Repository navigation
Update OpenSSL (September 2026) #158010
Description
Feature or enhancement
Proposal:
OpenSSL has updated releases, including 3.5.9 and (not publicly available) 3.0.23. The highest vulnerability level in this set is "high" and it is not clear that we are directly impacted, but we should update before the next round of our releases anyway.
OpenSSL 3.0 (still used by 3.13) is now EOL, so we will need to update 3.13 binaries to 3.5 as well, with RM @Yhg1s's understandably begrudging agreement obtained on Discord. I'll be going ahead with that update (to 3.5.8) before the new releases are available to give us as much time as possible to work out any issues arising from that and to make backporting the 3.5.8->3.5.9 update as smooth as possible.
Has this already been discussed elsewhere?
This is a minor feature, which does not need previous discussion elsewhere
Links to previous discussion of this feature:
See gh-156369, gh-151159, gh-149254 for previous rounds.
Linked PRs
- [3.13] gh-158010: Update OpenSSL in binaries and CI from 3.0 to 3.5 #158015
- gh-158010: Avoid recommending out-of-date OpenSSL in configure doc #158266
- [3.15] gh-158010: Avoid recommending out-of-date OpenSSL in configure doc (GH-158266) #158349
- [3.14] gh-158010: Avoid recommending out-of-date OpenSSL in configure doc (GH-158266) #158350
- [3.13] gh-158010: Avoid recommending out-of-date OpenSSL in configure doc (GH-158266) #158351
- gh-158010: Update CI to use latest OpenSSL and AWS-LC releases #158412
- gh-158010: Update macOS installer to use OpenSSL 3.5.9 #158415
- gh-158010: Update Android and iOS build scripts to use OpenSSL 3.5.9 #158417
- [3.15] gh-158010: Update CI to use latest OpenSSL and AWS-LC releases (GH-158412) #158420
- [3.14] gh-158010: Update CI to use latest OpenSSL releases (GH-158412) #158421
- [3.13] gh-158010: Update CI to use latest OpenSSL releases (GH-158412) #158422
- gh-158010: Update Windows builds to use OpenSSL 3.5.9 #158432
- [3.15] gh-158010: Update Windows builds to use OpenSSL 3.5.9 (GH-158432) #158436
- [3.14] gh-158010: Update Windows builds to use OpenSSL 3.5.9 (GH-158432) #158437
- [3.13] gh-158010: Update Windows builds to use OpenSSL 3.5.9 (GH-158432) #158438
- [3.15] gh-158010: Update Android and iOS build scripts to use OpenSSL 3.5.9 (GH-158417) #158453
- [3.14] gh-158010: Update Android and iOS build scripts to use OpenSSL 3.5.9 (GH-158417) #158454
- [3.13] gh-158010: Update Android build script to use OpenSSL 3.5.9 (GH-158417) #158458
- [3.15] gh-158010: Update macOS installer to use OpenSSL 3.5.9 (GH-158415) #158460
- [3.14] gh-158010: Update macOS installer to use OpenSSL 3.5.9 (GH-158415) #158461
- [3.13] gh-158010: Update macOS installer to use OpenSSL 3.5.9 (GH-158415) #158462
Activity
12 remaining items
[3.13] pythongh-158010: Update Windows builds to use OpenSSL 3.5.9 (p…
[3.14] gh-158010: Update Windows builds to use OpenSSL 3.5.9 (GH-158437)
[3.13] gh-158010: Update Windows builds to use OpenSSL 3.5.9 (GH-158438)
[3.15] gh-158010: Update Windows builds to use OpenSSL 3.5.9 (GH-158432…
gh-158010: Update Android and iOS build scripts to use OpenSSL 3.5.9 (G…
[3.14] gh-158010: Update Android and iOS build scripts to use OpenSSL…
[3.13] gh-158010: Update Android build script to use OpenSSL 3.5.9 (G…
gh-158010: Update macOS installer to use OpenSSL 3.5.9 (#158415)
[3.14] gh-158010: Update macOS installer to use OpenSSL 3.5.9 (GH-158415
pythongh-158010: Update macOS installer to use OpenSSL 3.5.9 (pythonG…
[3.13] gh-158010: Update macOS installer to use OpenSSL 3.5.9 (GH-158462
[3.15] gh-158010: Update Android and iOS build scripts to use OpenSSL…
[3.15] gh-158010: Update macOS installer to use OpenSSL 3.5.9 (GH-158415
hugovk commentedon Sep 30, 2026
Thank you, @zware!