[3.13] gh-144551: Update CI to use latest OpenSSL versions (GH-144794)

[zware]

(cherry picked from commit b933ef9)

• Issue: Update OpenSSL (January 2026) #144551

[zware]

Note that this backport both goes farther and not as far as the original; an update to Modules/_ssl_data_3*.h is not included, but this includes updates to the CI/multissltests versions that had not been previously backported. I'm neutral on whether to even merge this one; @hugovk or @Yhg1s?

[hugovk]

I think we should at least bump the micro versions of the existing ones.

If we're going to switch to from 3.0 LTS to 3.5 LTS at some point for 3.13 (which I guess we are, with 3.0 going EOL this year?) then it makes sense to at least test up to that version.

3.5 LTS will be supported until 2030 which is enough for 3.13's lifetime.

Although it's probably okay to also test 3.6?

[zware]

Ok, you (and passing CI :) ) have convinced me to go ahead with this backport. Anything beyond this will I think need Thomas's input.

[bedevere-bot]

⚠️⚠️⚠️ Buildbot failure ⚠️⚠️⚠️

Hi! The buildbot AMD64 Debian root 3.13 (tier-1) has failed when building commit 48dd852.

What do you need to do:

1. Don't panic.
2. Check the buildbot page in the devguide if you don't know what the buildbots are or how they work.
3. Go to the page of the buildbot that failed (https://buildbot.python.org/#/builders/1441/builds/1779) and take a look at the build logs.
4. Check if the failure is related to this commit (48dd852) or if it is a false positive.
5. If the failure is related to this commit, please, reflect that on the issue and make a new Pull Request with a fix.

You can take a look at the buildbot page here:

https://buildbot.python.org/#/builders/1441/builds/1779

Summary of the results of the build (if available):

==

Click to see traceback logs

Traceback (most recent call last):
File "/root/buildarea/3.13.angelico-debian-amd64/build/Lib/test/support/__init__.py", line 856, in gc_collect
gc.collect()
ResourceWarning: unclosed file <_io.FileIO name=13 mode='wb' closefd=True>
Traceback (most recent call last):
File "/root/buildarea/3.13.angelico-debian-amd64/build/Lib/test/support/__init__.py", line 856, in gc_collect
gc.collect()
ResourceWarning: unclosed file <_io.FileIO name=11 mode='wb' closefd=True>