrect Failure Handling in RSA KEM RSASVE Encapsulation."
      },
      {
        "value": "CVE-2026-28386",
        "evidence": "CVE-2026-28386 - Out-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 Support."
      },
      {
        "value": "CVE-2026-28387",
        "evidence": "CVE-2026-28387 - Potential Use-after-free in DANE Client Code."
      },
      {
        "value": "CVE-2026-28388",
        "evidence": "CVE-2026-28388 - NULL Pointer Dereference When Processing a Delta CRL."
      },
      {
        "value": "CVE-2026-28389",
        "evidence": "CVE-2026-28389 - Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo."
      },
      {
        "value": "CVE-2026-28390",
        "evidence": "CVE-2026-28390 - Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo."
      },
      {
        "value": "CVE-2026-31789",
        "evidence": "CVE-2026-31789 - Heap Buffer Overflow in Hexadecimal Conversion."
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-openssl-news",
  "document_id": 24080,
  "published_at": "2026-04-07T00:00:00+00:00"
}