Update to openssl-3.5.8 - #12

Open

chethan-64 wants to merge 189 commits into

ClickHouse:ClickHouse/openssl-3.5.7from

chethan-64:ClickHouse/openssl-3.5.8

Commits on Jun 9, 2026

Prepare for 3.5.8
openssl-machine
committed
85e3440

Commits on Jun 10, 2026

cmp_vfy.c: small fixes on content and layout of diagnostics on failure validating signature-based protection of CMP messages
DDvO
committed
5709e13
cmp_vfy.c: prevent needless and confusing duplication of diagnostic output on failure validating CMP messages
DDvO
committed
557353f
http_lib.c: fix parsing 'scheme' part in OSSL_parse_url()
DDvO
committed
77b49b2
http_lib.c: add check that host_end is not past authority_end
DDvO
committed
dc5d961
pvkfmt: check keylen before copying the BLOBHEADER
rootvector2
authored and
jogme
committed
0d8c4fd
crypto/evp: align exchange.c cleanup with kem/sig/asymcipher pattern
sucloudflare
authored and
jogme
committed
9ad3030
quic: add lhash insert error checks
ngauder
authored and
jogme
committed
d01e152
Let's attempt to make real documentation for X509_verify_cert
bob-beck
authored and
t8m
committed
107739f
Remove crypto/aes/aes_x86core.c because it's dead code
andrewkdinh
authored and
jogme
committed
e2b5cd3

Commits on Jun 11, 2026

x509: check inner/outer signatureAlgorithm match in X509_CRL_verify
Viktor Dukhovni
authored and
jogme
committed
f6b5c45
uni2utf8: reject negative length like uni2asc
rootvector2
authored and
jogme
committed
bc72833
crltest.c: Add missing root certificate
t8m
committed
96c192e
Fix up mismatched error reason codes
jon-oracle
authored and
t8m
committed
24cf731

Commits on Jun 12, 2026

test_rng.c: Include proverr.h
t8m
committed
e4fccf6
Replace missing reason code with another one
t8m
committed
23b0396

Commits on Jun 15, 2026

ci: Switch to VS 2026 for windows-2025 image
mbroz
authored and
t8m
committed
b7246a6
Fix use-after-free issue in radix test framework for QUIC.
Sashan
authored and
t8m
committed
11fb223
test: Invert bad TEST() condition calls
t8m
committed
9dd0977
windows_comp.yml: windows-latest image uses VS-2026 now
t8m
committed
59f0bcd
apps/lib/apps.c: free retdb before return on OPENSSL_strdup() failure
XZ-X
authored and
t8m
committed
36e5241

Commits on Jun 17, 2026

cmp_client_test.c: fix partly too generous total_timeout limit for IR session with polling
DDvO
committed
95be5b0
Reject delta CRLs as complete CRL candidates
idrassi
authored and
t8m
committed
6cbbf4c
Fix s_client Sieve STARTTLS response parsing
idrassi
authored and
t8m
committed
694ca5d

Commits on Jun 18, 2026

Enforce RFC 8446 ticket lifetime limit for TLS 1.3 client
abtom87
authored and
t8m
committed
b0576dc
Fix failure checking on thread_local storage assignment in rand_lib
nhorman
authored and
t8m
committed
316bb20
Fix intermittent failure in check_pc_flood radix test
mattcaswell
authored and
t8m
committed
bee8bc9
pkcs11-provider: enable and update [3.5]
bukka
authored and
t8m
committed
c1a0b7f

Commits on Jun 21, 2026

ssl/quic/quic_ackm.c: fix use after free for apkt in ackm_on_pkts_acked()
loganaden
authored and
esyr
committed
03e7ed9
Fix spelling mistakes in documentation
CarloTUM
authored and
esyr
committed
b4d5a32
tls_common.c: prevent max_early_data overflow in rlayer_early_data_count_ok()
abtom87
authored and
esyr
committed
ddc36ff

Commits on Jun 22, 2026

prov-compat-label.yml: Do not use enable-ssl3
t8m
authored and
esyr
committed
9ec9fa4
crypto/pkcs7/pk7_lib.c: fix return value in PKCS7_set_digest()
abtom87
authored and
esyr
committed
26108fb
CONTRIBUTING.md: add the AI declaration policy
jericson
authored and
esyr
committed
fa4a060
doc/man3/ASN1_aux_cb.pod: correct return code documentation for the callbacks
bob-beck
authored and
esyr
committed
2a85460

Commits on Jun 23, 2026

Backport PR #30313 into 3.5 branch.
wbeck10
authored and
nhorman
committed
d1fbea9
Fix key2ms_newctx() pointer type mismatch in MSBLOB/PVK key encoder
007bsd
authored and
esyr
committed
68848a7

Commits on Jun 24, 2026

pkcs7: Fix negative index handling in PKCS7_get_issuer_and_serial()
idrassi
authored and
esyr
committed
962879e
Prevent integer overflow in ASN1_mbstring_ncopy
bernd-edlinger
authored and
t8m
committed
430409b
Add documentation for NAME_CONSTRAINTS_check
bob-beck
authored and
t8m
committed
be90738
include/internal/hashtable.h: avoid OOB read in ossl_ht_strcase()
esyr
authored and
t8m
committed
948b170

Commits on Jun 25, 2026

Fix EVP_PKEY_dup() for ML-KEM keys (3.5)
Viktor Dukhovni
committed
9b9c388
DH: harden empty fromdata
Viktor Dukhovni
committed
f9ba3e7
crypto/armcap.c: reformat MIDR CPU-model conditionals for readability
nikolapajkovsky
authored and
jogme
committed
5898e2f
AEAD: reject late AAD in ChaCha20-Poly1305 after plaintext update
n13l
authored and
jogme
committed
54686a9
rec_layer_s3.c: prevent max_early_data overflow in ossl_early_data_count_ok()
esyr
authored and
jogme
committed
e549ff5
crypto/ctype.c: fix off-by-one OOB in ossl_toascii()/ossl_fromascii()
esyr
authored and
jogme
committed
8fed0d2
CONTRIBUTING.md: tweak wording with regards to ML tooling usage
esyr
authored and
jogme
committed
9a2836b
Fix incorrect backport of "crypto/armcap.c: reformat MIDR CPU-model conditionals for readability"
nikolapajkovsky
authored and
esyr
committed
1e08c52

Commits on Jun 26, 2026

crypto/x509/pcy_cache.c: fix ext_pcons leak in policy_cache_new()
007bsd
authored and
esyr
committed
36bc0b5
crypto/x509/v3_ncons.c: fix scheme buffer leak in nc_uri() for schemeless URIs
007bsd
authored and
esyr
committed
67db947
.github/workflows: add backport.yml from master
esyr
committed
91a82ef
test/evp_extra_test.c: add test case for CVE-2026-42770
tomato42
authored and
esyr
committed
c8167c1

Commits on Jun 28, 2026

providers/defltprov.c: remove static globals from provider_init
mvanhorn
authored and
esyr
committed
27dbea7
providers/baseprov.c: remove static globals
nikolapajkovsky
authored and
esyr
committed
0cca982
providers/fips/fipsprov.c, test/p_test.c: remove c_gettable_params static global
nikolapajkovsky
authored and
esyr
committed
cb29396

Commits on Jun 30, 2026

ensure writes are syncronized on windows in CRYPTO_THREAD_run_once
nhorman
authored and
jogme
committed
e7a956c
SSL_OP_SECOP is dead code
bob-beck
authored and
jogme
committed
04a1fc5
Don't attempt to check the security level on what signed our own certificate.
bob-beck
authored and
jogme
committed
1609edf
s390x: Fix return code handling in HMAC_Init_ex()
ifranzki
authored and
esyr
committed
df2711d

Commits on Jul 1, 2026

s_client: skip TCP shutdown drain for datagram protocols
mtrojnar
authored and
esyr
committed
dba3838

Commits on Jul 8, 2026

BIO: avoid returning internal FILE * with UPLINK-enabled builds on Windows
olszomal
authored and
esyr
committed
b859876
apps: adjust stat usage to account for uplink
olszomal
authored and
esyr
committed
ad4e559
doc/man3/ASN1_INTEGER_get_int64.pod: fix a typo
notroj
authored and
esyr
committed
8207846
Allow `getentropy` for Emscripten
stevenwdv
authored and
t8m
committed
1b025ef
crypto/x509/x509_lu.c: check X509_OBJECT_up_ref_count() in x509_object_dup()
nikolapajkovsky
authored and
t8m
committed
7175f9e

Commits on Jul 10, 2026

Avoid undefined behavior adding or subtracting two BN_zero() values
t8m
committed
2222cce
Fix a bug in BN_ucmp() when comparing constant-time BIGNUMs of different lengths
igus68
authored and
t8m
committed
bd873e7
quic: fix intermittent idle-test failure in tserver test
bukka
authored and
t8m
committed
840158a
NULL-pointer subtraction UB in tls_collect_extensions()
n13l
authored and
t8m
committed
37a53a9
Document the effect of SSL_VERIFY_FAIL_IF_NO_PEER_CERT on post-handshake auth
t8m
committed
8533c80
pkcs12: free PKCS7 elements on error in PKCS12_unpack_authsafes
rootvector2
authored and
t8m
committed
f63a2e9

Commits on Jul 13, 2026

Don't raise NOT_ENOUGH_DATA on a clean EOF at an object boundary
icanhasmath
authored and
beldmit
committed
3687ff7
Remove the rio_notifier run_once routine
nhorman
committed
4e07034
FIPS: EC keygen - remove unnecessary self tests.
slontis
authored and
t8m
committed
648fadb
poly1305: reject no-key update and NULL key params
idrassi
authored and
t8m
committed
b71cd13

Commits on Jul 18, 2026

test: don't depend on DTLS alert delivery in sslrecords test
bukka
authored and
jogme
committed
1d6826b

Commits on Jul 20, 2026

x509: avoid NULL memcmp argument in nc_dn()
idrassi
authored and
nikolapajkovsky
committed
67baa1d
test: cover empty directoryName name constraints
idrassi
authored and
nikolapajkovsky
committed
41502f7
doc: clarify pkeyutl -rawin and -digest for no-prehash signatures
olszomal
authored and
jogme
committed
eb06903
ml_kem: Add a check for shared_secret
loganaden
authored and
jogme
committed
96158be

Commits on Jul 23, 2026

crypto: use void * in RISC-V digest shims
cmuellner
authored and
t8m
committed
0925384

Commits on Jul 24, 2026

Improve TLS handling of EC point formats (4.0)
Viktor Dukhovni
authored and
jogme
committed
dc616de
Restore empty raw PKCS#1 verify-recover behavior
idrassi
authored and
t8m
committed
16b0f10
Update SSL_CTX_set1_curves.pod for OpenSSL 3.5 additions
bef15703
authored and
t8m
committed
f8da3aa

Commits on Jul 27, 2026

DOCS: Fix KEM init function documentation
olszomal
authored and
jogme
committed
3a1c8d4
crypto/pkcs12/p12_decr.c: fix EVP_CIPHER_CTX_ctrl error checks
Adel-Ayoub
authored and
jogme
committed
e23b59e

Commits on Jul 29, 2026

SSL_poll: fix abort_blocking mishandling in poll_translate()/poll_block()
mattcaswell
committed
ae3e2ad
test: add regression test for SSL_poll() abort_blocking handling
mattcaswell
committed
ed4d218
Update CHANGES/NEWS to mention the HollowByte fix
mattcaswell
authored and
jogme
committed
4db90eb
quic: fix BIO ownership in test helper
idrassi
authored and
jogme
committed
460cdd6
cms: fix AuthenticatedData authAttrs and unauthAttrs element type
bukka
authored and
jogme
committed
cc56e92
Fix mutcbk_inject_frames after mutation
andrewkdinh
authored and
jogme
committed
7d87fe4
Add documentation for OPENSSL_armcap
paul-elliott-arm
authored and
jogme
committed
e0c81d8
doc: fix rsa_oaep_md default digest documentation
olszomal
authored and
t8m
committed
079dcca
pkcs7: null-guard enveloped and signedAndEnveloped arms in PKCS7_stream
abtom87
authored and
t8m
committed
453eaaa
Add value_barrier in MOD_EXP_CTIME_COPY_FROM_PREBUF
kroeckx
authored and
t8m
committed
bb5e125
Add value_barrier in BN_consttime_swap
kroeckx
authored and
t8m
committed
0157f0c
Apply suggestion from @andrewkdinh
kroeckx
authored and
t8m
committed
dd4f804

Commits on Aug 3, 2026

Fix false success on zero BIO write
idrassi
authored and
andrewkdinh
committed
8d46334
ssl: Remove shadowed variable in write retry path
idrassi
authored and
esyr
committed
88cdff9
util/other.syms: sort OPENSSL_*cap lexicographically, add missing variables
esyr
committed
3d9ddf4

Commits on Aug 6, 2026

Add ossl_list_TYPE_join(head, tail) function
Sashan
authored and
jogme
committed
2a2c564

Commits on Aug 7, 2026

FIPS: key gen PCT tests no longer cause FIPS provider to enter a
slontis
authored and
jogme
committed
1c4aa2e
Fix NULL dereference in v2i_AUTHORITY_KEYID()
Greensi7
authored and
jogme
committed
f10e917

Commits on Aug 8, 2026

Fix data type of SM2 EC_PUB_X/Y params
Viktor Dukhovni
authored and
andrewkdinh
committed
c3a30b9
Expand and refactor test_evp_extra2
Viktor Dukhovni
authored and
andrewkdinh
committed
174d179

Commits on Aug 10, 2026

Reject clearly degenerate RSASVE parameters.
Viktor Dukhovni
authored and
nikolapajkovsky
committed
a201731
move the test code outside of the #ifdef
nikolapajkovsky
committed
c3ec947
statem: fix missing SSLfatal in TLSv1.3 ticket construction
bukka
authored and
t8m
committed
d10f837
Fix FIPS to require a derivation function
nhorman
committed
28b27fe
evp_test: condition CTR-DRBG tests on FIPS version when the df is not used
paulidale
authored and
nhorman
committed
e12d71f
Document the behavior of BN_generate_prime() on failure
t8m
committed
e386501

Commits on Aug 11, 2026

Document SM4 table-lookup side-channel risk
fmartns
authored and
jogme
committed
d5e78df
quic: reject ACK of an unsent packet number
haiyang4
authored and
jogme
committed
b41c1bc
ssl: add missing SSLfatal in PSK premaster secret generation
bukka
authored and
jogme
committed
f3b94dc
statem: add missing SSLfatal in compressed certificate construction
bukka
authored and
jogme
committed
d44190d
Merge event masks for duplicate fds in the RIO poll builder
idrassi
authored and
t8m
committed
3e74574
test: cover duplicate fd event merging in RIO poll builder
idrassi
authored and
t8m
committed
b74ed29
Additional ML-KEM cleansing
Viktor Dukhovni
authored and
jogme
committed
329938c
Additional ML-DSA cleansing
Viktor Dukhovni
authored and
jogme
committed
54c77a1
slh-dsa: cleanse temporary copies of sensitive data
Viktor Dukhovni
authored and
jogme
committed
dbb7cb4

Commits on Aug 12, 2026

storemgmt: Validate msblob length before buffer allocation
loganaden
authored and
t8m
committed
0f85cc6
.github/workflows: remove openssl-3.1, openssl-3.2 and openssl-3.3 from CI jobs
mbroz
authored and
t8m
committed
4adfa0d
Fix some missing close parens in signature docs
Viktor Dukhovni
authored and
mbroz
committed
2dacccc
QUIC server: limit number of pending QUIC channels/connections
Sashan
authored and
nhorman
committed
08e7756
test/quictestlib.c: add functions to create QUIC objects on dgram bio
Sashan
authored and
nhorman
committed
2417e4f
test/quicapitest.c: add test for pending connections limit enforcement
Sashan
authored and
nhorman
committed
b05a190

Commits on Aug 13, 2026

Deal with riscv64 qemu-user stderr noise
Viktor Dukhovni
authored and
nikolapajkovsky
committed
16d0fdf
test: use portable function-name macro in QUIC test helper
nikolapajkovsky
committed
701178f
test: use portable function-name macro in QUIC test helper
nikolapajkovsky
authored and
mbroz
committed
c37abfd

Commits on Aug 14, 2026

cms: clear temporary key buffers on failure
Unjuno
authored and
nikolapajkovsky
committed
57b84ed
Fix ASN1_TYPE memory leak in asn1_multi()
Greensi7
authored and
mbroz
committed
0c1e2d9

Commits on Aug 17, 2026

Revised RSASVE degenerate ciphertext check.
Viktor Dukhovni
authored and
Viktor Dukhovni
committed
f49a4e2

Commits on Aug 18, 2026

fuzz/provider.c: check evp##_up_ref return value in collect_##evp
esyr
authored and
nikolapajkovsky
committed
bfd6555
doc: FIPS provider is compatible with releases from 3.0 onwards
arapov
authored and
levitte
committed
917a0e3
README-FIPS: clarify provider and library cross-version compatibility
arapov
authored and
levitte
committed
fbf649a
pkcs7: use PKCS7_get_octet_string in PKCS7_stream signed arm
abtom87
authored and
levitte
committed
9a2d862
Reject DSA parameters where N exceeds 512
simo5
authored and
beldmit
committed
15cccf9

Commits on Aug 19, 2026

doc: document thread cancellation and non-local exits
idrassi
authored and
jogme
committed
dba1404
doc: document QUIC thread cancellation consequences
idrassi
authored and
jogme
committed
9b53f88
SSL_dup() should copy additional members
Sashan
authored and
t8m
committed
e424472
Fix system resource leak in TerminalSocket()
YZL0v3ZZ
authored and
t8m
committed
1fff780
Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADs
authored and
t8m
committed
bdeb0cd
Add tests for empty AEAD EVP_Cipher() finalization
idrassi
authored and
t8m
committed
e9fb43a
Fix get_cert_by_subject_ex() to gracefully handle broken symlinks (but not on Windows)
DDvO
committed
9954679

Commits on Aug 21, 2026

CCM: authenticate empty Final when payload Update is skipped
idrassi
authored and
jogme
committed
1edbbe3
test: cover CCM empty Final without a payload Update
idrassi
authored and
jogme
committed
e44fbf2
file_store_any2obj.c: validate blob length before allocation
abtom87
authored and
jogme
committed
b584ce6
cms: fix AuthEnvelopedData authAttrs tags and verify them as AEAD AAD
bukka
authored and
jogme
committed
35d15b5
Free connections before listeners in the radix test cleanup
bob-beck
authored and
jogme
committed
c8ba7c8
Rework how to fetch components in the drbg
nhorman
authored and
jogme
committed
75b27b9
add a test to exercize the identity config directive on fips
nhorman
authored and
jogme
committed
f544f49
test: fix FIPS identity DRBG regression coverage
idrassi
authored and
jogme
committed
39a7a0f
Allow X448MLKEM1024 to be fips approved
nhorman
authored and
jogme
committed
c4c0b8c

Commits on Aug 24, 2026

Revert "Allow X448MLKEM1024 to be fips approved"
mbroz
authored and
jogme
committed
0953b87
Add test for CVE-2026-63076
n13l
authored and
jogme
committed
ef39803
Fix Remote NULL deref in ossl_cmp_calc_protection() via crafted protectionAlg
n13l
authored and
jogme
committed
48c9aaf
Don't store ACK-only frames in TX history for QUIC.
nhorman
authored and
jogme
committed
7c98d79
Add a test for restricting growth in cmp cert cache
nhorman
authored and
jogme
committed
2501a37
Fix unbounded cert cache growth in cmp
nhorman
authored and
jogme
committed
75360af
Handle signature_algorithms_cert extension in key-only context
Viktor Dukhovni
authored and
jogme
committed
d0af204
CMP unexpected sender DN used as format string in ERR_raise_data()
jogme
committed
0cc20b3
Add test for CVE-2026-63073
jogme
committed
9d838f6
Add test for CVE-2026-63072
n13l
authored and
jogme
committed
d384598
Fix heap buffer overflow (8-byte OOB write) in AES-WRAP-PAD unwrap
n13l
authored and
jogme
committed
87784ad
Avoid full read buffer allocation when buffering DTLS next-epoch records
mattcaswell
authored and
jogme
committed
4808b5d
ssl/record/methods/dtls_meth.c: lower the unprocessed_rcds queue limit
mattcaswell
authored and
jogme
committed
23537da
ssl/record: remove dead DTLS processed_rcds record queue
mattcaswell
authored and
jogme
committed
6f72c9a
Avoid double free of qrx in port_default_packet_handler()
Sashan
authored and
jogme
committed
967582d

Commits on Aug 25, 2026

CHANGES.md: rephrase TLS 1.3 ticket lifetime cap change log record
esyr
authored and
jogme
committed
9bde5cc
CHANGES.md, NEWS.md: reorder HollowByte change log record, add missing period
esyr
authored and
jogme
committed
ffdd18b
CHANGES.md, NEWS.md: update for 3.5.8
esyr
authored and
jogme
committed
4d79d67
Copyright year updates
openssl-machine
committed
48f2ead
make update
openssl-machine
committed
2197faa
Prepare for release of 3.5.8
openssl-machine
committed
f4dc4d5

Commits on Sep 1, 2026

Remove submodules
rschu1ze
authored and
root
committed
ee69767
Msan fixes
rschu1ze
authored and
root
committed
93c999b
Remove dependency on "getrandom" function
rschu1ze
authored and
root
committed
1e6fca4
Remove dependency on glibc 2.14 sendmmsg/recvmmsg
rschu1ze
authored and
root
committed
55227af
Suppress tsan failures: use locks instead of atomics
rschu1ze
authored and
root
committed
1c5cd7a
Suppress leaky memory warning
rschu1ze
authored and
chethan-64
committed
c78e1b4
Suppress leaky memory warning in OpenSSL's error handling
rschu1ze
authored and
chethan-64
committed
fc1f070
Suppress leaksan false positive
rschu1ze
authored and
chethan-64
committed
4312e62
Suppress leaky memory warning, pt. II
rschu1ze
authored and
chethan-64
committed
4439909
Remove submodules
Konstantin Bogdanov
authored and
chethan-64
committed
d591467
Add msan_unpoison around SHA3 assembly calls
Konstantin Bogdanov
authored and
chethan-64
committed
b0fe9d5
Add __msan_unpoison for X25519 assembly output buffers
alexey-milovidov
authored and
chethan-64
committed
e485f2f
Use getauxval for ARM CPU feature detection on musl
thevar1able
authored and
chethan-64
committed
d5430eb