Re: [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: security bump to version 3.5.4

From: Thomas Perale via buildroot <buildroot@buildroot.org>
To: Quentin Schulz <quentin.schulz@cherry.de>
Cc: Thomas Perale <thomas.perale@mind.be>,
	Jimmy Durand Wesolowski <jimmy.wesolowski@mobileye.com>,
	buildroot@buildroot.org, guenther.harrasser@mobileye.com
Subject: Re: [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: security bump to version 3.5.4
Date: Mon, 13 Apr 2026 14:27:02 +0200	[thread overview]
Message-ID: <20260413122702.58499-1-thomas.perale@mind.be> (raw)
In-Reply-To: <b4ab5d3f-e0e7-4c97-9df6-7cfd4ba3db9a@cherry.de>

Hi Jimmy, Quentin,

I will need to backport the following commit as well:

1. 359908d33c package/ibm-sw-tpm2: add upstream patch to fix builds against libopenssl 3.5.x
2. a01c07f572 package/libspdm: bump version to 3.8.0

I made a 2025.02.x specific backport for libspdm (https://patchwork.ozlabs.org/project/buildroot/patch/20260413122459.58318-1-thomas.perale@mind.be/).

Let me know if you see any other package that will break and that I missed. I
will try to apply this series by the end of the week.

PERALE Thomas

In reply of:
> Hi Jimmy,
> 
> Your series is somehow malformed, all patches have v2 instead of v2 x/5. Your v1 had it correct so I'm not sure what happened since.
> 
> I highly suggest to use b4 (https://b4.docs.kernel.org/en/latest/ and https://pypi.org/project/b4/) if you can. Otherwise, I believe you can generate the series with
> git format-patch --cover-letter -v 2 --subject-prefix "PATCH 2025.02.x" -M -s -o outgoing origin/2025.02.x
> as hinted by the docs in 22.5.4. Patches for maintenance branches.
> 
> On 3/19/26 1:42 PM, Jimmy Durand Wesolowski wrote:
> > As indicated by Quentin Schulz <quentin.schulz@cherry.de>, OpenSSL 3.4 is
> > EoL at the end of 2026, and thus earlier than the Buildroot LTS 2025.02
> > (end of 2027).
> > OpenSSL version thus needs to be bumped to 3.5.x, which is currently
> > 3.5.4. Note that a new 3.5.5 release is in the making.
> > This series brings all the related commits from master to 2025.02.x.
> > 
> Considering we're using this series in one of our products and that before that series we had backported the patches internally and they were the same as in this series:
> 
> Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
> 
> Thanks!
> Quentin
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot