diff --git a/ChangeLog.rst b/ChangeLog.rst
index b3b6513..3c1c4e7 100644
--- a/ChangeLog.rst
+++ b/ChangeLog.rst
@@ -1,3 +1,13 @@
+wolfSSL-py Release 5.9.2 (Jul 15, 2026)
+============================================
+* Fix SSLSocket.write() corrupting bytes-like data such as bytearray/memoryview
+* Return None instead of raising from getpeercert() when the peer sends no certificate
+* Require verify_mode=CERT_REQUIRED when enabling check_hostname
+* Map non-blocking WANT_READ/WANT_WRITE to SSLWantReadError/SSLWantWriteError
+* FFI and build fixes
+* Fenrir fixes
+* Update wolfSSL to version 5.9.2
+
 wolfSSL-py Release 5.8.4 (Dec 29, 2025)
 ============================================
 * Fix an issue which allowed a client without a cert to connect despite setting verify_mode to CERT_REQUIRED (CVE-2025-15346):
diff --git a/lib/wolfssl b/lib/wolfssl
index 59f4fa5..ac01707 160000
--- a/lib/wolfssl
+++ b/lib/wolfssl
@@ -1 +1 @@
-Subproject commit 59f4fa568615396fbf381b073b220d1e8d61e4c2
+Subproject commit ac01707f552c611fbd135cc723b2682b3e7f80f2
diff --git a/wolfssl/_version.py b/wolfssl/_version.py
index 869a62a..bf2c7de 100644
--- a/wolfssl/_version.py
+++ b/wolfssl/_version.py
@@ -1,6 +1,6 @@
 # When bumping the C library version, reset the POST count to 0
 
-__wolfssl_version__ = "v5.8.4-stable"
+__wolfssl_version__ = "v5.9.2-stable"
 
 # We're using implicit post releases [PEP 440] to bump package version
 # while maintaining the C library version intact for better reference.
@@ -8,4 +8,4 @@
 #
 # MAJOR.MINOR.BUILD-POST
 
-__version__ = "5.8.4-0"
+__version__ = "5.9.2-0"