openssl, branch openssl-3.0.19

Prepare for release of 3.0.19

2026-01-27T14:09:55Z

Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman MergeDate: Tue Jan 27 14:09:56 2026 Release: yes

make update

2026-01-27T14:09:53Z

Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman MergeDate: Tue Jan 27 14:09:55 2026 Release: yes

Copyright year updates

2026-01-27T14:08:27Z

Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman MergeDate: Tue Jan 27 14:08:29 2026 Release: yes

Add CHANGES and NEWS entries for the Jan 2026 security issue fixes

2026-01-26T20:05:38Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman MergeDate: Mon Jan 26 20:05:46 2026

CHANGES.md: update for 3.0.19

2026-01-26T20:05:38Z

3.0.19 CHANGES.md includes the following: * https://github.com/openssl/openssl/pull/29214 "s390x: Check and fail on invalid malformed ECDSA signatures" * https://github.com/openssl/openssl/pull/29256 "Clang format 3.0" Co-Authored-by: Tomáš Mráz Signed-off-by: Eugene Syromiatnikov Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz MergeDate: Mon Jan 26 20:05:45 2026

PKCS12_item_decrypt_d2i_ex(): Check oct argument for NULL

2026-01-26T19:56:53Z

Fixes CVE-2025-69421 Reviewed-by: Nikola Pajkovsky Reviewed-by: Saša Nedvědický Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz MergeDate: Mon Jan 26 19:56:08 2026 (cherry picked from commit 2c13bf15286328641a805eb3b7c97e27d42881fb)

Verify ASN1 object's types before attempting to access them

2026-01-26T19:54:30Z

as a particular type Issue was reported in ossl_ess_get_signing_cert but is also present in ossl_ess_get_signing_cert_v2. Fixes: https://github.com/openssl/srt/issues/61 Fixes CVE-2025-69420 Reviewed-by: Norbert Pocs Reviewed-by: Saša Nedvědický Reviewed-by: Tomas Mraz MergeDate: Mon Jan 26 19:53:36 2026 (cherry picked from commit ea8fc4c345fbd749048809c9f7c881ea656b0b94)

Fix OCB AES-NI/HW stream path unauthenticated/unencrypted trailing bytes

2026-01-26T19:49:32Z

When ctx->stream (e.g., AES‑NI or ARMv8 CE) is available, the fast path encrypts/decrypts full blocks but does not advance in/out pointers. The tail-handling code then operates on the base pointers, effectively reprocessing the beginning of the buffer while leaving the actual trailing bytes unencrypted (encryption) or using the wrong plaintext (decryption). The authentication checksum excludes the true tail. CVE-2025-69418 Fixes: https://github.com/openssl/srt/issues/58 Signed-off-by: Norbert Pocs Reviewed-by: Saša Nedvědický Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz MergeDate: Mon Jan 26 19:48:35 2026 (cherry picked from commit be9375d5d45dfaf897b56ef148a0b58402491fcb)

Fix heap buffer overflow in BIO_f_linebuffer

2026-01-26T19:42:50Z

When a FIO_f_linebuffer is part of a bio chain, and the next BIO preforms short writes, the remainder of the unwritten buffer is copied unconditionally to the internal buffer ctx->obuf, which may not be sufficiently sized to handle the remaining data, resulting in a buffer overflow. Fix it by only copying data when ctx->obuf has space, flushing to the next BIO to increase available storage if needed. Fixes openssl/srt#48 Fixes CVE-2025-68160 Reviewed-by: Nikola Pajkovsky Reviewed-by: Eugene Syromiatnikov Reviewed-by: Saša Nedvědický Reviewed-by: Tomas Mraz MergeDate: Mon Jan 26 19:41:40 2026 (cherry picked from commit b21663c35a6f0ed4c8de06855bdc7a6a21f00c2f)

Test for handling of AEAD-encrypted CMS with inadmissibly long IV

2026-01-26T19:34:23Z

Reviewed-by: Norbert Pocs Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz MergeDate: Mon Jan 26 19:34:33 2026