All pull requests

Pull requests

• Check for int overflow in ASN1_STRING_print_ex and X509_NAME_print_ex output lengths

  #3629·justsmth opened Oct 6, 2026Contributor·

  ·
  2

• Harden ACVP large-data hash handling

  #3628·nebeid opened Oct 5, 2026Contributor·

  ·
  6

• Bump the github-actions group with 3 updates

  dependencies
  #3627·dependabot[bot] opened Oct 5, 2026Bot·

  ·
  1

• Validate Ed25519 inputs in ACVP modulewrapper

  #3626·nebeid opened Oct 5, 2026Contributor·

  ·
  2

• Reject repeated AES-XTS data unit operations

  #3621·nebeid opened Oct 2, 2026Contributor·

  ·
  4

• [FIPS 4.x] Backport symbol versioning and crypto-policies support to fips-2025-09-12-lts

  #3618·WillChilds-Klein opened Oct 2, 2026Contributor·

  ·
  11

• docs(fips-2021-10-20-1MU): Update README with EOL status

  #3617·skmcgrail opened Oct 2, 2026Member·

  ·
  1

• docs(fips-2021-10-20): Update README with EOL status

  #3616·skmcgrail opened Oct 2, 2026Member·

  ·
  1

• Bump the pip-ci group in /tests/ci with 4 updates

  dependenciespython
  #3613·dependabot[bot] opened Oct 1, 2026Bot·

  ·

• Bump the cargo-ci-lambda group in /tests/ci/lambda with 2 updates

  dependenciesrust
  #3612·dependabot[bot] opened Oct 1, 2026Bot·

  ·

• Bump github.com/cloudflare/circl from 1.6.4 to 1.6.5 in /util/vecgen in the gomod-vecgen group

  dependenciesgo
  #3611·dependabot[bot] opened Oct 1, 2026Bot·

  ·

• Use s2n-bignum's formally verified AES-GCM kernels on Neoverse N1

  #3608·jargh opened Sep 30, 2026Contributor·

  ·
  4

• feat(duvet): x.509 name-constraint coverage

  documentation
  #3607·dougch opened Sep 30, 2026Contributor·

  ·
  2

• Bump urllib3 from 2.7.0 to 2.8.0 in /tests/ci

  dependenciespython
  #3606·dependabot[bot] opened Sep 30, 2026Bot·

  ·

• Apply the name-constraints CN fallback to the end-entity certificate only

  #3603·abelianbee opened Sep 29, 2026·

  ·
  6

• fix(ssl): check handshake state in ClientHello getters

  #3602·prasden opened Sep 29, 2026Contributor·

  ·
  2

• ML-DSA: reject trailing data in PKCS#8 private keys and check seed consistency bytewise

  #3582·stanleys12 opened Sep 27, 2026·

  ·
  4

• Clear unreported bytes written on early data reject

  #3581·stanleys12 opened Sep 27, 2026·

  ·
  6

• Adding separate file system for fork-PR's to run against

  #3580·spwalgren opened Sep 25, 2026Contributor·

  ·
  2

• Reject ECH configuration on DTLS connections

  #3578·WillChilds-Klein opened Sep 25, 2026Contributor·

  ·
  2

• Restrict permissions on secret files written by the CLI tools

  #3577·WillChilds-Klein opened Sep 25, 2026Contributor·

  ·
  3

• Scope OCSP noCheck exemption to the responder certificate

  #3576·WillChilds-Klein opened Sep 25, 2026Contributor·

  ·
  2

• CI: remove image write from the shared GitHub Actions runner role

  #3573·jakemas opened Sep 25, 2026Contributor·

  ·
  3

• CI: stop giving containers the Docker socket and PR-run credentials

  #3572·jakemas opened Sep 25, 2026Contributor·

  ·
  3

• CI: restrict image pushes from the shared GitHub Actions runners

  #3571·jakemas opened Sep 25, 2026Contributor·

  ·
  4