[Package Request] - OpenSSL version update from 3.2.2 to 3.5.5

[omatasas]

What package is missing from Amazon Linux 2023? Please describe and include package name.
OpenSSL version 3.5.5

Is this an update to existing package or new package request?
Update to existing package

Is this package available in Amazon Linux 2? If it is available via external sources such as EPEL, please specify.
I believe so

Any additional information you'd like to include. (use-cases, etc)
The OpenSSL 3.5.5 is the latest LTS version, which should be the one installed on the base image of Amazon Linux 2023, and not OpenSSL 3.2.2 (which has reached it's EOL on November 2025).
This should resolve many security issues raised by security tools (such as WIZ, snyk, etc.).

Reference - https://openssl-library.org/roadmap/index.html

[stewartsmith]

There's a number of things we have to be really careful with when looking at OpenSSL updates: ensuring that FIPS continues to work, backwards compatibility (i.e. ABI compatibility so that existing applications don't break), performance, functionality, etc.

i.e. it's a decent amount of work to ensure we don't break customers. We don't want to break customers :)

It is something we're looking at, but do be assured that we do ensure that our latest OpenSSL packages are patched for security issues, backporting where needed.