]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commitdiff
openssl: upgrade 3.0.17 -> 3.0.18
authorArchana Polampalli <archana.polampalli@windriver.com>
Mon, 6 Oct 2025 08:13:41 +0000 (13:43 +0530)
committerSteve Sakoman <steve@sakoman.com>
Thu, 9 Oct 2025 14:35:42 +0000 (07:35 -0700)
This release incorporates the following bug fixes and mitigations:
Fix Out-of-bounds read & write in RFC 3211 KEK Unwrap. (CVE-2025-9230)
Fix Out-of-bounds read in HTTP client no_proxy handling. (CVE-2025-9232)

Changelog:
https://github.com/openssl/openssl/blob/openssl-3.0.18/NEWS.md#openssl-30

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-connectivity/openssl/openssl_3.0.18.bb [moved from meta/recipes-connectivity/openssl/openssl_3.0.17.bb with 99% similarity]

similarity index 99%
rename from meta/recipes-connectivity/openssl/openssl_3.0.17.bb
rename to meta/recipes-connectivity/openssl/openssl_3.0.18.bb
index a50bd2edbf77a369c55f218b3c6a11fa5b13dc69..a8dd338327125744f3eb9c502f8476e8d93519e9 100644 (file)
@@ -25,7 +25,7 @@ SRC_URI:append:class-nativesdk = " \
            file://environment.d-openssl.sh \
            "
 
-SRC_URI[sha256sum] = "dfdd77e4ea1b57ff3a6dbde6b0bdc3f31db5ac99e7fdd4eaf9e1fbb6ec2db8ce"
+SRC_URI[sha256sum] = "d80c34f5cf902dccf1f1b5df5ebb86d0392e37049e5d73df1b3abae72e4ffe8b"
 
 inherit lib_package multilib_header multilib_script ptest perlnative
 MULTILIB_SCRIPTS = "${PN}-bin:${bindir}/c_rehash"