Sponsored Content
Skip to content

Downgrades OpenSSL to 3.5.4 - #5878

Merged
bthomee merged 1 commit into
developfrom
bthomee/openssl
Oct 10, 2025
Merged

Downgrades OpenSSL to 3.5.4#5878
bthomee merged 1 commit into
developfrom
bthomee/openssl

Conversation

@bthomee

@bthomee bthomee commented Oct 10, 2025

Copy link
Copy Markdown
Collaborator

High Level Overview of Change

This change downgrades OpenSSL 3.6.0 to 3.5.4.

Context of Change

To avoid potential zero-day issues in a new major version of OpenSSL, 3.6.0, it is safer to stick with 3.5.4. While 3.6.0 has some nice new features, such as improved SHA512 hashing, it also introduces new features that could contain bugs. In contrast, 3.5.4 has seen quite a few bug fixes over 3.5.0 and has been used in the wild for a while now.

Type of Change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Refactor (non-breaking change that only restructures code)
  • Performance (increase or change in throughput and/or latency)
  • Tests (you added tests for code that already exists, or your new feature included in this PR)
  • Documentation update
  • Chore (no impact to binary, e.g. .gitignore, formatting, dropping support for older tooling)
  • Release

@bthomee
bthomee requested review from Bronek and a1q123456 October 10, 2025 13:52
@bthomee bthomee added the QE test required RippleX QE Team must look at this PR. label Oct 10, 2025
@Bronek Bronek added Ready to merge *PR author* thinks it's ready to merge. Has passed code review. Perf sign-off may still be required. and removed QE test required RippleX QE Team must look at this PR. labels Oct 10, 2025
@bthomee
bthomee enabled auto-merge (squash) October 10, 2025 13:59
@Bronek Bronek added the QE test required RippleX QE Team must look at this PR. label Oct 10, 2025
@codecov

codecov Bot commented Oct 10, 2025

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 79.2%. Comparing base (46ba8a2) to head (bac446f).
⚠️ Report is 1 commits behind head on develop.

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff            @@
##           develop   #5878     +/-   ##
=========================================
- Coverage     79.2%   79.2%   -0.0%     
=========================================
  Files          816     816             
  Lines        72425   72425             
  Branches      8365    8366      +1     
=========================================
- Hits         57376   57367      -9     
- Misses       15049   15058      +9     

see 2 files with indirect coverage changes

Impacted file tree graph

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@bthomee
bthomee merged commit 3c88786 into develop Oct 10, 2025
3 checks passed
@bthomee
bthomee deleted the bthomee/openssl branch October 10, 2025 14:18
@mvadari mvadari added this to the 3.2.0 milestone May 20, 2026
beartec-jpg pushed a commit to beartec-jpg/FalconLedger that referenced this pull request Jun 1, 2026
This change downgrades OpenSSL 3.6.0 to 3.5.4. To avoid potential zero-day issues in a new major version of OpenSSL, 3.6.0, it is safer to stick with 3.5.4. While 3.6.0 has some nice new features, such as improved SHA512 hashing, it also introduces new features that could contain bugs. In contrast, 3.5.4 has seen quite a few bug fixes over 3.5.0 and has been used in the wild for a while now.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

QE test required RippleX QE Team must look at this PR. Ready to merge *PR author* thinks it's ready to merge. Has passed code review. Perf sign-off may still be required.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants