prepare 0.15.3

Author: cpu

CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.15.3 (2026-04-22)
+
+This is a minor release with one security fix. It also updates `rustls` to
+[0.23.39](https://github.com/rustls/rustls/releases/tag/v%2F0.23.39).
+
+### Security
+
+This update addresses
+[RUSTSEC-2026-0104](https://rustsec.org/advisories/RUSTSEC-2026-0104.html);
+a security issue affecting CRL parsing that could result in a panic prior
+to the validation of a CRL's signature.
+
+This security issue only affects users of the
+`rustls_web_pki_client_cert_verifier_builder_add_crl()` and
+`rustls_web_pki_server_cert_verifier_builder_add_crl()` APIs.
+
 ## 0.15.2 (2026-04-15)
 
 This is a minor release with two security fixes. It also updates `rustls` to

Cargo.lock

@@ -1,7 +1,7 @@
 [package]
 name = "rustls-ffi"
 # Keep in sync with defines in cbindgen.toml
-version = "0.15.2"
+version = "0.15.3"
 license = "Apache-2.0 OR ISC OR MIT"
 readme = "../README-crates.io.md"
 description = "Rustls bindings for non-Rust languages"

librustls/Cargo.toml

@@ -5,7 +5,7 @@ after_includes = """
 
 #define RUSTLS_VERSION_MAJOR 0
 #define RUSTLS_VERSION_MINOR 15
-#define RUSTLS_VERSION_PATCH 2
+#define RUSTLS_VERSION_PATCH 3
 
 /**
  * This gives each version part 8 bits, and leaves the 8 least significant bits

librustls/cbindgen.toml

@@ -9,7 +9,7 @@
 
 #define RUSTLS_VERSION_MAJOR 0
 #define RUSTLS_VERSION_MINOR 15
-#define RUSTLS_VERSION_PATCH 2
+#define RUSTLS_VERSION_PATCH 3
 
 /**
  * This gives each version part 8 bits, and leaves the 8 least significant bits