summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJack Sun2026-04-08 13:15:24 +0000
committerHauke Mehrtens2026-04-12 18:21:57 +0000
commit7118a5b5ee4ee8f36a5f04808482f65650f538e0 (patch)
tree4656d83e175d120d28b437cde76d8314f440cd06
parent63329adfeb011874e49d962b92bcc08921636bd4 (diff)
downloadopenwrt-7118a5b5ee4ee8f36a5f04808482f65650f538e0.tar.gz
openssl: update to 3.5.6
This release incorporates the following bug fixes and mitigations: Fixed incorrect failure handling in RSA KEM RSASVE encapsulation. (CVE-2026-31790) Fixed loss of key agreement group tuple structure when the DEFAULT keyword is used in the server-side configuration of the key-agreement group list. (CVE-2026-2673) Fixed potential use-after-free in DANE client code. (CVE-2026-28387) Fixed NULL pointer dereference when processing a delta CRL. (CVE-2026-28388) Fixed possible NULL dereference when processing CMS KeyAgreeRecipientInfo. (CVE-2026-28389) Fixed possible NULL dereference when processing CMS KeyTransportRecipientInfo. (CVE-2026-28390) Fixed heap buffer overflow in hexadecimal conversion. (CVE-2026-31789) No need refresh patches Signed-off-by: Jack Sun <sunjiazheng321521@gmail.com> Link: https://github.com/openwrt/openwrt/pull/22847 Signed-off-by: Robert Marko <robimarko@gmail.com> (cherry picked from commit 62ea6aad4705e88acb26f26803bfd20e17e9c8b3)
-rw-r--r--package/libs/openssl/Makefile4
1 files changed, 2 insertions, 2 deletions
diff --git a/package/libs/openssl/Makefile b/package/libs/openssl/Makefile
index 91ec5e1d3c..aa7dfa2179 100644
--- a/package/libs/openssl/Makefile
+++ b/package/libs/openssl/Makefile
@@ -8,7 +8,7 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=openssl
-PKG_VERSION:=3.5.5
+PKG_VERSION:=3.5.6
PKG_RELEASE:=1
PKG_BUILD_FLAGS:=no-mips16 gc-sections no-lto
@@ -21,7 +21,7 @@ PKG_SOURCE_URL:= \
https://www.openssl.org/source/old/$(PKG_BASE)/ \
https://github.com/openssl/openssl/releases/download/$(PKG_NAME)-$(PKG_VERSION)/
-PKG_HASH:=b28c91532a8b65a1f983b4c28b7488174e4a01008e29ce8e69bd789f28bc2a89
+PKG_HASH:=deae7c80cba99c4b4f940ecadb3c3338b13cb77418409238e57d7f31f2a3b736
PKG_LICENSE:=Apache-2.0
PKG_LICENSE_FILES:=LICENSE.txt