products:openssl:history_3.5
Table of Contents
YuOpenSSL-3.5: Version History
YuOpenSSL is a Delphi port of the OpenSSL cryptography and SSL/TSL library. All code is statically compiled into applications. OpenSSL DLLs are not needed. Over 5000 functions, procedures, constants, and types are ready to use in a single Delphi unit.
YuOpenSSL-3.5 v1.1.2 – 1 Oct 2025
Update to OpenSSL 3.5.4, a moderate severity security release.
- Fix Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230).
- Fix Out-of-bounds read in HTTP client no_proxy handling (CVE-2025-9232).
- Fixed the length of the ASN.1 sequence for the SM3 digests of RSA-encrypted signatures.
YuOpenSSL-3.5 v1.1.1 – 23 Sep 2025
Update to OpenSSL 3.5.3.
YuOpenSSL-3.5 v1.1.0 – 18 Sep 2025
- Support Delphi 13 Florence Win32 and Win64.
YuOpenSSL-3.5 v1.0.0 – 18 Aug 2025
First release, based on OpenSSL 3.5.2.
Changes from OpenSSL 3.4:
Potentially significant or incompatible changes:
- Default encryption cipher for the
req,cms, andsmimeapplications changed fromdes-ede3-cbctoaes-256-cbc. - The default TLS supported groups list has been changed to include and prefer hybrid PQC KEM groups. Some practically unused groups were removed from the default list.
- The default TLS keyshares have been changed to offer X25519MLKEM768 and X25519.
- All
BIO_meth_get_*()functions were deprecated.
New features:
- Support for server side QUIC (RFC 9000).
- Support for 3rd party QUIC stacks including 0-RTT support.
- Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA).
- Support added for opaque symmetric key objects (
EVP_SKEY). - Support for multiple TLS keyshares and improved TLS key establishment group configurability.
- API support for pipelining in provided cipher algorithms.
products/openssl/history_3.5.txt · Last modified: 2025/10/01 20:39 by 127.0.0.1