gh-149254: Bump OpenSSL versions for iOS and Android. (#149270)

Bump OpenSSL versions for iOS and Android.

diff --git a/Misc/NEWS.d/next/Security/2026-05-02-15-38-03.gh-issue-149254.0HOL0j.rst b/Misc/NEWS.d/next/Security/2026-05-02-15-38-03.gh-issue-149254.0HOL0j.rst
new file mode 100644 (file)
index 0000000..f3cf924
--- /dev/null
+++ b/Misc/NEWS.d/next/Security/2026-05-02-15-38-03.gh-issue-149254.0HOL0j.rst
@@ -0,0 +1 @@
+Update Android and iOS installer to use OpenSSL 3.5.6.

diff --git a/Platforms/Android/__main__.py b/Platforms/Android/__main__.py
index 315632ea12c07d29676fcc1c534d7d5c533fb1dc..d2546cf76c206b0fdd332baeb68bed4f28ca62d1 100755 (executable)
--- a/Platforms/Android/__main__.py
+++ b/Platforms/Android/__main__.py
@@ -216,8 +216,14 @@ def make_build_python(context):
 def unpack_deps(host, prefix_dir, cache_dir):
     os.chdir(prefix_dir)
     deps_url = "https://github.com/beeware/cpython-android-source-deps/releases/download"
-    for name_ver in ["bzip2-1.0.8-3", "libffi-3.4.4-3", "openssl-3.5.5-0",
-                     "sqlite-3.50.4-0", "xz-5.4.6-1", "zstd-1.5.7-2"]:
+    for name_ver in [
+        "bzip2-1.0.8-3",
+        "libffi-3.4.4-3",
+        "openssl-3.5.6-0",
+        "sqlite-3.50.4-0",
+        "xz-5.4.6-1",
+        "zstd-1.5.7-2"
+    ]:
         filename = f"{name_ver}-{host}.tar.gz"
         out_path = download(f"{deps_url}/{name_ver}/{filename}", cache_dir)
         shutil.unpack_archive(out_path)

diff --git a/Platforms/Apple/__main__.py b/Platforms/Apple/__main__.py
index 44a991c6c20a9386e2dfe87686c102bc1a12ae22..d94198a309f9269de210ea2e87c5be07860b34c3 100644 (file)
--- a/Platforms/Apple/__main__.py
+++ b/Platforms/Apple/__main__.py
@@ -319,7 +319,7 @@ def unpack_deps(
     for name_ver in [
         "BZip2-1.0.8-2",
         "libFFI-3.4.7-2",
-        "OpenSSL-3.5.5-1",
+        "OpenSSL-3.5.6-1",
         "XZ-5.6.4-2",
         "mpdecimal-4.0.0-2",
         "zstd-1.5.7-1",