- CVE-2021-3711: fix SM2 decryption buffer overflow; check the plaintext buffer is large enough when decrypting SM2; add extended tests for SM2 - CVE-2022-3996: fix X.509 policy constraints double-locking denial of service - CVE-2023-0464: fix excessive resource use verifying X.509 policy constraints - CVE-2023-0466: fix X509_VERIFY_PARAM_add0_policy() does not enable policy check - CVE-2023-2650: restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt translates - CVE-2024-13176: fix timing side-channel in ECDSA signature computation - CVE-2024-5535: validate provided client list in SSL_select_next_proto - CVE-2025-9230: fix out-of-bounds read and write in RFC 3211 KEK unwrap - CVE-2025-69419: fix one-byte write-before-buffer in PKCS#12 BMPString conversion - CVE-2025-69421: fix NULL dereference in PKCS12_item_decrypt_d2i_ex() - CVE-2026-28387: fix use-after-free / double-free in dane_match() - CVE-2026-28388: fix NULL dereference in check_delta_base() - CVE-2026-28389: fix NULL dereference in dh/ecdh_cms_set_shared_info() - CVE-2026-28390: fix NULL dereference in rsa_cms_decrypt()