May 2026 monthly summary for openssl/openssl: Delivered a critical memory-safety fix in the kTLS write path that prevents invalid memory access during retries when using moving write buffers, preserving data integrity and application stability. Implemented a safe copy-on-retry path that maintains zero-copy semantics on the happy path, reducing the risk of data corruption and crashes in TLS offload scenarios.

September 2025: Hardened tunnel metadata handling in linux-riscv/linux with a targeted fix for IP_DF extraction in tunnel headers and added self-testing to validate metadata during decapsulation in Open vSwitch. The changes improve visibility of tunneling flows, prevent misleading reports, and align software behavior with hardware offloads.