openssl, branch openssl-3.5.9

Prepare for release of 3.5.9

2026-09-29T14:05:00Z

Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz Merge-date: Tue Sep 29 14:05:00 2026 Release: yes

make update

2026-09-29T14:05:00Z

Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz Merge-date: Tue Sep 29 14:05:00 2026 Release: yes

Copyright year updates

2026-09-29T14:02:59Z

Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz Merge-date: Tue Sep 29 14:02:59 2026 Release: yes

CHANGES.md, NEWS.md: update for 3.5.9

2026-09-29T12:02:40Z

3.5.9 CHANGES.md includes the following: * CVE-2026-35189, CVE-2026-35191, CVE-2026-42772, CVE-2026-54872, CVE-2026-54873, CVE-2026-54875, CVE-2026-72897, CVE-2026-75804, CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782, CVE-2026-84784 * https://github.com/openssl/openssl/pull/31610 "siv128.c: Assigned -1 to final_ret(ctx) variable on auth. failure." * https://github.com/openssl/openssl/pull/32694 "http: reject HTTPS downgrades after relative redirects" * https://github.com/openssl/openssl/pull/32872 "Remove /Gs0 windows compiler flag" * https://github.com/openssl/openssl/pull/32913 "FIPS [3.5]: Change Indicators so that all approved algorithms have a gettable indicator." 3.5.9 NEWS.md includes the following: * CVE-2026-35189, CVE-2026-35191, CVE-2026-42772, CVE-2026-54872, CVE-2026-54873, CVE-2026-54875, CVE-2026-72897, CVE-2026-75804, CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782, CVE-2026-84784 * https://github.com/openssl/openssl/pull/31610 "siv128.c: Assigned -1 to final_ret(ctx) variable on auth. failure." Signed-off-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz Reviewed-by: Norbert Pocs Merge-date: Tue Sep 29 12:02:43 2026

test verifies the connection level RX flow control

2026-09-29T11:58:25Z

window is enforced. Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz Reviewed-by: Andrew Dinh Merge-date: Tue Sep 29 11:58:29 2026

CVE-2026-75804 QUIC connection-level flow control not enforced, remote memory exhaustion

2026-09-29T11:58:25Z

Function ossl_quic_rxfc_get_error() must also report flow control violation error for connection level not just for stream level. Ignoring connection level error prevents QUIC stack to enforce flow control. Fixes CVE-2026-75804 Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz Reviewed-by: Andrew Dinh Merge-date: Tue Sep 29 11:58:28 2026

Add a test to check for quic unvalidated credit

2026-09-29T11:54:23Z

Adds a test to ensure that, when sending a coalesced frame that should drive more than the available unvalidated credit that a server has, we stop sending when we reach that limit. Reviewed-by: Saša Nedvědický Reviewed-by: Tomas Mraz Reviewed-by: Andrew Dinh Merge-date: Tue Sep 29 11:54:25 2026

don't double count full databgram length on unvalidated connections

2026-09-29T11:54:23Z

If a connection is coalescing frames, we pass through ossl_quic_handle_frames multiple times, each time accounting the full datagram length to the connection, erroneously amplifying our unvalidated credit. Fix it by moving where we account unvalidated credit. If we move the adding of unvalidated credit to port_default_packet_handler, we can add the datagram length to the channels unvalidated credit before it gets broken up into multiple OSSL_QRX_PKT structures. Fixes CVE-2026-35191 Reviewed-by: Saša Nedvědický Reviewed-by: Tomas Mraz Reviewed-by: Andrew Dinh Merge-date: Tue Sep 29 11:54:24 2026

CVE-2026-84784 QUIC: unbounded RETIRE_CONNECTION_ID backlog (memory DoS)

2026-09-29T11:32:30Z

connection must fail when remote peer attempts to retire more than 10 connection IDs. The point is to send more than 10 NEW_CONNECTION_ID frames. Each frame is retiring earlier connection id. Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz Merge-date: Tue Sep 29 11:32:35 2026

CVE-2026-84784 QUIC: unbounded RETIRE_CONNECTION_ID backlog (memory DoS)

2026-09-29T11:32:30Z

Currently the cur_retire_prior_to counter is updated when RETIRE_CONNECTION_ID is dispatched to control frame queue. However to follow protocol state at both connection ends the counter must be updated after seeing an ACK from remote peer indicating it's received RETIRE_CONNECTION_ID frame. Diverging from protocol spec here allows malicious remote peer to queue excessive amount of RETIRE_CONNECTION_ID frames to local control frame queue (CFQ). Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz Merge-date: Tue Sep 29 11:32:34 2026