What's Changed
- OPENSSL_SMALL: imply MY_ASSEMBLER_IS_TOO_OLD_FOR_512AVX on x86_64 by @justsmth in #3319
- Documented and added feature stability tests for EVP_AEAD implementations that support concurrency through EVP_AEAD_CTX_seal/gather functions by @torben-hansen in #3325
- Fix libgit2, xtrabackup, grpc tests and add OSSL3 peer cert APIs by @WillChilds-Klein in #3331
- Null-guard EVP_AEAD_CTX_cleanup for fork+shm safety by @WillChilds-Klein in #3336
- Add Symbol Versioning Support by @skmcgrail in #3096
- Symbol versioning follow-ups: register peer cert APIs, fix dist_pkg_tests matrix by @WillChilds-Klein in #3338
- Update security review workflow by @nhatnghiho in #3333
- Add ML-KEM decapsulate CASTs to break-kat tooling by @WillChilds-Klein in #3342
- Pin required libssh2 integration to a release; track main separately by @WillChilds-Klein in #3343
- ci: harden GitHub Actions workflows against script injection by @justsmth in #3323
- openssl/target.h: Allow building for the e2k architecture by @arrowd in #3314
- Bump github.com/cloudflare/circl from 1.6.3 to 1.6.4 in /util/vecgen in the gomod-vecgen group by @dependabot[bot] in #3327
- Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 in /tests/ci/x509/limbo-report in the gomod-limbo-report group by @dependabot[bot] in #3328
- Add CTS mode, krb5 integration test by @WillChilds-Klein in #3308
- Gate s2n-bignum _alt variants under OPENSSL_SMALL by @justsmth in #3320
- Fix
SSL_OP_IGNORE_UNEXPECTED_EOFbeing ignored over sockets by @prasden in #3341 - Prepare v5.2.0 by @WillChilds-Klein in #3348
New Contributors
Full Changelog: v5.1.0...v5.2.0