From: Russell Keith-Magee <russell@keith-magee.com>
Date: Sat, 2 May 2026 08:51:21 +0000 (+0800)
Subject: [3.13] gh-149254: Bump OpenSSL version for Android. (#149273)
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=22fdd355b1f49bd5ca14a35de8f13a3949cd5c6a;p=thirdparty%2FPython%2Fcpython.git

[3.13] gh-149254: Bump OpenSSL version for Android. (#149273)

Bump OpenSSL version to 3.0.20 for Android.
---

diff --git a/Android/android.py b/Android/android.py
index ecd5b3f1893f..235b42160b3f 100755
--- a/Android/android.py
+++ b/Android/android.py
@@ -213,8 +213,13 @@ def make_build_python(context):
 def unpack_deps(host, prefix_dir, cache_dir):
     os.chdir(prefix_dir)
     deps_url = "https://github.com/beeware/cpython-android-source-deps/releases/download"
-    for name_ver in ["bzip2-1.0.8-3", "libffi-3.4.4-3", "openssl-3.0.19-1",
-                     "sqlite-3.50.4-0", "xz-5.4.6-1"]:
+    for name_ver in [
+        "bzip2-1.0.8-3",
+        "libffi-3.4.4-3",
+        "openssl-3.0.20-0",
+        "sqlite-3.50.4-0",
+        "xz-5.4.6-1"
+    ]:
         filename = f"{name_ver}-{host}.tar.gz"
         out_path = download(f"{deps_url}/{name_ver}/{filename}", cache_dir)
         shutil.unpack_archive(out_path)
diff --git a/Misc/NEWS.d/next/Security/2026-05-02-16-27-17.gh-issue-149254.ng1cPU.rst b/Misc/NEWS.d/next/Security/2026-05-02-16-27-17.gh-issue-149254.ng1cPU.rst
new file mode 100644
index 000000000000..410ababf501b
--- /dev/null
+++ b/Misc/NEWS.d/next/Security/2026-05-02-16-27-17.gh-issue-149254.ng1cPU.rst
@@ -0,0 +1 @@
+Bumps the OpenSSL version to 3.0.20 on Android.