CVE-2024-13176

Issue summary: A timing side-channel which could potentially allow recoveringthe private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computationscould allow recovering the private key by an attacker. However, measuringthe timing would requ...

CVE-2024-12797

Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate aserver may fail to notice that the server was not authenticated, becausehandshakes don't abort as expected when the SSL_VERIFY_PEER verification modeis set. Impact summary: TLS and DTLS connections using raw public keys ma...

CVE-2025-4575

Issue summary: Use of -addreject option with the openssl x509 application addsa trusted use instead of a rejected use for a certificate. Impact summary: If a user intends to make a trusted certificate rejected fora particular use it will be instead marked as trusted for that use. A copy & paste err...