rust-openssl · alex · May 4, 2026 · May 3, 2026
diff --git a/openssl-sys/CHANGELOG.md b/openssl-sys/CHANGELOG.md
@@ -2,9 +2,12 @@
 
 ## [Unreleased]
 
+## [v0.9.115] - 2026-05-03
+
 ### Added
 
 * Added `OSSL_PARAM_modified` and exposed the `OSSL_PARAM` struct fields, so callers can detect whether a get-params call wrote into a parameter and read its `return_size`.
+* Added `EVP_CIPHER_flags` / `EVP_CIPHER_get_flags`, the `EVP_CIPH_MODE` mask, and the `EVP_CIPH_WRAP_MODE` constant.
 
 ### Changed
 

diff --git a/openssl-sys/Cargo.toml b/openssl-sys/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "openssl-sys"
-version = "0.9.114"
+version = "0.9.115"
 authors = [
     "Alex Crichton <[email protected]>",
     "Steven Fackler <[email protected]>",

diff --git a/openssl/CHANGELOG.md b/openssl/CHANGELOG.md
@@ -2,10 +2,13 @@
 
 ## [Unreleased]
 
+## [v0.10.79] - 2026-05-03
+
 ### Changed
 
 * Bumped MSRV to 1.80.
 * Removed the `once_cell` dependency in favor of `std::sync::{LazyLock, OnceLock}`.
+* Deprecated `EcPointRef::mul`, `EcPointRef::mul_generator`, and `EcPointRef::invert` in favor of `mul2`, `mul_generator2`, and `invert2`, which take `&mut BigNumContextRef`. The deprecated methods accepted a shared reference despite mutating the `BN_CTX`, which was unsound under `Send + Sync`.
 
 ### Added
 
@@ -14,10 +17,15 @@
 * Added `PKey::private_key_from_seed`, which constructs ML-DSA and ML-KEM private keypairs from a `seed` `OSSL_PARAM` via `EVP_PKEY_fromdata`. Requires OpenSSL 3.5 or newer at runtime.
 * Added `PKeyRef::is_a` and the `KeyType` algorithm-name newtype, for identifying provider-supplied keys (such as ML-DSA) where `EVP_PKEY_id` returns `-1`.
 * Added `PKey::public_key_from_raw_bytes_ex` and `PKey::private_key_from_raw_bytes_ex`, which take a `KeyType` and accept an optional library context and property query string. Required for provider-supplied algorithms with no associated `Id`, such as ML-DSA.
+* Added `PkeyCtxRef::set_context_string`, which binds a context string to an ML-DSA signing or verification operation. Requires OpenSSL 3.5 or newer.
+* Added `EcPointRef::mul2`, `EcPointRef::mul_generator2`, and `EcPointRef::invert2`, which take `&mut BigNumContextRef`.
 
 ### Fixed
 
 * `EcGroupRef::generator` no longer constructs a reference from a NULL pointer when the group has no generator set (e.g. a group built with `EcGroup::from_components` before `set_generator` is called), which was immediate undefined behavior. It now panics in that case and has been deprecated in favor of `EcGroupRef::generator_opt`.
+* `X509Ref::ocsp_responders` now validates each accessLocation as UTF-8 and returns an `ErrorStack` if any entry is not, rather than constructing a `&str` containing invalid UTF-8 (language-level UB triggerable by a malicious certificate).
+* Fixed a process abort that could occur when the SSL verify, PSK client, or PSK server callback fired after the underlying `SSL_CTX` had been swapped.
+* Fixed an output-buffer overflow in `CipherCtxRef::cipher_update` and `cipher_update_vec` when used with AES key-wrap-with-padding ciphers, which emit up to `input.len() + 15` bytes during the update call rather than the previously assumed `input.len() + block_size`.
 
 ## [v0.10.78] - 2026-04-19
 

diff --git a/openssl/Cargo.toml b/openssl/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "openssl"
-version = "0.10.78"
+version = "0.10.79"
 authors = ["Steven Fackler <[email protected]>"]
 license = "Apache-2.0"
 description = "OpenSSL bindings"
@@ -32,7 +32,7 @@ foreign-types = "0.3.1"
 libc = "0.2"
 
 openssl-macros = { version = "0.1.1", path = "../openssl-macros" }
-ffi = { package = "openssl-sys", version = "0.9.114", path = "../openssl-sys" }
+ffi = { package = "openssl-sys", version = "0.9.115", path = "../openssl-sys" }
 
 [dev-dependencies]
 hex = "0.4"