18 ### Fixed  subsection
20 * Fixed compilation with the latest version of BoringSSL.
21 * Fixed compilation when OpenSSL is compiled with `OPENSSL_NO_OCB`.
22 * Fixed a segfault in `X509VerifyParamRef::set_host` when called with an empty string.
33 ### Fixed  subsection
76 ### Fixed  subsection
87 ### Fixed  subsection
89 * Fixed injection vulnerabilities where OpenSSL's configuration mini-language could be used via `x5…
91 * Fixed several NULL pointer dereferences in OpenSSL that could be triggered via `x509::X509Extensi…
92 * Fixed a data-race with `x509::X509Name` that are created with `x509::X509NameBuilder` and then us…
93 * Fixed LibreSSL version checking. More functions should now be correctly available on LibreSSL.
104 ### Fixed  subsection
106 * Fixed a potential null-pointer deref when parsing a PKCS#12 archive with no identity.
107 * Fixed builds against OpenSSL built with `no-cast`.
108 * Fixed debug formatting of `GeneralName`.
131 ### Fixed  subsection
175 ### Fixed  subsection
177 * Fixed `MdCtxRef::digest_verify_init` to support `PKey`s with only public components.
181 ### Fixed  subsection
183 * Fixed a use-after-free in `Error::function` and `Error::file` with OpenSSL 3.x.
195 ### Fixed  subsection
197 * Fixed the openssl-sys dependency version.
226 ### Fixed  subsection
228 * Fixed linkage against OpenSSL distributions built with `no-chacha`.
247 ### Fixed  subsection
249 * Fixed a memory leak in `Deriver`.
267 ### Fixed  subsection
285 ### Fixed  subsection
287 * Fixed `Ssl::new` to take a `&SslContextRef` rather than `&SslContext`.
323 ### Fixed  subsection
347 ### Fixed  subsection
349 * Fixed a memory leak in `X509Builder::append_extension`.
364 ### Fixed  subsection
366 * Fixed the mutability of `Signer::sign_oneshot` and `Verifier::verify_oneshot`. This is unfortunat…
380 ### Fixed  subsection
382 * Fixed improper handling of the IV buffer in `envelope::{Seal, Unseal}`.
396 ### Fixed  subsection
398 * Fixed a memory leak in `EcdsaSig::from_private_components` when using OpenSSL 1.0.x.
407 ### Fixed  subsection
425 ### Fixed  subsection
427 * Fixed session callbacks when an `Ssl`'s context is replaced.
441 ### Fixed  subsection
443 * Fixed overly conservatifve buffer size checks in `Crypter` when using stream ciphers.
473 ### Fixed  subsection
475 * Fixed the return type of `ssl::cipher_name`.
505 ### Fixed  subsection
519 ### Fixed  subsection
521 * Fixed a double-free in the `SslContextBuilder::set_get_session_callback` API.
532 ### Fixed  subsection
534 * Fixed handling of SNI callbacks during renegotiation.
567 ### Fixed  subsection
569 * Fixed a use-after-free in `CmsContentInfo::sign`.
589 ### Fixed  subsection
648 * Fixed `PKey::private_key_from_der` to return a `PKey<Private>` rather than a `PKey<Public>`. This
658 ### Fixed  subsection
696 ### Fixed  subsection
709 ### Fixed  subsection
711 * Fixed a memory leak in `X509StoreBuilder::add_cert`.