Bugs in source package openssl -- Debian Bug report logs

Outstanding bugs -- Important bugs; Unclassified (1 bug)
Outstanding bugs -- Normal bugs; Unclassified (30 bugs)
Outstanding bugs -- Minor bugs; Unclassified (10 bugs)
Outstanding bugs -- Minor bugs; Will Not Fix (1 bug)
Outstanding bugs -- Wishlist items; Unclassified (8 bugs)
Forwarded bugs -- Wishlist items (1 bug)
Pending Upload bugs -- Normal bugs (1 bug)
Resolved bugs -- Normal bugs (2 bugs)
Resolved bugs -- Wishlist items (1 bug)

#1094576 [i| | ] [openssl-provider-fips] openssl-provider-fips: package is not FIPS compliant
Reported by: Peter Wu <[email protected]>; Date: Tue, 28 Jan 2025 22:00:01 UTC; Severity: important; Found in version openssl/3.4.0-2; Filed 332 days ago; Modified 163 days ago;

#332498 [n| |☣] [wnpp] RFH: openssl -- Secure Socket Layer (SSL) binary and related cryptographic tools
Reported by: Christoph Martin <[email protected]>; Date: Thu, 6 Oct 2005 20:18:02 UTC; Owned by: [email protected]; Severity: normal; Filed 20 years and 86 days ago; Modified 28 days ago;
#524082 [n| | ] [openssl] openssl: s_client ignores depth if certificate chain is valid
Reported by: Romain Francoise <[email protected]>; Date: Tue, 14 Apr 2009 18:03:01 UTC; Severity: normal; Found in version openssl/0.9.8g-16; Filed 16 years and 260 days ago; Modified 16 years and 260 days ago;
#588267 [n| | ] [openssl] openssl randomly get into endless loop when using pipe output and limited read in sub process
Reported by: Gabriel CORRE <[email protected]>; Date: Tue, 6 Jul 2010 16:51:05 UTC; Severity: normal; Found in version openssl/0.9.8g-15+lenny7; Filed 15 years and 177 days ago; Modified 15 years and 177 days ago;
#611054 [n| | ] [openssl] /usr/bin/openssl without gost engine
Reported by: Stanislav Vlasov <[email protected]>; Date: Tue, 25 Jan 2011 05:15:02 UTC; Severity: normal; Found in versions openssl/1.0.0c-2, openssl/1.0.1e-3; Filed 14 years and 339 days ago; Modified 12 years and 121 days ago;
#611743 [n| | ] [openssl] openssl smime -verify can't verify binary messages without CRLF
Reported by: John Hughes <[email protected]>; Date: Tue, 1 Feb 2011 16:27:06 UTC; Severity: normal; Found in version openssl/0.9.8o-4; Filed 14 years and 332 days ago;
#616352 [n| | ] [openssl] openssl pkcs12 emits and requires DER-encded data; man page says PEM-encoded
Reported by: Daniel Kahn Gillmor <[email protected]>; Date: Thu, 3 Mar 2011 17:57:05 UTC; Severity: normal; Found in versions openssl/0.9.8o-5, openssl/1.0.0c-2; Filed 14 years and 302 days ago; Modified 14 years and 302 days ago;
#650332 [n| | ] [openssl] -extensions XXX can be specified on command line and openssl will silently ignore it
Reported by: xavier renaut <[email protected]>; Date: Mon, 28 Nov 2011 22:21:02 UTC; Severity: normal; Found in version openssl/1.0.0e-2; Filed 14 years and 32 days ago; Modified 14 years and 32 days ago;
#672456 [n|S| ] [openssl] CVE-2011-1473: SSL/TLS DoS via repeated SSL session renegotiations
Reported by: Henri Salo <[email protected]>; Date: Fri, 11 May 2012 08:21:01 UTC; Severity: normal; Tags: security; Found in version openssl/0.9.8o-4squeeze12; Filed 13 years and 232 days ago; Modified 13 years and 165 days ago;
#681612 [n| | ] [openssl] libssl1.0.0: fishy reliance on errno when errno is not set
Reported by: Marc Lehmann <[email protected]>; Date: Sat, 14 Jul 2012 18:48:01 UTC; Severity: normal; Found in version openssl/1.0.1-4; Filed 13 years and 168 days ago; Modified 9 years and 169 days ago;
#698219 [n| | ] [openssl] [dget] error:14077458:SSL routines:SSL23_GET_SERVER_HELLO:reason(1112)
Reported by: Mathieu Malaterre <[email protected]>; Date: Tue, 15 Jan 2013 12:48:02 UTC; Severity: normal; Filed 12 years and 348 days ago; Modified 10 years and 344 days ago;
#742240 [n| | ] [openssl] libssl1.0.0: TLSv1_client_method()/SSL_Connect() heap overrun
Reported by: Brandon <[email protected]>; Date: Fri, 21 Mar 2014 06:06:02 UTC; Severity: normal; Found in version openssl/1.0.1e-2+deb7u4; Filed 11 years and 283 days ago; Modified 8 years and 115 days ago;
#747469 [n|u| ] [src:openssl] openssl s_client -starttls hangs on XMPP s2s connections
Reported by: Benny Baumann <[email protected]>; Date: Fri, 9 May 2014 06:09:01 UTC; Severity: normal; Tags: upstream; Filed 11 years and 234 days ago; Modified 8 years and 161 days ago;
#747470 [n|u| ] [src:openssl] openssl s_client refuses to be silent
Reported by: Benny Baumann <[email protected]>; Date: Fri, 9 May 2014 06:15:01 UTC; Severity: normal; Tags: upstream; Filed 11 years and 234 days ago; Modified 11 years and 234 days ago;
#749473 [n| | ] [openssl] libssl1.0.0: postinst recommends using /etc/init.d/ instead of service or invoke-rc.d
Reported by: Paul Wise <[email protected]>; Date: Tue, 27 May 2014 08:24:01 UTC; Severity: normal; Found in version openssl/1.0.1g-4; Filed 11 years and 216 days ago; Modified 9 years and 169 days ago;
#757446 [n| | ] [openssl] libssl1.0.0: services are not restarted when upgrading
Reported by: Gaudenz Steinlin <[email protected]>; Date: Fri, 8 Aug 2014 09:39:02 UTC; Severity: normal; Found in version openssl/1.0.1e-2+deb7u12; Filed 11 years and 143 days ago; Modified 9 years and 169 days ago;
#766463 [n| | ] [openssl] ocsp: glibc free(): invalid pointer
Reported by: Hervé COMMOWICK <[email protected]>; Date: Thu, 23 Oct 2014 10:21:02 UTC; Severity: normal; Found in version openssl/1.0.1e-2+deb7u13; Filed 11 years and 67 days ago; Modified 11 years and 67 days ago;
#767528 [n| | ] [openssl] openssl: copy_extensions = copy does not automatically set certificate version to v3
Reported by: Tom <[email protected]>; Date: Fri, 31 Oct 2014 18:48:01 UTC; Severity: normal; Found in version openssl/1.0.1e-2+deb7u13; Filed 11 years and 59 days ago; Modified 11 years and 59 days ago;
#781102 [n| | ] [openssl] typo in ciphers(1) man page
Reported by: Gedalya <[email protected]>; Date: Tue, 24 Mar 2015 14:57:01 UTC; Severity: normal; Found in version openssl/1.0.1k-1; Filed 10 years and 280 days ago; Modified 10 years and 280 days ago;
#791898 [n| | ] [openssl] openssl: sendmail fails to send mails to some mail servers. Deferred: 403 4.7.0 TLS handshake failed.
Reported by: F Schafhauser <[email protected]>; Date: Thu, 9 Jul 2015 10:48:02 UTC; Severity: normal; Found in version openssl/1.0.1e-2+deb7u17; Filed 10 years and 173 days ago; Modified 10 years and 173 days ago;
#793565 [n| | ] [openssl] libssl1.0.0: HMAC broken after upgrade to 1.0.2d-1
Reported by: Marc Lehmann <[email protected]>; Date: Sat, 25 Jul 2015 07:03:02 UTC; Severity: normal; Found in version openssl/1.0.2d-1; Filed 10 years and 157 days ago; Modified 9 years and 169 days ago;
#803135 [n| |☺] [openssl] openssl: unknown option "-verify_host"
Reported by: Damien Mure <[email protected]>; Date: Tue, 27 Oct 2015 09:30:02 UTC; Severity: normal; Found in version openssl/1.0.2d-1; Fixed in versions openssl/3.5.4-1, openssl/3.5.4-1~deb13u1, openssl/3.6.0-1; Filed 10 years and 63 days ago; Modified 13 days ago;
#809527 [n| | ] [openssl] libssl1.0.0: debconf database not purged on package purge
Reported by: Vincent Lefevre <[email protected]>; Date: Thu, 31 Dec 2015 18:39:02 UTC; Severity: normal; Found in version openssl/1.0.2d-1; Filed 9 years and 363 days ago; Modified 9 years and 169 days ago;
#810752 [n| | ] [openssl] openssl s_server -www does not send a Content-Length header
Reported by: Vincent Lefevre <[email protected]>; Date: Mon, 11 Jan 2016 22:54:01 UTC; Severity: normal; Found in version openssl/1.0.2e-1; Filed 9 years and 352 days ago; Modified 9 years and 352 days ago;
#861285 [n|u| ] [openssl] openssl enc -k path-for-keyphrase-file ...c does not fail if the keyphrase-file is missing.
Reported by: "ISHIKAWA,chiaki" <[email protected]>; Date: Wed, 26 Apr 2017 23:57:02 UTC; Severity: normal; Tags: upstream; Found in version openssl/1.1.0e-1; Filed 8 years and 246 days ago; Modified 8 years and 245 days ago;
#867715 [n| | ] [openssl] openssl: "unknown group" error messages from 'openssl speed' ECDSA and ECDH
Reported by: Matthew Woodcraft <[email protected]>; Date: Sat, 8 Jul 2017 21:12:01 UTC; Severity: normal; Found in version openssl/1.1.0f-3; Filed 8 years and 173 days ago; Modified 8 years and 173 days ago;
#876403 [n| | ] [openssl] Ship ct_log_list.cnf so -ct works
Reported by: Josh Triplett <[email protected]>; Date: Thu, 21 Sep 2017 19:06:01 UTC; Severity: normal; Found in version openssl/1.1.0f-3; Filed 8 years and 98 days ago; Modified 7 years and 274 days ago;
#930792 [n| | ] [openssl] openssl: libssl1.1 does not restart services on upgrade
Reported by: Dimitri John Ledkov <[email protected]>; Date: Thu, 20 Jun 2019 17:51:02 UTC; Severity: normal; Found in version 1.1.1; Filed 6 years and 191 days ago; Modified 6 years and 191 days ago;
#930793 [n| | ] [openssl] openssl: libssl1.1 uses unguarded debconf prompt for a question it does not ship
Reported by: Dimitri John Ledkov <[email protected]>; Date: Thu, 20 Jun 2019 17:54:02 UTC; Severity: normal; Found in version 1.1.1b-2ubuntu1; Filed 6 years and 191 days ago; Modified 6 years and 191 days ago;
#934921 [n| |☺] [openssl] openssl: Wrong regular expression in /usr/bin/c_rehash
Reported by: Andreas Gryphius <[email protected]>; Date: Fri, 16 Aug 2019 16:30:02 UTC; Severity: normal; Found in version openssl/1.1.1c-1; Fixed in versions openssl/3.5.4-1~deb13u1, openssl/3.6.0-1, openssl/3.5.4-1; Filed 6 years and 134 days ago; Modified 13 days ago;
#1053180 [n| | ] [openssl] openssl: Make RSA decryption API safe to use with PKCS#1 v1.5 padding (Marvin/Bleichenbacher)
Reported by: Matt Taggart <[email protected]>; Date: Thu, 28 Sep 2023 20:09:01 UTC; Severity: normal; Found in version openssl/3.0.11-1; Filed 2 years and 90 days ago; Modified 2 years and 90 days ago;

#520021 [m| | ] [openssl] libpam0g.postinst uses /bin/bash instead of /bin/sh
Reported by: Stefan Monnier <[email protected]>; Date: Mon, 16 Mar 2009 14:51:01 UTC; Severity: minor; Filed 16 years and 289 days ago; Modified 8 years and 277 days ago;
#642419 [m| | ] [openssl] [openssl] issues in descriptions (no manual pages in libssl-dev)
Reported by: Filipus Klutiero <[email protected]>; Date: Thu, 22 Sep 2011 14:45:02 UTC; Severity: minor; Found in version 1.0.0e-2; Filed 14 years and 99 days ago; Modified 14 years and 99 days ago;
#656381 [m| | ] [libssl-doc] libssl-doc: Redundant 'documentation' in the synopsis
Reported by: Vincent Blut <[email protected]>; Date: Wed, 18 Jan 2012 21:54:18 UTC; Severity: minor; Filed 13 years and 346 days ago; Modified 13 years and 346 days ago;
#683158 [m| | ] [openssl] several openssl commands claim ssl2 is supported
Reported by: Laurent Bigonville <[email protected]>; Date: Sun, 29 Jul 2012 10:06:01 UTC; Severity: minor; Found in version openssl/1.0.1c-3; Filed 13 years and 153 days ago; Modified 9 years and 301 days ago;
#686056 [m| | ] [openssl] openssl: Date after back to 1906, after y generate a certificate changing the years to 10 via /usr/lib/ssl/misc/CA.pl with option -newca
Reported by: Kevin Garay <[email protected]>; Date: Tue, 28 Aug 2012 05:15:01 UTC; Severity: minor; Found in version openssl/0.9.8o-4squeeze13; Filed 13 years and 123 days ago; Modified 13 years and 123 days ago;
#740178 [m| | ] [openssl] openssl(1) refers to incorrect sections for subcommands
Reported by: Dominic Hargreaves <[email protected]>; Date: Wed, 26 Feb 2014 15:45:01 UTC; Severity: minor; Found in version openssl/1.0.1f-1; Filed 11 years and 306 days ago; Modified 11 years and 306 days ago;
#769783 [m| | ] [openssl] unknown options appear in error output
Reported by: 積丹尼 Dan Jacobson <[email protected]>; Date: Sun, 16 Nov 2014 12:33:01 UTC; Severity: minor; Found in version openssl/1.0.2~beta2-1; Filed 11 years and 43 days ago; Modified 11 years and 43 days ago;
#790883 [m|u| ] [openssl] enc -d -base64 doesn't work when there's no final \n
Reported by: Jean-Michel Vourgère <[email protected]>; Date: Thu, 2 Jul 2015 16:21:02 UTC; Severity: minor; Tags: upstream; Found in version openssl/1.0.1k-3+deb8u1; Filed 10 years and 180 days ago; Modified 2 years and 344 days ago;
#808721 [m| | ] [libc6, pam, openssl] libc6,pam,openssl: avoid negative questions in restart-without-asking debconf knob
Reported by: Daniel Shahaf <[email protected]>; Date: Tue, 22 Dec 2015 07:45:02 UTC; Severity: minor; Filed 10 years and 7 days ago; Modified 10 years and 1 day ago;
#921621 [m| | ] [openssl] openssl: cipher list includes entries not available for "speed"
Reported by: Philipp Marek <[email protected]>; Date: Thu, 7 Feb 2019 11:39:02 UTC; Severity: minor; Found in version openssl/1.1.1a-1; Filed 6 years and 324 days ago; Modified 6 years and 324 days ago;

#545670 [m|☹| ] [openssl] openssl speed: "The 'numbers' are in 1000s of bytes" abiguous
Reported by: Bernhard Kuemel <[email protected]>; Date: Tue, 8 Sep 2009 11:03:37 UTC; Severity: minor; Tags: wontfix; Found in version openssl/0.9.8k-3; Filed 16 years and 113 days ago; Modified 14 years and 179 days ago;

#189622 [w| | ] [openssl] openssl: should include nice key generation utility from RedHat
Reported by: Matt Taggart <[email protected]>; Date: Sat, 19 Apr 2003 00:48:03 UTC; Severity: wishlist; Found in version 0.9.7b-1; Filed 22 years and 258 days ago; Modified 22 years and 258 days ago;
#210757 [w| | ] [openssl] openssl: s_client -verify should (optionally) exit with error on verification failure
Reported by: Hein Roehrig <[email protected]>; Date: Sat, 13 Sep 2003 13:33:11 UTC; Severity: wishlist; Found in version 0.9.7b-2; Filed 22 years and 110 days ago; Modified 11 years and 87 days ago;
#289069 [w| | ] [openssl] openssl: should support -passout file:/dev/null
Reported by: Jan Minar <[email protected]>; Date: Fri, 7 Jan 2005 00:33:05 UTC; Severity: wishlist; Found in version 0.9.7e-2; Filed 20 years and 359 days ago; Modified 20 years and 359 days ago;
#298858 [w| | ] [openssl] openssl: [CA.pl] Change to use standard GNU --long and -s short option syntax
Reported by: Jari Aalto <[email protected]>; Date: Thu, 10 Mar 2005 12:18:01 UTC; Severity: wishlist; Found in version 0.9.7e-3; Filed 20 years and 296 days ago; Modified 4 years and 96 days ago;
#315522 [w| | ] [openssl] openssl: should include -timeout option
Reported by: Ville Nummela <[email protected]>; Date: Thu, 23 Jun 2005 10:33:23 UTC; Severity: wishlist; Found in version 0.9.7e-2; Filed 20 years and 191 days ago; Modified 20 years and 191 days ago;
#594899 [w| | ] [openssl] s_client: would like to be able to specify the source address
Reported by: Toni Mueller <[email protected]>; Date: Mon, 30 Aug 2010 14:18:02 UTC; Severity: wishlist; Found in version openssl/0.9.8g-15+lenny7; Filed 15 years and 122 days ago; Modified 15 years and 122 days ago;
#863429 [w|u| ] [openssl] openssl: Please make long-running commands such as dhparam 4096 multithreaded.
Reported by: Brian Minton <[email protected]>; Date: Fri, 26 May 2017 17:45:02 UTC; Severity: wishlist; Tags: upstream; Found in version openssl/1.1.0f-1; Filed 8 years and 216 days ago; Modified 8 years and 216 days ago;
#951267 [w|u| ] [openssl] openssl: pkcs12 -export cannot read .p12 file
Reported by: Thorsten Glaser <[email protected]>; Date: Thu, 13 Feb 2020 15:15:02 UTC; Severity: wishlist; Tags: upstream; Found in version openssl/1.1.1d-2; Filed 5 years and 318 days ago; Modified 5 years and 318 days ago;

#1009934 [w|U+|↝] [src:openssl] openssl: reproducible-builds: Embeded compiler flags contain build paths
Reported by: Vagrant Cascadian <[email protected]>; Date: Wed, 20 Apr 2022 22:51:01 UTC; Severity: wishlist; Tags: fixed-upstream, patch; Forwarded to https://github.com/openssl/openssl/pull/11545; Filed 3 years and 251 days ago; Modified 1 year and 270 days ago;

#1119853 [n|P|☣] [release.debian.org] bookworm-pu: package openssl/3.0.18-1~deb12u1
Reported by: Sebastian Andrzej Siewior <[email protected]>; Date: Sat, 1 Nov 2025 12:51:01 UTC; Severity: normal; Tags: bookworm, pending; Filed 55 days ago; Modified 20 days ago;

#528804 [n| | ] [openssl] dgst, ca, x509, req, ... man pages in 1ssl should mention all supported digests
Reported by: Daniel Kahn Gillmor <[email protected]>; Date: Fri, 15 May 2009 18:09:04 UTC; Severity: normal; Found in version openssl/0.9.8g-16; Done: Bart Martens <[email protected]>; Can be archived in 15 days; Filed 16 years and 229 days ago; Modified 13 days ago;
#1123533 [n| |☺] [src:openssl] libssl3t64:arm64 (= 3.5.4-1) broken
Reported by: windowsair <[email protected]>; Date: Wed, 17 Dec 2025 11:35:04 UTC; Severity: normal; Found in version openssl/3.5.4-1; Fixed in version 3.5.4-1; Done: windowsair <[email protected]>; Filed 9 days ago; Modified 8 days ago;

#272281 [w| | ] [openssl] include musclecard engine support in openssl
Reported by: "A. Maitland Bottoms" <[email protected]>; Date: Sat, 18 Sep 2004 23:33:03 UTC; Severity: wishlist; Done: Bastian Germann <[email protected]>; Can be archived in 25 days; Filed 21 years and 104 days ago;

Status
- 50 Outstanding
- 1 Forwarded
- 1 Pending Upload
- 3 Resolved
Severity
- 1 Important bugs
- 33 Normal bugs
- 11 Minor bugs
- 10 Wishlist items
Classification
- 49 Unclassified
- 1 Will Not Fix

Select bugs		The same search fields are ORed, different fields are ANDed. Valid severities are critical, grave, serious, important, normal, minor, wishlist, fixed Valid tags are patch, wontfix, moreinfo, unreproducible, help, security, upstream, pending, confirmed, ipv6, lfs, d-i, l10n, newcomer, a11y, ftbfs, fixed-upstream, fixed, fixed-in-experimental, sid, experimental, potato, woody, sarge, sarge-ignore, etch, etch-ignore, lenny, lenny-ignore, squeeze, squeeze-ignore, wheezy, wheezy-ignore, jessie, jessie-ignore, stretch, stretch-ignore, buster, buster-ignore, bullseye, bullseye-ignore, bookworm, bookworm-ignore, trixie, trixie-ignore, forky, forky-ignore
Include Bugs
Exclude Bugs
Categorize/Order using
Misc options	Repeat Merged Reverse Bugs Reverse Pending Reverse Severity No Bugs which affect packages Toggle all extra information
Submit

Debian Bug report logs: Bugs in source package openssl

Outstanding bugs -- Important bugs; Unclassified (1 bug)

Outstanding bugs -- Normal bugs; Unclassified (30 bugs)

Outstanding bugs -- Minor bugs; Unclassified (10 bugs)

Outstanding bugs -- Minor bugs; Will Not Fix (1 bug)

Outstanding bugs -- Wishlist items; Unclassified (8 bugs)

Forwarded bugs -- Wishlist items (1 bug)

Pending Upload bugs -- Normal bugs (1 bug)

Resolved bugs -- Normal bugs (2 bugs)

Resolved bugs -- Wishlist items (1 bug)

Summary

Options

Select bugs

Include Bugs

Exclude Bugs

Categorize/Order using

Misc options

Submit