Openssl - GoKawiil

GoAhead embedded web server patches three TLS vulnerabilities

Security researchers disclosed three separate TLS flaws in GoAhead, an embedded web server used for device management in hundreds of millions of IoT, OT, firewall and military devices from vendors including Palo Alto Networks, D-Link, Siemens and Lockheed Martin. The bugs affect GoAhead's OpenSSL-compatible, LibreSSL and Mbed TLS backends, allowing revoked client certificates to be accepted, encrypted sessions to potentially be decrypted, or certificate chain-depth limits to be bypassed depending on configuration. GoAhead version 6.1.1 fixes all three issues, with additional mitigations available for affected deployments.

foxio.io · 2026-10-27

OpenSSL releases version 4.1.0 with new cryptographic optimizations

The OpenSSL project has shipped OpenSSL 4.1.0, a feature release that drops the no-ecdsa and no-ecdh Configure options, switches the tsget utility to the Net::Curl::Easy library, and adds performance optimizations for ML-DSA, ML-KEM and AES-CBC operations on ppc64le and x86_64 architectures. The release also adds two new MSVC 2013 build targets and documents three known issues affecting DTLS 1.3 handling.

github.com · 2026-10-23