Skip to content

[master] CHANGES.md, NEWS.md: update for 4.0.1 - #31509

Closed
esyr wants to merge 1 commit into
openssl:masterfrom
esyr:esyr/changes-news-4.0.1-forward-port
Closed

[master] CHANGES.md, NEWS.md: update for 4.0.1#31509
esyr wants to merge 1 commit into
openssl:masterfrom
esyr:esyr/changes-news-4.0.1-forward-port

Conversation

@esyr

@esyr esyr commented Jun 15, 2026

Copy link
Copy Markdown
Member

This is a forward port of 4.0.1 CHANGES.md/NEWS.md updates to the master branch.

4.0.1 CHANGES.md includes the following:

4.0.1 NEWS.md includes the following:

@esyr
CHANGES.md, NEWS.md: update for 4.0.1
35ca396 
4.0.1 CHANGES.md includes the following:
 * CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
   CVE-2026-34182, CVE-2026-34183, CVE-2026-35188, CVE-2026-42764,
   CVE-2026-42765, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
   CVE-2026-42769, CVE-2026-42770, CVE-2026-42771, CVE-2026-45445,
   CVE-2026-45446, CVE-2026-45447
 * openssl#30626
   "TLSv1.3: Fix server not sending NewSessionTicket after ciphersuite mismatch"
 * openssl#30904
   "pkey(1) missing setup for interactive pass prompt"
 * openssl#31058
   "Validate that a PSK identity is at least one byte long"
 * openssl#31146
   "ktls: Fix invalid memory access on retry with moving write buffer"
 * openssl#31413
   "apps/s_client.c: read one byte less to avoid triggerring overflow
   protection"

4.0.1 NEWS.md includes the following:
 * CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
   CVE-2026-34182, CVE-2026-34183, CVE-2026-35188, CVE-2026-42764,
   CVE-2026-42765, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
   CVE-2026-42769, CVE-2026-42770, CVE-2026-42771, CVE-2026-45445,
   CVE-2026-45446, CVE-2026-45447
 * openssl#30904
   "pkey(1) missing setup for interactive pass prompt"
 * openssl#31413
   "apps/s_client.c: read one byte less to avoid triggerring overflow
   protection"

Signed-off-by: Eugene Syromiatnikov <[email protected]>
@esyr esyr added branch: master Applies to master branch approval: review pending This pull request needs review by a committer triaged: documentation The issue/pr deals with documentation (errors) labels Jun 15, 2026
@mbroz
mbroz requested a review from t8m June 15, 2026 14:24
@mbroz

mbroz commented Jun 15, 2026

Copy link
Copy Markdown
Member

Why this was not updated during the release?

@mbroz mbroz moved this to Waiting Review in Development Board Jun 15, 2026
@esyr

esyr commented Jun 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Member Author

Why this was not updated during the release?

Out of my sheer laziness, I guess; in theory, it can be applied once the corresponding patch is applied to the latest stable branch, and that could be done before the release, but since there's no release for master (and no acute need to have changes/news in order), this step is skipped.

jogme
jogme approved these changes Jun 16, 2026
View reviewed changes

@jogme jogme left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thank you!

@t8m t8m added the tests: exempted The PR is exempt from requirements for testing label Jun 16, 2026
@openssl-machine openssl-machine added approval: done This pull request has the required number of approvals and removed approval: review pending This pull request needs review by a committer labels Jun 16, 2026
@github-project-automation github-project-automation Bot moved this from Waiting Review to Waiting Merge in Development Board Jun 16, 2026
@esyr esyr mentioned this pull request Jun 16, 2026
Closed
2 tasks
@openssl-machine

openssl-machine commented Jun 17, 2026

Copy link
Copy Markdown
Collaborator

24 hours has passed since 'approval: done' was set, but as this PR has been updated in that time the label 'approval: ready to merge' is not being automatically set. Please review the updates and set the label manually.

@jogme jogme added approval: ready to merge The 24 hour grace period has passed, ready to merge and removed approval: done This pull request has the required number of approvals labels Jun 17, 2026
@t8m

t8m commented Jun 18, 2026

Copy link
Copy Markdown
Member

Merged to the master branch (with adjustment for the recently added CHANGES.md entry).

@t8m t8m closed this Jun 18, 2026
@github-project-automation github-project-automation Bot moved this from Waiting Merge to Done in Development Board Jun 18, 2026
openssl-machine pushed a commit that referenced this pull request Jun 18, 2026
@esyr @t8m
CHANGES.md, NEWS.md: update for 4.0.1
eae29e3 
4.0.1 CHANGES.md includes the following:
 * CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
   CVE-2026-34182, CVE-2026-34183, CVE-2026-35188, CVE-2026-42764,
   CVE-2026-42765, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
   CVE-2026-42769, CVE-2026-42770, CVE-2026-42771, CVE-2026-45445,
   CVE-2026-45446, CVE-2026-45447
 * #30626
   "TLSv1.3: Fix server not sending NewSessionTicket after ciphersuite mismatch"
 * #30904
   "pkey(1) missing setup for interactive pass prompt"
 * #31058
   "Validate that a PSK identity is at least one byte long"
 * #31146
   "ktls: Fix invalid memory access on retry with moving write buffer"
 * #31413
   "apps/s_client.c: read one byte less to avoid triggerring overflow
   protection"

4.0.1 NEWS.md includes the following:
 * CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
   CVE-2026-34182, CVE-2026-34183, CVE-2026-35188, CVE-2026-42764,
   CVE-2026-42765, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
   CVE-2026-42769, CVE-2026-42770, CVE-2026-42771, CVE-2026-45445,
   CVE-2026-45446, CVE-2026-45447
 * #30904
   "pkey(1) missing setup for interactive pass prompt"
 * #31413
   "apps/s_client.c: read one byte less to avoid triggerring overflow
   protection"

Signed-off-by: Eugene Syromiatnikov <[email protected]>

Reviewed-by: Norbert Pocs <[email protected]>
Reviewed-by: Nikola Pajkovsky <[email protected]>
Reviewed-by: Tomas Mraz <[email protected]>
MergeDate: Thu Jun 18 13:13:58 2026
(Merged from #31509)
n13l pushed a commit to n13l/openssl that referenced this pull request Jul 25, 2026
@esyr @n13l
CHANGES.md, NEWS.md: update for 4.0.1
5e532b2 
4.0.1 CHANGES.md includes the following:
 * CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
   CVE-2026-34182, CVE-2026-34183, CVE-2026-35188, CVE-2026-42764,
   CVE-2026-42765, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
   CVE-2026-42769, CVE-2026-42770, CVE-2026-42771, CVE-2026-45445,
   CVE-2026-45446, CVE-2026-45447
 * openssl#30626
   "TLSv1.3: Fix server not sending NewSessionTicket after ciphersuite mismatch"
 * openssl#30904
   "pkey(1) missing setup for interactive pass prompt"
 * openssl#31058
   "Validate that a PSK identity is at least one byte long"
 * openssl#31146
   "ktls: Fix invalid memory access on retry with moving write buffer"
 * openssl#31413
   "apps/s_client.c: read one byte less to avoid triggerring overflow
   protection"

4.0.1 NEWS.md includes the following:
 * CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
   CVE-2026-34182, CVE-2026-34183, CVE-2026-35188, CVE-2026-42764,
   CVE-2026-42765, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
   CVE-2026-42769, CVE-2026-42770, CVE-2026-42771, CVE-2026-45445,
   CVE-2026-45446, CVE-2026-45447
 * openssl#30904
   "pkey(1) missing setup for interactive pass prompt"
 * openssl#31413
   "apps/s_client.c: read one byte less to avoid triggerring overflow
   protection"

Signed-off-by: Eugene Syromiatnikov <[email protected]>

Reviewed-by: Norbert Pocs <[email protected]>
Reviewed-by: Nikola Pajkovsky <[email protected]>
Reviewed-by: Tomas Mraz <[email protected]>
MergeDate: Thu Jun 18 13:13:58 2026
(Merged from openssl#31509)
rickyringler pushed a commit to rickyringler/openssl that referenced this pull request Aug 21, 2026
@esyr Ricky Ringler
CHANGES.md, NEWS.md: update for 4.0.1
8a203a1 
4.0.1 CHANGES.md includes the following:
 * CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
   CVE-2026-34182, CVE-2026-34183, CVE-2026-35188, CVE-2026-42764,
   CVE-2026-42765, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
   CVE-2026-42769, CVE-2026-42770, CVE-2026-42771, CVE-2026-45445,
   CVE-2026-45446, CVE-2026-45447
 * openssl#30626
   "TLSv1.3: Fix server not sending NewSessionTicket after ciphersuite mismatch"
 * openssl#30904
   "pkey(1) missing setup for interactive pass prompt"
 * openssl#31058
   "Validate that a PSK identity is at least one byte long"
 * openssl#31146
   "ktls: Fix invalid memory access on retry with moving write buffer"
 * openssl#31413
   "apps/s_client.c: read one byte less to avoid triggerring overflow
   protection"

4.0.1 NEWS.md includes the following:
 * CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
   CVE-2026-34182, CVE-2026-34183, CVE-2026-35188, CVE-2026-42764,
   CVE-2026-42765, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
   CVE-2026-42769, CVE-2026-42770, CVE-2026-42771, CVE-2026-45445,
   CVE-2026-45446, CVE-2026-45447
 * openssl#30904
   "pkey(1) missing setup for interactive pass prompt"
 * openssl#31413
   "apps/s_client.c: read one byte less to avoid triggerring overflow
   protection"

Signed-off-by: Eugene Syromiatnikov <[email protected]>

Reviewed-by: Norbert Pocs <[email protected]>
Reviewed-by: Nikola Pajkovsky <[email protected]>
Reviewed-by: Tomas Mraz <[email protected]>
MergeDate: Thu Jun 18 13:13:58 2026
(Merged from openssl#31509)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@t8m t8m t8m approved these changes
@jogme jogme jogme approved these changes
@andrewkdinh andrewkdinh andrewkdinh approved these changes
@npajkovsky npajkovsky npajkovsky approved these changes

Assignees

@esyr esyr

Labels

approval: ready to merge The 24 hour grace period has passed, ready to merge branch: master Applies to master branch tests: exempted The PR is exempt from requirements for testing triaged: documentation The issue/pr deals with documentation (errors)

Projects

Development Board
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

7 participants

@esyr @mbroz @openssl-machine @t8m @jogme @andrewkdinh @npajkovsky