OpenSSL security audits

This page may contain info on OpenSSL source code reviews, automated static analysis, fuzzing, testing for specific potential issues, etc. It may also link to related tools and data files - e.g. reproducers of specific vulnerabilities. Things that passed audit may also be listed (with due detail) - e.g., “OpenSSL version N was checked for potential issue X on DATE by NAME and found not vulnerable for such-and-such reasons.”

OpenSSL ASN1 BIO vulnerability (CVE-2012-2110)