Update OpenSSL (August 2026)

[zware]

Feature or enhancement

Proposal:

OpenSSL has updated releases, including 3.6.4, 3.5.8, 3.0.22. The highest vulnerability level in this set is "moderate" and it is not obvious that we are directly impacted by any of them, but we should still update before our next round of scheduled releases anyway so I'm adding the 'release-blocker' label here.

We should update the CI, release artifacts, and so on.

Has this already been discussed elsewhere?

This is a minor feature, which does not need previous discussion elsewhere

Links to previous discussion of this feature:

See gh-151159, gh-149254 for previous rounds.

Linked PRs

• gh-156369: Update OpenSSL error ID data #156380
• gh-156369: Update CI to use latest SSL library versions #156381
• [3.15] gh-156369: Update CI to use latest SSL library versions (GH-156381) #156389
• [3.14] gh-156369: Update CI to use latest SSL library versions (GH-156381) #156390
• [3.15] gh-156369: Update OpenSSL error ID data (GH-156380) #156392
• [3.14] gh-156369: Update OpenSSL error ID data (GH-156380) #156393
• [3.13] gh-156369: Update CI to use latest SSL library versions (GH-156381) #156394