public inbox for buildroot@busybox.net
 help / color / mirror / Atom feed
* [Buildroot] [PATCH 1/5] package/libopenssl: bump version to 3.5.0
@ 2026-03-16 16:13 Jimmy Durand Wesolowski via buildroot
  2026-03-16 16:13 ` [Buildroot] [PATCH 2/5] package/libopenssl: security bump version to 3.5.1 Jimmy Durand Wesolowski via buildroot
                   ` (5 more replies)
  0 siblings, 6 replies; 16+ messages in thread
From: Jimmy Durand Wesolowski via buildroot @ 2026-03-16 16:13 UTC (permalink / raw)
  To: buildroot; +Cc: Jimmy Durand Wesolowski, Kadambini Nema, guenther.harrasser

From: Kadambini Nema <kadambini.nema@gmail.com>

Release notes:
https://github.com/openssl/openssl/releases/tag/openssl-3.5.0

Changelog:
https://github.com/openssl/openssl/blob/master/CHANGES.md#openssl-35

Rebased patches for the new version.

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 9868ca6ec98afa28a94aea50cc940db7df860396)
Conflicts on
  package/libopenssl/libopenssl.hash
  package/libopenssl/libopenssl.mk
due to intermediate security bumps from 4.1 to 4.4 with commits
  0ec6cf7f69da "package/libopenssl: bump to v3.4.2"
  cd6d8b9b251d "package/libopenssl: security bump to version 3.4.3"
  dbf192e1764e "Package/libopenssl: security bump to v3.4.4"
Signed-off-by: Jimmy Durand Wesolowski <jimmy.wesolowski@mobileye.com>
---
 ...nfigure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch | 4 ++--
 package/libopenssl/0003-Revert-Fix-static-builds.patch      | 6 +++---
 package/libopenssl/libopenssl.hash                          | 4 ++--
 package/libopenssl/libopenssl.mk                            | 2 +-
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch b/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
index 629d9c26ce..2634d69f35 100644
--- a/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
+++ b/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
@@ -18,10 +18,10 @@ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
  1 file changed, 4 insertions(+)
 
 diff --git a/Configure b/Configure
-index 5a699836f3..f9152b1702 100755
+index 15054f9..ac3206e 100755
 --- a/Configure
 +++ b/Configure
-@@ -1549,6 +1549,10 @@ unless ($disabled{asm}) {
+@@ -1685,6 +1685,10 @@ unless ($disabled{asm}) {
      }
  }
  
diff --git a/package/libopenssl/0003-Revert-Fix-static-builds.patch b/package/libopenssl/0003-Revert-Fix-static-builds.patch
index b4b78c97fc..e800b782ad 100644
--- a/package/libopenssl/0003-Revert-Fix-static-builds.patch
+++ b/package/libopenssl/0003-Revert-Fix-static-builds.patch
@@ -15,10 +15,10 @@ Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
  1 file changed, 4 insertions(+), 4 deletions(-)
 
 diff --git a/Configure b/Configure
-index 2a5e58805c3b..0e8c1ce5cc74 100755
+index ac3206e..764ef89 100755
 --- a/Configure
 +++ b/Configure
-@@ -1466,10 +1466,6 @@ if ($config{prefix} && !$config{CROSS_COMPILE}) {
+@@ -1509,10 +1509,6 @@ if ($config{prefix} && !$config{CROSS_COMPILE}) {
          unless file_name_is_absolute($config{prefix});
  }
  
@@ -29,7 +29,7 @@ index 2a5e58805c3b..0e8c1ce5cc74 100755
  # Allow overriding the build file name
  $config{build_file} = env('BUILDFILE') || $target{build_file} || "Makefile";
  
-@@ -1764,6 +1760,10 @@ if ($strict_warnings)
+@@ -1807,6 +1803,10 @@ if ($strict_warnings)
                  }
          }
  
diff --git a/package/libopenssl/libopenssl.hash b/package/libopenssl/libopenssl.hash
index ea288054e9..9f8b23005a 100644
--- a/package/libopenssl/libopenssl.hash
+++ b/package/libopenssl/libopenssl.hash
@@ -1,5 +1,5 @@
-# From https://github.com/openssl/openssl/releases/download/openssl-3.4.4/openssl-3.4.4.tar.gz.sha256
-sha256  7bdf55ac20f2779e99e5eca306f824fad2b37dee5a06cc35ed5a8b85a6060010  openssl-3.4.4.tar.gz
+# From https://github.com/openssl/openssl/releases/download/openssl-3.5.0/openssl-3.5.0.tar.gz.sha256
+sha256  344d0a79f1a9b08029b0744e2cc401a43f9c90acd1044d09a530b4885a8e9fc0  openssl-3.5.0.tar.gz
 
 # License files
 sha256  7d5450cb2d142651b8afa315b5f238efc805dad827d91ba367d8516bc9d49e7a  LICENSE.txt
diff --git a/package/libopenssl/libopenssl.mk b/package/libopenssl/libopenssl.mk
index 8e3ae4cc21..5e785e1bf0 100644
--- a/package/libopenssl/libopenssl.mk
+++ b/package/libopenssl/libopenssl.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBOPENSSL_VERSION = 3.4.4
+LIBOPENSSL_VERSION = 3.5.0
 LIBOPENSSL_SITE = https://github.com/openssl/openssl/releases/download/openssl-$(LIBOPENSSL_VERSION)
 LIBOPENSSL_SOURCE = openssl-$(LIBOPENSSL_VERSION).tar.gz
 LIBOPENSSL_LICENSE = Apache-2.0
-- 
2.43.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 16+ messages in thread

* [Buildroot] [PATCH 2/5] package/libopenssl: security bump version to 3.5.1
  2026-03-16 16:13 [Buildroot] [PATCH 1/5] package/libopenssl: bump version to 3.5.0 Jimmy Durand Wesolowski via buildroot
@ 2026-03-16 16:13 ` Jimmy Durand Wesolowski via buildroot
  2026-03-16 16:13 ` [Buildroot] [PATCH 3/5] package/libopenssl: bump version to 3.5.2 Jimmy Durand Wesolowski via buildroot
                   ` (4 subsequent siblings)
  5 siblings, 0 replies; 16+ messages in thread
From: Jimmy Durand Wesolowski via buildroot @ 2026-03-16 16:13 UTC (permalink / raw)
  To: buildroot
  Cc: guenther.harrasser, Bernd Kuhls, Julien Olivain,
	Jimmy Durand Wesolowski

From: Bernd Kuhls <bernd@kuhls.net>

Fixes CVE-2025-4575:
https://github.com/openssl/openssl/releases/tag/openssl-3.5.1

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e97ca416c61e912d98b9d3439674cb40510cf160)
Signed-off-by: Jimmy Durand Wesolowski <jimmy.wesolowski@mobileye.com>
---
 package/libopenssl/libopenssl.hash | 4 ++--
 package/libopenssl/libopenssl.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/libopenssl/libopenssl.hash b/package/libopenssl/libopenssl.hash
index 9f8b23005a..1675d72fb2 100644
--- a/package/libopenssl/libopenssl.hash
+++ b/package/libopenssl/libopenssl.hash
@@ -1,5 +1,5 @@
-# From https://github.com/openssl/openssl/releases/download/openssl-3.5.0/openssl-3.5.0.tar.gz.sha256
-sha256  344d0a79f1a9b08029b0744e2cc401a43f9c90acd1044d09a530b4885a8e9fc0  openssl-3.5.0.tar.gz
+# From https://github.com/openssl/openssl/releases/download/openssl-3.5.1/openssl-3.5.1.tar.gz.sha256
+sha256  529043b15cffa5f36077a4d0af83f3de399807181d607441d734196d889b641f  openssl-3.5.1.tar.gz
 
 # License files
 sha256  7d5450cb2d142651b8afa315b5f238efc805dad827d91ba367d8516bc9d49e7a  LICENSE.txt
diff --git a/package/libopenssl/libopenssl.mk b/package/libopenssl/libopenssl.mk
index 5e785e1bf0..f3521b3cf3 100644
--- a/package/libopenssl/libopenssl.mk
+++ b/package/libopenssl/libopenssl.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBOPENSSL_VERSION = 3.5.0
+LIBOPENSSL_VERSION = 3.5.1
 LIBOPENSSL_SITE = https://github.com/openssl/openssl/releases/download/openssl-$(LIBOPENSSL_VERSION)
 LIBOPENSSL_SOURCE = openssl-$(LIBOPENSSL_VERSION).tar.gz
 LIBOPENSSL_LICENSE = Apache-2.0
-- 
2.43.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 16+ messages in thread

* [Buildroot] [PATCH 3/5] package/libopenssl: bump version to 3.5.2
  2026-03-16 16:13 [Buildroot] [PATCH 1/5] package/libopenssl: bump version to 3.5.0 Jimmy Durand Wesolowski via buildroot
  2026-03-16 16:13 ` [Buildroot] [PATCH 2/5] package/libopenssl: security bump version to 3.5.1 Jimmy Durand Wesolowski via buildroot
@ 2026-03-16 16:13 ` Jimmy Durand Wesolowski via buildroot
  2026-03-16 16:13 ` [Buildroot] [PATCH 4/5] package/libopenssl: bump version to 3.5.3 Jimmy Durand Wesolowski via buildroot
                   ` (3 subsequent siblings)
  5 siblings, 0 replies; 16+ messages in thread
From: Jimmy Durand Wesolowski via buildroot @ 2026-03-16 16:13 UTC (permalink / raw)
  To: buildroot; +Cc: Jimmy Durand Wesolowski, guenther.harrasser, Julien Olivain

From: Peter Korsgaard <peter@korsgaard.com>

Bugfix release:

- Miscellaneous minor bug fixes.

- The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
  This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.

https://github.com/openssl/openssl/releases/tag/openssl-3.5.2

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7e5a3c98452c6db8422b0fa6455390d138ad07df)
Signed-off-by: Jimmy Durand Wesolowski <jimmy.wesolowski@mobileye.com>
---
 package/libopenssl/libopenssl.hash | 4 ++--
 package/libopenssl/libopenssl.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/libopenssl/libopenssl.hash b/package/libopenssl/libopenssl.hash
index 1675d72fb2..7f3795e1ac 100644
--- a/package/libopenssl/libopenssl.hash
+++ b/package/libopenssl/libopenssl.hash
@@ -1,5 +1,5 @@
-# From https://github.com/openssl/openssl/releases/download/openssl-3.5.1/openssl-3.5.1.tar.gz.sha256
-sha256  529043b15cffa5f36077a4d0af83f3de399807181d607441d734196d889b641f  openssl-3.5.1.tar.gz
+# From https://github.com/openssl/openssl/releases/download/openssl-3.5.2/openssl-3.5.2.tar.gz.sha256
+sha256  c53a47e5e441c930c3928cf7bf6fb00e5d129b630e0aa873b08258656e7345ec  openssl-3.5.2.tar.gz
 
 # License files
 sha256  7d5450cb2d142651b8afa315b5f238efc805dad827d91ba367d8516bc9d49e7a  LICENSE.txt
diff --git a/package/libopenssl/libopenssl.mk b/package/libopenssl/libopenssl.mk
index f3521b3cf3..38d04ea924 100644
--- a/package/libopenssl/libopenssl.mk
+++ b/package/libopenssl/libopenssl.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBOPENSSL_VERSION = 3.5.1
+LIBOPENSSL_VERSION = 3.5.2
 LIBOPENSSL_SITE = https://github.com/openssl/openssl/releases/download/openssl-$(LIBOPENSSL_VERSION)
 LIBOPENSSL_SOURCE = openssl-$(LIBOPENSSL_VERSION).tar.gz
 LIBOPENSSL_LICENSE = Apache-2.0
-- 
2.43.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 16+ messages in thread

* [Buildroot] [PATCH 4/5] package/libopenssl: bump version to 3.5.3
  2026-03-16 16:13 [Buildroot] [PATCH 1/5] package/libopenssl: bump version to 3.5.0 Jimmy Durand Wesolowski via buildroot
  2026-03-16 16:13 ` [Buildroot] [PATCH 2/5] package/libopenssl: security bump version to 3.5.1 Jimmy Durand Wesolowski via buildroot
  2026-03-16 16:13 ` [Buildroot] [PATCH 3/5] package/libopenssl: bump version to 3.5.2 Jimmy Durand Wesolowski via buildroot
@ 2026-03-16 16:13 ` Jimmy Durand Wesolowski via buildroot
  2026-03-16 16:13 ` [Buildroot] [PATCH 5/5] package/libopenssl: security bump to version 3.5.4 Jimmy Durand Wesolowski via buildroot
                   ` (2 subsequent siblings)
  5 siblings, 0 replies; 16+ messages in thread
From: Jimmy Durand Wesolowski via buildroot @ 2026-03-16 16:13 UTC (permalink / raw)
  To: buildroot
  Cc: guenther.harrasser, Scott Fan, Julien Olivain,
	Jimmy Durand Wesolowski

From: Scott Fan <fancp2007@gmail.com>

This release incorporates the following bug fixes and mitigations:
- Added FIPS 140-3 PCT on DH key generation.
- Fixed the synthesised OPENSSL_VERSION_NUMBER.

https://github.com/openssl/openssl/releases/tag/openssl-3.5.3

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 92a6b6c108b904dc780b419985e0d4d50518fad1)
Signed-off-by: Jimmy Durand Wesolowski <jimmy.wesolowski@mobileye.com>
---
 package/libopenssl/libopenssl.hash | 4 ++--
 package/libopenssl/libopenssl.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/libopenssl/libopenssl.hash b/package/libopenssl/libopenssl.hash
index 7f3795e1ac..d0ca45d303 100644
--- a/package/libopenssl/libopenssl.hash
+++ b/package/libopenssl/libopenssl.hash
@@ -1,5 +1,5 @@
-# From https://github.com/openssl/openssl/releases/download/openssl-3.5.2/openssl-3.5.2.tar.gz.sha256
-sha256  c53a47e5e441c930c3928cf7bf6fb00e5d129b630e0aa873b08258656e7345ec  openssl-3.5.2.tar.gz
+# From https://github.com/openssl/openssl/releases/download/openssl-3.5.3/openssl-3.5.3.tar.gz.sha256
+sha256  c9489d2abcf943cdc8329a57092331c598a402938054dc3a22218aea8a8ec3bf  openssl-3.5.3.tar.gz
 
 # License files
 sha256  7d5450cb2d142651b8afa315b5f238efc805dad827d91ba367d8516bc9d49e7a  LICENSE.txt
diff --git a/package/libopenssl/libopenssl.mk b/package/libopenssl/libopenssl.mk
index 38d04ea924..b892d4e236 100644
--- a/package/libopenssl/libopenssl.mk
+++ b/package/libopenssl/libopenssl.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBOPENSSL_VERSION = 3.5.2
+LIBOPENSSL_VERSION = 3.5.3
 LIBOPENSSL_SITE = https://github.com/openssl/openssl/releases/download/openssl-$(LIBOPENSSL_VERSION)
 LIBOPENSSL_SOURCE = openssl-$(LIBOPENSSL_VERSION).tar.gz
 LIBOPENSSL_LICENSE = Apache-2.0
-- 
2.43.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 16+ messages in thread

* [Buildroot] [PATCH 5/5] package/libopenssl: security bump to version 3.5.4
  2026-03-16 16:13 [Buildroot] [PATCH 1/5] package/libopenssl: bump version to 3.5.0 Jimmy Durand Wesolowski via buildroot
                   ` (2 preceding siblings ...)
  2026-03-16 16:13 ` [Buildroot] [PATCH 4/5] package/libopenssl: bump version to 3.5.3 Jimmy Durand Wesolowski via buildroot
@ 2026-03-16 16:13 ` Jimmy Durand Wesolowski via buildroot
  2026-03-17 15:00 ` [Buildroot] [PATCH 1/5] package/libopenssl: bump version to 3.5.0 Quentin Schulz via buildroot
  2026-03-19 12:42 ` [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: security bump to version 3.5.4 Jimmy Durand Wesolowski via buildroot
  5 siblings, 0 replies; 16+ messages in thread
From: Jimmy Durand Wesolowski via buildroot @ 2026-03-16 16:13 UTC (permalink / raw)
  To: buildroot; +Cc: Julien Olivain, guenther.harrasser, Jimmy Durand Wesolowski

From: Francois Perrad <francois.perrad@gadz.org>

fixes CVE-2025-9230, CVE-2025-9231, CVE-2025-9232
see https://github.com/openssl/openssl/releases/tag/openssl-3.5.4

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c983f967bdffdcf784174fd3ea7b08e39ac83d24)
Signed-off-by: Jimmy Durand Wesolowski <jimmy.wesolowski@mobileye.com>
---
 ...Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch | 2 +-
 package/libopenssl/0003-Revert-Fix-static-builds.patch        | 4 ++--
 ...Serialize-install-process-to-avoid-multiple-make-dep.patch | 2 +-
 package/libopenssl/libopenssl.hash                            | 4 ++--
 package/libopenssl/libopenssl.mk                              | 2 +-
 5 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch b/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
index 2634d69f35..f74576beae 100644
--- a/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
+++ b/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
@@ -21,7 +21,7 @@ diff --git a/Configure b/Configure
 index 15054f9..ac3206e 100755
 --- a/Configure
 +++ b/Configure
-@@ -1685,6 +1685,10 @@ unless ($disabled{asm}) {
+@@ -1686,6 +1686,10 @@ unless ($disabled{asm}) {
      }
  }
  
diff --git a/package/libopenssl/0003-Revert-Fix-static-builds.patch b/package/libopenssl/0003-Revert-Fix-static-builds.patch
index e800b782ad..10ca97a240 100644
--- a/package/libopenssl/0003-Revert-Fix-static-builds.patch
+++ b/package/libopenssl/0003-Revert-Fix-static-builds.patch
@@ -18,7 +18,7 @@ diff --git a/Configure b/Configure
 index ac3206e..764ef89 100755
 --- a/Configure
 +++ b/Configure
-@@ -1509,10 +1509,6 @@ if ($config{prefix} && !$config{CROSS_COMPILE}) {
+@@ -1510,10 +1510,6 @@ if ($config{prefix} && !$config{CROSS_COMPILE}) {
          unless file_name_is_absolute($config{prefix});
  }
  
@@ -29,7 +29,7 @@ index ac3206e..764ef89 100755
  # Allow overriding the build file name
  $config{build_file} = env('BUILDFILE') || $target{build_file} || "Makefile";
  
-@@ -1807,6 +1803,10 @@ if ($strict_warnings)
+@@ -1808,6 +1804,10 @@ if ($strict_warnings)
                  }
          }
  
diff --git a/package/libopenssl/0004-Serialize-install-process-to-avoid-multiple-make-dep.patch b/package/libopenssl/0004-Serialize-install-process-to-avoid-multiple-make-dep.patch
index feb0e21ef7..344b8d07b7 100644
--- a/package/libopenssl/0004-Serialize-install-process-to-avoid-multiple-make-dep.patch
+++ b/package/libopenssl/0004-Serialize-install-process-to-avoid-multiple-make-dep.patch
@@ -26,7 +26,7 @@ diff --git a/Configurations/unix-Makefile.tmpl b/Configurations/unix-Makefile.tm
 index e85763ccf8..b671723813 100644
 --- a/Configurations/unix-Makefile.tmpl
 +++ b/Configurations/unix-Makefile.tmpl
-@@ -650,7 +650,11 @@ depend: Makefile
+@@ -661,7 +661,11 @@ depend: Makefile
  # Install helper targets #############################################
  ##@ Installation
  
diff --git a/package/libopenssl/libopenssl.hash b/package/libopenssl/libopenssl.hash
index d0ca45d303..e78b664aa5 100644
--- a/package/libopenssl/libopenssl.hash
+++ b/package/libopenssl/libopenssl.hash
@@ -1,5 +1,5 @@
-# From https://github.com/openssl/openssl/releases/download/openssl-3.5.3/openssl-3.5.3.tar.gz.sha256
-sha256  c9489d2abcf943cdc8329a57092331c598a402938054dc3a22218aea8a8ec3bf  openssl-3.5.3.tar.gz
+# From https://github.com/openssl/openssl/releases/download/openssl-3.5.4/openssl-3.5.4.tar.gz.sha256
+sha256  967311f84955316969bdb1d8d4b983718ef42338639c621ec4c34fddef355e99  openssl-3.5.4.tar.gz
 
 # License files
 sha256  7d5450cb2d142651b8afa315b5f238efc805dad827d91ba367d8516bc9d49e7a  LICENSE.txt
diff --git a/package/libopenssl/libopenssl.mk b/package/libopenssl/libopenssl.mk
index b892d4e236..2f844fd44a 100644
--- a/package/libopenssl/libopenssl.mk
+++ b/package/libopenssl/libopenssl.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBOPENSSL_VERSION = 3.5.3
+LIBOPENSSL_VERSION = 3.5.4
 LIBOPENSSL_SITE = https://github.com/openssl/openssl/releases/download/openssl-$(LIBOPENSSL_VERSION)
 LIBOPENSSL_SOURCE = openssl-$(LIBOPENSSL_VERSION).tar.gz
 LIBOPENSSL_LICENSE = Apache-2.0
-- 
2.43.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 16+ messages in thread

* Re: [Buildroot] [PATCH 1/5] package/libopenssl: bump version to 3.5.0
  2026-03-16 16:13 [Buildroot] [PATCH 1/5] package/libopenssl: bump version to 3.5.0 Jimmy Durand Wesolowski via buildroot
                   ` (3 preceding siblings ...)
  2026-03-16 16:13 ` [Buildroot] [PATCH 5/5] package/libopenssl: security bump to version 3.5.4 Jimmy Durand Wesolowski via buildroot
@ 2026-03-17 15:00 ` Quentin Schulz via buildroot
  2026-03-17 15:24   ` Jimmy Wesolowski via buildroot
  2026-03-19 12:42 ` [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: security bump to version 3.5.4 Jimmy Durand Wesolowski via buildroot
  5 siblings, 1 reply; 16+ messages in thread
From: Quentin Schulz via buildroot @ 2026-03-17 15:00 UTC (permalink / raw)
  To: Jimmy Durand Wesolowski, buildroot; +Cc: Kadambini Nema, guenther.harrasser

Hi Jimmy,

Thanks for doing that :) A few things to improve though, see below.

This series doesn't follow the naming scheme required for backporting to 
stable releases. See 
https://buildroot.org/downloads/manual/manual.html#submitting-patches 
22.5.4. Patches for maintenance branches, specifically

"""
However, some bugs may apply only to a specific release, for example 
because it is using an older version of a package. In that case, patches 
should be based off the maintenance branch, and the patch subject prefix 
must include the maintenance branch name (for example "[PATCH 2020.02.x]").
"""

You also said on the #buildroot IRC channel to "Please wait that I test 
it on the runner." so please consider only sending series once you're 
done with your own testing.

I highly suggest to provide a cover letter to your v2, anybody not 
following the IRC channel won't be able to understand why this was done 
(and people who do follow the channel may forget about it). There needs 
to be context and justification why this is fine to backport even though 
it's a major version bump.

For what it's worth, I've done this in a local branch and added an 
additional patch for OpenSSL 3.5.5 security bump (see 
https://github.com/openssl/openssl/releases/tag/openssl-3.5.5) and I'm 
about to publish a new release for one of our products based on that 
(just so you know there's been *some* testing).

Cheers,
Quentin

On 3/16/26 5:13 PM, Jimmy Durand Wesolowski via buildroot wrote:
> From: Kadambini Nema <kadambini.nema@gmail.com>
> 
> Release notes:
> https://github.com/openssl/openssl/releases/tag/openssl-3.5.0
> 
> Changelog:
> https://github.com/openssl/openssl/blob/master/CHANGES.md#openssl-35
> 
> Rebased patches for the new version.
> 
> Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
> (cherry picked from commit 9868ca6ec98afa28a94aea50cc940db7df860396)
> Conflicts on
>    package/libopenssl/libopenssl.hash
>    package/libopenssl/libopenssl.mk
> due to intermediate security bumps from 4.1 to 4.4 with commits
>    0ec6cf7f69da "package/libopenssl: bump to v3.4.2"
>    cd6d8b9b251d "package/libopenssl: security bump to version 3.4.3"
>    dbf192e1764e "Package/libopenssl: security bump to v3.4.4"
> Signed-off-by: Jimmy Durand Wesolowski <jimmy.wesolowski@mobileye.com>
> ---
>   ...nfigure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch | 4 ++--
>   package/libopenssl/0003-Revert-Fix-static-builds.patch      | 6 +++---
>   package/libopenssl/libopenssl.hash                          | 4 ++--
>   package/libopenssl/libopenssl.mk                            | 2 +-
>   4 files changed, 8 insertions(+), 8 deletions(-)
> 
> diff --git a/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch b/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
> index 629d9c26ce..2634d69f35 100644
> --- a/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
> +++ b/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
> @@ -18,10 +18,10 @@ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
>    1 file changed, 4 insertions(+)
>   
>   diff --git a/Configure b/Configure
> -index 5a699836f3..f9152b1702 100755
> +index 15054f9..ac3206e 100755
>   --- a/Configure
>   +++ b/Configure
> -@@ -1549,6 +1549,10 @@ unless ($disabled{asm}) {
> +@@ -1685,6 +1685,10 @@ unless ($disabled{asm}) {
>        }
>    }
>    
> diff --git a/package/libopenssl/0003-Revert-Fix-static-builds.patch b/package/libopenssl/0003-Revert-Fix-static-builds.patch
> index b4b78c97fc..e800b782ad 100644
> --- a/package/libopenssl/0003-Revert-Fix-static-builds.patch
> +++ b/package/libopenssl/0003-Revert-Fix-static-builds.patch
> @@ -15,10 +15,10 @@ Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
>    1 file changed, 4 insertions(+), 4 deletions(-)
>   
>   diff --git a/Configure b/Configure
> -index 2a5e58805c3b..0e8c1ce5cc74 100755
> +index ac3206e..764ef89 100755
>   --- a/Configure
>   +++ b/Configure
> -@@ -1466,10 +1466,6 @@ if ($config{prefix} && !$config{CROSS_COMPILE}) {
> +@@ -1509,10 +1509,6 @@ if ($config{prefix} && !$config{CROSS_COMPILE}) {
>            unless file_name_is_absolute($config{prefix});
>    }
>    
> @@ -29,7 +29,7 @@ index 2a5e58805c3b..0e8c1ce5cc74 100755
>    # Allow overriding the build file name
>    $config{build_file} = env('BUILDFILE') || $target{build_file} || "Makefile";
>    
> -@@ -1764,6 +1760,10 @@ if ($strict_warnings)
> +@@ -1807,6 +1803,10 @@ if ($strict_warnings)
>                    }
>            }
>    
> diff --git a/package/libopenssl/libopenssl.hash b/package/libopenssl/libopenssl.hash
> index ea288054e9..9f8b23005a 100644
> --- a/package/libopenssl/libopenssl.hash
> +++ b/package/libopenssl/libopenssl.hash
> @@ -1,5 +1,5 @@
> -# From https://github.com/openssl/openssl/releases/download/openssl-3.4.4/openssl-3.4.4.tar.gz.sha256
> -sha256  7bdf55ac20f2779e99e5eca306f824fad2b37dee5a06cc35ed5a8b85a6060010  openssl-3.4.4.tar.gz
> +# From https://github.com/openssl/openssl/releases/download/openssl-3.5.0/openssl-3.5.0.tar.gz.sha256
> +sha256  344d0a79f1a9b08029b0744e2cc401a43f9c90acd1044d09a530b4885a8e9fc0  openssl-3.5.0.tar.gz
>   
>   # License files
>   sha256  7d5450cb2d142651b8afa315b5f238efc805dad827d91ba367d8516bc9d49e7a  LICENSE.txt
> diff --git a/package/libopenssl/libopenssl.mk b/package/libopenssl/libopenssl.mk
> index 8e3ae4cc21..5e785e1bf0 100644
> --- a/package/libopenssl/libopenssl.mk
> +++ b/package/libopenssl/libopenssl.mk
> @@ -4,7 +4,7 @@
>   #
>   ################################################################################
>   
> -LIBOPENSSL_VERSION = 3.4.4
> +LIBOPENSSL_VERSION = 3.5.0
>   LIBOPENSSL_SITE = https://github.com/openssl/openssl/releases/download/openssl-$(LIBOPENSSL_VERSION)
>   LIBOPENSSL_SOURCE = openssl-$(LIBOPENSSL_VERSION).tar.gz
>   LIBOPENSSL_LICENSE = Apache-2.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: [Buildroot] [PATCH 1/5] package/libopenssl: bump version to 3.5.0
  2026-03-17 15:00 ` [Buildroot] [PATCH 1/5] package/libopenssl: bump version to 3.5.0 Quentin Schulz via buildroot
@ 2026-03-17 15:24   ` Jimmy Wesolowski via buildroot
  2026-03-17 15:40     ` Quentin Schulz via buildroot
  0 siblings, 1 reply; 16+ messages in thread
From: Jimmy Wesolowski via buildroot @ 2026-03-17 15:24 UTC (permalink / raw)
  To: Quentin Schulz, buildroot@buildroot.org
  Cc: Kadambini Nema, Guenther Harrasser

Hi Quentin,


Thank you very much for the feedback!
I will create a cover letter for v2, thank you!

The timing is perfect, since I could finally run the CI. I was concerned that this
might take time, and I wanted to allow anyone interested in the patches to be
able to pick them as needed.

I could bump the version to 3.5.5; from my understanding of that 22.5.4 section,
I should do it for master as well.


Cheers,
-- 
Jimmy
________________________________________
From: Quentin Schulz <quentin.schulz@cherry.de>
Sent: 17 March 2026 16:00
To: Jimmy Wesolowski; buildroot@buildroot.org
Cc: Kadambini Nema; Guenther Harrasser
Subject: Re: [Buildroot] [PATCH 1/5] package/libopenssl: bump version to 3.5.0

EXTERNAL EMAIL: Do not click any links or open any attachments unless you trust the sender and know the content is safe.

Hi Jimmy,

Thanks for doing that :) A few things to improve though, see below.

This series doesn't follow the naming scheme required for backporting to
stable releases. See
https://buildroot.org/downloads/manual/manual.html#submitting-patches
22.5.4. Patches for maintenance branches, specifically

"""
However, some bugs may apply only to a specific release, for example
because it is using an older version of a package. In that case, patches
should be based off the maintenance branch, and the patch subject prefix
must include the maintenance branch name (for example "[PATCH 2020.02.x]").
"""

You also said on the #buildroot IRC channel to "Please wait that I test
it on the runner." so please consider only sending series once you're
done with your own testing.

I highly suggest to provide a cover letter to your v2, anybody not
following the IRC channel won't be able to understand why this was done
(and people who do follow the channel may forget about it). There needs
to be context and justification why this is fine to backport even though
it's a major version bump.

For what it's worth, I've done this in a local branch and added an
additional patch for OpenSSL 3.5.5 security bump (see
https://github.com/openssl/openssl/releases/tag/openssl-3.5.5) and I'm
about to publish a new release for one of our products based on that
(just so you know there's been *some* testing).

Cheers,
Quentin

On 3/16/26 5:13 PM, Jimmy Durand Wesolowski via buildroot wrote:
> From: Kadambini Nema <kadambini.nema@gmail.com>
>
> Release notes:
> https://github.com/openssl/openssl/releases/tag/openssl-3.5.0
>
> Changelog:
> https://github.com/openssl/openssl/blob/master/CHANGES.md#openssl-35
>
> Rebased patches for the new version.
>
> Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
> (cherry picked from commit 9868ca6ec98afa28a94aea50cc940db7df860396)
> Conflicts on
>    package/libopenssl/libopenssl.hash
>    package/libopenssl/libopenssl.mk
> due to intermediate security bumps from 4.1 to 4.4 with commits
>    0ec6cf7f69da "package/libopenssl: bump to v3.4.2"
>    cd6d8b9b251d "package/libopenssl: security bump to version 3.4.3"
>    dbf192e1764e "Package/libopenssl: security bump to v3.4.4"
> Signed-off-by: Jimmy Durand Wesolowski <jimmy.wesolowski@mobileye.com>
> ---
>   ...nfigure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch | 4 ++--
>   package/libopenssl/0003-Revert-Fix-static-builds.patch      | 6 +++---
>   package/libopenssl/libopenssl.hash                          | 4 ++--
>   package/libopenssl/libopenssl.mk                            | 2 +-
>   4 files changed, 8 insertions(+), 8 deletions(-)
>
> diff --git a/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch b/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
> index 629d9c26ce..2634d69f35 100644
> --- a/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
> +++ b/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
> @@ -18,10 +18,10 @@ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
>    1 file changed, 4 insertions(+)
>
>   diff --git a/Configure b/Configure
> -index 5a699836f3..f9152b1702 100755
> +index 15054f9..ac3206e 100755
>   --- a/Configure
>   +++ b/Configure
> -@@ -1549,6 +1549,10 @@ unless ($disabled{asm}) {
> +@@ -1685,6 +1685,10 @@ unless ($disabled{asm}) {
>        }
>    }
>
> diff --git a/package/libopenssl/0003-Revert-Fix-static-builds.patch b/package/libopenssl/0003-Revert-Fix-static-builds.patch
> index b4b78c97fc..e800b782ad 100644
> --- a/package/libopenssl/0003-Revert-Fix-static-builds.patch
> +++ b/package/libopenssl/0003-Revert-Fix-static-builds.patch
> @@ -15,10 +15,10 @@ Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
>    1 file changed, 4 insertions(+), 4 deletions(-)
>
>   diff --git a/Configure b/Configure
> -index 2a5e58805c3b..0e8c1ce5cc74 100755
> +index ac3206e..764ef89 100755
>   --- a/Configure
>   +++ b/Configure
> -@@ -1466,10 +1466,6 @@ if ($config{prefix} && !$config{CROSS_COMPILE}) {
> +@@ -1509,10 +1509,6 @@ if ($config{prefix} && !$config{CROSS_COMPILE}) {
>            unless file_name_is_absolute($config{prefix});
>    }
>
> @@ -29,7 +29,7 @@ index 2a5e58805c3b..0e8c1ce5cc74 100755
>    # Allow overriding the build file name
>    $config{build_file} = env('BUILDFILE') || $target{build_file} || "Makefile";
>
> -@@ -1764,6 +1760,10 @@ if ($strict_warnings)
> +@@ -1807,6 +1803,10 @@ if ($strict_warnings)
>                    }
>            }
>
> diff --git a/package/libopenssl/libopenssl.hash b/package/libopenssl/libopenssl.hash
> index ea288054e9..9f8b23005a 100644
> --- a/package/libopenssl/libopenssl.hash
> +++ b/package/libopenssl/libopenssl.hash
> @@ -1,5 +1,5 @@
> -# From https://github.com/openssl/openssl/releases/download/openssl-3.4.4/openssl-3.4.4.tar.gz.sha256
> -sha256  7bdf55ac20f2779e99e5eca306f824fad2b37dee5a06cc35ed5a8b85a6060010  openssl-3.4.4.tar.gz
> +# From https://github.com/openssl/openssl/releases/download/openssl-3.5.0/openssl-3.5.0.tar.gz.sha256
> +sha256  344d0a79f1a9b08029b0744e2cc401a43f9c90acd1044d09a530b4885a8e9fc0  openssl-3.5.0.tar.gz
>
>   # License files
>   sha256  7d5450cb2d142651b8afa315b5f238efc805dad827d91ba367d8516bc9d49e7a  LICENSE.txt
> diff --git a/package/libopenssl/libopenssl.mk b/package/libopenssl/libopenssl.mk
> index 8e3ae4cc21..5e785e1bf0 100644
> --- a/package/libopenssl/libopenssl.mk
> +++ b/package/libopenssl/libopenssl.mk
> @@ -4,7 +4,7 @@
>   #
>   ################################################################################
>
> -LIBOPENSSL_VERSION = 3.4.4
> +LIBOPENSSL_VERSION = 3.5.0
>   LIBOPENSSL_SITE = https://github.com/openssl/openssl/releases/download/openssl-$(LIBOPENSSL_VERSION)
>   LIBOPENSSL_SOURCE = openssl-$(LIBOPENSSL_VERSION).tar.gz
>   LIBOPENSSL_LICENSE = Apache-2.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: [Buildroot] [PATCH 1/5] package/libopenssl: bump version to 3.5.0
  2026-03-17 15:24   ` Jimmy Wesolowski via buildroot
@ 2026-03-17 15:40     ` Quentin Schulz via buildroot
  0 siblings, 0 replies; 16+ messages in thread
From: Quentin Schulz via buildroot @ 2026-03-17 15:40 UTC (permalink / raw)
  To: Jimmy Wesolowski, buildroot@buildroot.org
  Cc: Kadambini Nema, Guenther Harrasser

Hi Jimmy,

On 3/17/26 4:24 PM, Jimmy Wesolowski wrote:
> [You don't often get email from jimmy.wesolowski@mobileye.com. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]
> 
> Hi Quentin,
> 
> 
> Thank you very much for the feedback!
> I will create a cover letter for v2, thank you!
> 
> The timing is perfect, since I could finally run the CI. I was concerned that this

If it's the link you provided on IRC, are you sure you meant to run the 
openssH tests and not openssL? (I have no experience with Buildroot CI 
in GitLab so maybe that's a valid usecase for testing OpenSSL).

> might take time, and I wanted to allow anyone interested in the patches to be
> able to pick them as needed.
> 

I don't think we are in such a hurry that we cannot wait a day or two 
for the testing to be done :) Especially since 3.4 is still supported 
upstream and 2025.02.x has the latest available version for that release 
series. Stable releases (anything but master) are intended to be stable 
(hence the name :) ) so care should be taken to not introduce 
regressions, therefore testing is even more important than in master.

> I could bump the version to 3.5.5; from my understanding of that 22.5.4 section,
> I should do it for master as well.
> 

You cannot as master has moved to 3.6.1 already, same for 2025.11.x. So 
this only applies to 2025.02.x (since every other release is either 
already unsupported or has moved to OpenSSL 3.6).

So you must follow the "some bugs may apply only to a specific release" 
part of the instructions (even though it's not a bug).

Cheers,
Quentin
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 16+ messages in thread

* [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: security bump to version 3.5.4
  2026-03-16 16:13 [Buildroot] [PATCH 1/5] package/libopenssl: bump version to 3.5.0 Jimmy Durand Wesolowski via buildroot
                   ` (4 preceding siblings ...)
  2026-03-17 15:00 ` [Buildroot] [PATCH 1/5] package/libopenssl: bump version to 3.5.0 Quentin Schulz via buildroot
@ 2026-03-19 12:42 ` Jimmy Durand Wesolowski via buildroot
  2026-03-19 12:42   ` [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: bump version to 3.5.0 Jimmy Durand Wesolowski via buildroot
                     ` (5 more replies)
  5 siblings, 6 replies; 16+ messages in thread
From: Jimmy Durand Wesolowski via buildroot @ 2026-03-19 12:42 UTC (permalink / raw)
  To: buildroot; +Cc: guenther.harrasser, Quentin Schulz, Jimmy Durand Wesolowski

As indicated by Quentin Schulz <quentin.schulz@cherry.de>, OpenSSL 3.4 is
EoL at the end of 2026, and thus earlier than the Buildroot LTS 2025.02
(end of 2027).
OpenSSL version thus needs to be bumped to 3.5.x, which is currently
3.5.4. Note that a new 3.5.5 release is in the making.
This series brings all the related commits from master to 2025.02.x.

---
Changes v1 -> v2:
  - cover letter added
  - patch prefix corrected from [PATCH] to [PATCH 2025.02.x]

Bernd Kuhls (1):
  package/libopenssl: security bump version to 3.5.1

Francois Perrad (1):
  package/libopenssl: security bump to version 3.5.4

Kadambini Nema (1):
  package/libopenssl: bump version to 3.5.0

Peter Korsgaard (1):
  package/libopenssl: bump version to 3.5.2

Scott Fan (1):
  package/libopenssl: bump version to 3.5.3

 ...nfigure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch | 4 ++--
 package/libopenssl/0003-Revert-Fix-static-builds.patch      | 6 +++---
 ...rialize-install-process-to-avoid-multiple-make-dep.patch | 2 +-
 package/libopenssl/libopenssl.hash                          | 4 ++--
 package/libopenssl/libopenssl.mk                            | 2 +-
 5 files changed, 9 insertions(+), 9 deletions(-)

-- 
2.43.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 16+ messages in thread

* [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: bump version to 3.5.0
  2026-03-19 12:42 ` [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: security bump to version 3.5.4 Jimmy Durand Wesolowski via buildroot
@ 2026-03-19 12:42   ` Jimmy Durand Wesolowski via buildroot
  2026-03-19 12:42   ` [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: security bump version to 3.5.1 Jimmy Durand Wesolowski via buildroot
                     ` (4 subsequent siblings)
  5 siblings, 0 replies; 16+ messages in thread
From: Jimmy Durand Wesolowski via buildroot @ 2026-03-19 12:42 UTC (permalink / raw)
  To: buildroot
  Cc: Quentin Schulz, Kadambini Nema, guenther.harrasser,
	Jimmy Durand Wesolowski

From: Kadambini Nema <kadambini.nema@gmail.com>

Release notes:
https://github.com/openssl/openssl/releases/tag/openssl-3.5.0

Changelog:
https://github.com/openssl/openssl/blob/master/CHANGES.md#openssl-35

Rebased patches for the new version.

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 9868ca6ec98afa28a94aea50cc940db7df860396)
Conflicts on
  package/libopenssl/libopenssl.hash
  package/libopenssl/libopenssl.mk
due to intermediate security bumps from 4.1 to 4.4 with commits
  0ec6cf7f69da "package/libopenssl: bump to v3.4.2"
  cd6d8b9b251d "package/libopenssl: security bump to version 3.4.3"
  dbf192e1764e "Package/libopenssl: security bump to v3.4.4"
Signed-off-by: Jimmy Durand Wesolowski <jimmy.wesolowski@mobileye.com>
---
Changes v1 -> v2:
  - cover letter added
  - patch prefix corrected from [PATCH] to [PATCH 2025.02.x]

 ...nfigure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch | 4 ++--
 package/libopenssl/0003-Revert-Fix-static-builds.patch      | 6 +++---
 package/libopenssl/libopenssl.hash                          | 4 ++--
 package/libopenssl/libopenssl.mk                            | 2 +-
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch b/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
index 629d9c26ce..2634d69f35 100644
--- a/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
+++ b/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
@@ -18,10 +18,10 @@ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
  1 file changed, 4 insertions(+)
 
 diff --git a/Configure b/Configure
-index 5a699836f3..f9152b1702 100755
+index 15054f9..ac3206e 100755
 --- a/Configure
 +++ b/Configure
-@@ -1549,6 +1549,10 @@ unless ($disabled{asm}) {
+@@ -1685,6 +1685,10 @@ unless ($disabled{asm}) {
      }
  }
  
diff --git a/package/libopenssl/0003-Revert-Fix-static-builds.patch b/package/libopenssl/0003-Revert-Fix-static-builds.patch
index b4b78c97fc..e800b782ad 100644
--- a/package/libopenssl/0003-Revert-Fix-static-builds.patch
+++ b/package/libopenssl/0003-Revert-Fix-static-builds.patch
@@ -15,10 +15,10 @@ Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
  1 file changed, 4 insertions(+), 4 deletions(-)
 
 diff --git a/Configure b/Configure
-index 2a5e58805c3b..0e8c1ce5cc74 100755
+index ac3206e..764ef89 100755
 --- a/Configure
 +++ b/Configure
-@@ -1466,10 +1466,6 @@ if ($config{prefix} && !$config{CROSS_COMPILE}) {
+@@ -1509,10 +1509,6 @@ if ($config{prefix} && !$config{CROSS_COMPILE}) {
          unless file_name_is_absolute($config{prefix});
  }
  
@@ -29,7 +29,7 @@ index 2a5e58805c3b..0e8c1ce5cc74 100755
  # Allow overriding the build file name
  $config{build_file} = env('BUILDFILE') || $target{build_file} || "Makefile";
  
-@@ -1764,6 +1760,10 @@ if ($strict_warnings)
+@@ -1807,6 +1803,10 @@ if ($strict_warnings)
                  }
          }
  
diff --git a/package/libopenssl/libopenssl.hash b/package/libopenssl/libopenssl.hash
index ea288054e9..9f8b23005a 100644
--- a/package/libopenssl/libopenssl.hash
+++ b/package/libopenssl/libopenssl.hash
@@ -1,5 +1,5 @@
-# From https://github.com/openssl/openssl/releases/download/openssl-3.4.4/openssl-3.4.4.tar.gz.sha256
-sha256  7bdf55ac20f2779e99e5eca306f824fad2b37dee5a06cc35ed5a8b85a6060010  openssl-3.4.4.tar.gz
+# From https://github.com/openssl/openssl/releases/download/openssl-3.5.0/openssl-3.5.0.tar.gz.sha256
+sha256  344d0a79f1a9b08029b0744e2cc401a43f9c90acd1044d09a530b4885a8e9fc0  openssl-3.5.0.tar.gz
 
 # License files
 sha256  7d5450cb2d142651b8afa315b5f238efc805dad827d91ba367d8516bc9d49e7a  LICENSE.txt
diff --git a/package/libopenssl/libopenssl.mk b/package/libopenssl/libopenssl.mk
index 8e3ae4cc21..5e785e1bf0 100644
--- a/package/libopenssl/libopenssl.mk
+++ b/package/libopenssl/libopenssl.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBOPENSSL_VERSION = 3.4.4
+LIBOPENSSL_VERSION = 3.5.0
 LIBOPENSSL_SITE = https://github.com/openssl/openssl/releases/download/openssl-$(LIBOPENSSL_VERSION)
 LIBOPENSSL_SOURCE = openssl-$(LIBOPENSSL_VERSION).tar.gz
 LIBOPENSSL_LICENSE = Apache-2.0
-- 
2.43.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 16+ messages in thread

* [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: security bump version to 3.5.1
  2026-03-19 12:42 ` [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: security bump to version 3.5.4 Jimmy Durand Wesolowski via buildroot
  2026-03-19 12:42   ` [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: bump version to 3.5.0 Jimmy Durand Wesolowski via buildroot
@ 2026-03-19 12:42   ` Jimmy Durand Wesolowski via buildroot
  2026-03-19 12:42   ` [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: bump version to 3.5.2 Jimmy Durand Wesolowski via buildroot
                     ` (3 subsequent siblings)
  5 siblings, 0 replies; 16+ messages in thread
From: Jimmy Durand Wesolowski via buildroot @ 2026-03-19 12:42 UTC (permalink / raw)
  To: buildroot
  Cc: guenther.harrasser, Quentin Schulz, Bernd Kuhls, Julien Olivain,
	Jimmy Durand Wesolowski

From: Bernd Kuhls <bernd@kuhls.net>

Fixes CVE-2025-4575:
https://github.com/openssl/openssl/releases/tag/openssl-3.5.1

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e97ca416c61e912d98b9d3439674cb40510cf160)
Signed-off-by: Jimmy Durand Wesolowski <jimmy.wesolowski@mobileye.com>
---
Changes v1 -> v2:
  - cover letter added
  - patch prefix corrected from [PATCH] to [PATCH 2025.02.x]

 package/libopenssl/libopenssl.hash | 4 ++--
 package/libopenssl/libopenssl.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/libopenssl/libopenssl.hash b/package/libopenssl/libopenssl.hash
index 9f8b23005a..1675d72fb2 100644
--- a/package/libopenssl/libopenssl.hash
+++ b/package/libopenssl/libopenssl.hash
@@ -1,5 +1,5 @@
-# From https://github.com/openssl/openssl/releases/download/openssl-3.5.0/openssl-3.5.0.tar.gz.sha256
-sha256  344d0a79f1a9b08029b0744e2cc401a43f9c90acd1044d09a530b4885a8e9fc0  openssl-3.5.0.tar.gz
+# From https://github.com/openssl/openssl/releases/download/openssl-3.5.1/openssl-3.5.1.tar.gz.sha256
+sha256  529043b15cffa5f36077a4d0af83f3de399807181d607441d734196d889b641f  openssl-3.5.1.tar.gz
 
 # License files
 sha256  7d5450cb2d142651b8afa315b5f238efc805dad827d91ba367d8516bc9d49e7a  LICENSE.txt
diff --git a/package/libopenssl/libopenssl.mk b/package/libopenssl/libopenssl.mk
index 5e785e1bf0..f3521b3cf3 100644
--- a/package/libopenssl/libopenssl.mk
+++ b/package/libopenssl/libopenssl.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBOPENSSL_VERSION = 3.5.0
+LIBOPENSSL_VERSION = 3.5.1
 LIBOPENSSL_SITE = https://github.com/openssl/openssl/releases/download/openssl-$(LIBOPENSSL_VERSION)
 LIBOPENSSL_SOURCE = openssl-$(LIBOPENSSL_VERSION).tar.gz
 LIBOPENSSL_LICENSE = Apache-2.0
-- 
2.43.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 16+ messages in thread

* [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: bump version to 3.5.2
  2026-03-19 12:42 ` [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: security bump to version 3.5.4 Jimmy Durand Wesolowski via buildroot
  2026-03-19 12:42   ` [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: bump version to 3.5.0 Jimmy Durand Wesolowski via buildroot
  2026-03-19 12:42   ` [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: security bump version to 3.5.1 Jimmy Durand Wesolowski via buildroot
@ 2026-03-19 12:42   ` Jimmy Durand Wesolowski via buildroot
  2026-03-19 12:42   ` [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: bump version to 3.5.3 Jimmy Durand Wesolowski via buildroot
                     ` (2 subsequent siblings)
  5 siblings, 0 replies; 16+ messages in thread
From: Jimmy Durand Wesolowski via buildroot @ 2026-03-19 12:42 UTC (permalink / raw)
  To: buildroot
  Cc: Quentin Schulz, guenther.harrasser, Julien Olivain,
	Jimmy Durand Wesolowski

From: Peter Korsgaard <peter@korsgaard.com>

Bugfix release:

- Miscellaneous minor bug fixes.

- The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
  This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.

https://github.com/openssl/openssl/releases/tag/openssl-3.5.2

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7e5a3c98452c6db8422b0fa6455390d138ad07df)
Signed-off-by: Jimmy Durand Wesolowski <jimmy.wesolowski@mobileye.com>
---
Changes v1 -> v2:
  - cover letter added
  - patch prefix corrected from [PATCH] to [PATCH 2025.02.x]

 package/libopenssl/libopenssl.hash | 4 ++--
 package/libopenssl/libopenssl.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/libopenssl/libopenssl.hash b/package/libopenssl/libopenssl.hash
index 1675d72fb2..7f3795e1ac 100644
--- a/package/libopenssl/libopenssl.hash
+++ b/package/libopenssl/libopenssl.hash
@@ -1,5 +1,5 @@
-# From https://github.com/openssl/openssl/releases/download/openssl-3.5.1/openssl-3.5.1.tar.gz.sha256
-sha256  529043b15cffa5f36077a4d0af83f3de399807181d607441d734196d889b641f  openssl-3.5.1.tar.gz
+# From https://github.com/openssl/openssl/releases/download/openssl-3.5.2/openssl-3.5.2.tar.gz.sha256
+sha256  c53a47e5e441c930c3928cf7bf6fb00e5d129b630e0aa873b08258656e7345ec  openssl-3.5.2.tar.gz
 
 # License files
 sha256  7d5450cb2d142651b8afa315b5f238efc805dad827d91ba367d8516bc9d49e7a  LICENSE.txt
diff --git a/package/libopenssl/libopenssl.mk b/package/libopenssl/libopenssl.mk
index f3521b3cf3..38d04ea924 100644
--- a/package/libopenssl/libopenssl.mk
+++ b/package/libopenssl/libopenssl.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBOPENSSL_VERSION = 3.5.1
+LIBOPENSSL_VERSION = 3.5.2
 LIBOPENSSL_SITE = https://github.com/openssl/openssl/releases/download/openssl-$(LIBOPENSSL_VERSION)
 LIBOPENSSL_SOURCE = openssl-$(LIBOPENSSL_VERSION).tar.gz
 LIBOPENSSL_LICENSE = Apache-2.0
-- 
2.43.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 16+ messages in thread

* [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: bump version to 3.5.3
  2026-03-19 12:42 ` [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: security bump to version 3.5.4 Jimmy Durand Wesolowski via buildroot
                     ` (2 preceding siblings ...)
  2026-03-19 12:42   ` [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: bump version to 3.5.2 Jimmy Durand Wesolowski via buildroot
@ 2026-03-19 12:42   ` Jimmy Durand Wesolowski via buildroot
  2026-03-19 12:42   ` [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: security bump to version 3.5.4 Jimmy Durand Wesolowski via buildroot
  2026-03-23 15:50   ` [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: " Quentin Schulz via buildroot
  5 siblings, 0 replies; 16+ messages in thread
From: Jimmy Durand Wesolowski via buildroot @ 2026-03-19 12:42 UTC (permalink / raw)
  To: buildroot
  Cc: guenther.harrasser, Quentin Schulz, Scott Fan, Julien Olivain,
	Jimmy Durand Wesolowski

From: Scott Fan <fancp2007@gmail.com>

This release incorporates the following bug fixes and mitigations:
- Added FIPS 140-3 PCT on DH key generation.
- Fixed the synthesised OPENSSL_VERSION_NUMBER.

https://github.com/openssl/openssl/releases/tag/openssl-3.5.3

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 92a6b6c108b904dc780b419985e0d4d50518fad1)
Signed-off-by: Jimmy Durand Wesolowski <jimmy.wesolowski@mobileye.com>
---
Changes v1 -> v2:
  - cover letter added
  - patch prefix corrected from [PATCH] to [PATCH 2025.02.x]

 package/libopenssl/libopenssl.hash | 4 ++--
 package/libopenssl/libopenssl.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/libopenssl/libopenssl.hash b/package/libopenssl/libopenssl.hash
index 7f3795e1ac..d0ca45d303 100644
--- a/package/libopenssl/libopenssl.hash
+++ b/package/libopenssl/libopenssl.hash
@@ -1,5 +1,5 @@
-# From https://github.com/openssl/openssl/releases/download/openssl-3.5.2/openssl-3.5.2.tar.gz.sha256
-sha256  c53a47e5e441c930c3928cf7bf6fb00e5d129b630e0aa873b08258656e7345ec  openssl-3.5.2.tar.gz
+# From https://github.com/openssl/openssl/releases/download/openssl-3.5.3/openssl-3.5.3.tar.gz.sha256
+sha256  c9489d2abcf943cdc8329a57092331c598a402938054dc3a22218aea8a8ec3bf  openssl-3.5.3.tar.gz
 
 # License files
 sha256  7d5450cb2d142651b8afa315b5f238efc805dad827d91ba367d8516bc9d49e7a  LICENSE.txt
diff --git a/package/libopenssl/libopenssl.mk b/package/libopenssl/libopenssl.mk
index 38d04ea924..b892d4e236 100644
--- a/package/libopenssl/libopenssl.mk
+++ b/package/libopenssl/libopenssl.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBOPENSSL_VERSION = 3.5.2
+LIBOPENSSL_VERSION = 3.5.3
 LIBOPENSSL_SITE = https://github.com/openssl/openssl/releases/download/openssl-$(LIBOPENSSL_VERSION)
 LIBOPENSSL_SOURCE = openssl-$(LIBOPENSSL_VERSION).tar.gz
 LIBOPENSSL_LICENSE = Apache-2.0
-- 
2.43.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 16+ messages in thread

* [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: security bump to version 3.5.4
  2026-03-19 12:42 ` [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: security bump to version 3.5.4 Jimmy Durand Wesolowski via buildroot
                     ` (3 preceding siblings ...)
  2026-03-19 12:42   ` [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: bump version to 3.5.3 Jimmy Durand Wesolowski via buildroot
@ 2026-03-19 12:42   ` Jimmy Durand Wesolowski via buildroot
  2026-03-23 15:50   ` [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: " Quentin Schulz via buildroot
  5 siblings, 0 replies; 16+ messages in thread
From: Jimmy Durand Wesolowski via buildroot @ 2026-03-19 12:42 UTC (permalink / raw)
  To: buildroot
  Cc: Quentin Schulz, Julien Olivain, guenther.harrasser,
	Jimmy Durand Wesolowski

From: Francois Perrad <francois.perrad@gadz.org>

fixes CVE-2025-9230, CVE-2025-9231, CVE-2025-9232
see https://github.com/openssl/openssl/releases/tag/openssl-3.5.4

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c983f967bdffdcf784174fd3ea7b08e39ac83d24)
Signed-off-by: Jimmy Durand Wesolowski <jimmy.wesolowski@mobileye.com>
---
Changes v1 -> v2:
  - cover letter added
  - patch prefix corrected from [PATCH] to [PATCH 2025.02.x]

 ...Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch | 2 +-
 package/libopenssl/0003-Revert-Fix-static-builds.patch        | 4 ++--
 ...Serialize-install-process-to-avoid-multiple-make-dep.patch | 2 +-
 package/libopenssl/libopenssl.hash                            | 4 ++--
 package/libopenssl/libopenssl.mk                              | 2 +-
 5 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch b/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
index 2634d69f35..f74576beae 100644
--- a/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
+++ b/package/libopenssl/0002-Configure-use-ELFv2-ABI-on-some-ppc64-big-endian-sys.patch
@@ -21,7 +21,7 @@ diff --git a/Configure b/Configure
 index 15054f9..ac3206e 100755
 --- a/Configure
 +++ b/Configure
-@@ -1685,6 +1685,10 @@ unless ($disabled{asm}) {
+@@ -1686,6 +1686,10 @@ unless ($disabled{asm}) {
      }
  }
  
diff --git a/package/libopenssl/0003-Revert-Fix-static-builds.patch b/package/libopenssl/0003-Revert-Fix-static-builds.patch
index e800b782ad..10ca97a240 100644
--- a/package/libopenssl/0003-Revert-Fix-static-builds.patch
+++ b/package/libopenssl/0003-Revert-Fix-static-builds.patch
@@ -18,7 +18,7 @@ diff --git a/Configure b/Configure
 index ac3206e..764ef89 100755
 --- a/Configure
 +++ b/Configure
-@@ -1509,10 +1509,6 @@ if ($config{prefix} && !$config{CROSS_COMPILE}) {
+@@ -1510,10 +1510,6 @@ if ($config{prefix} && !$config{CROSS_COMPILE}) {
          unless file_name_is_absolute($config{prefix});
  }
  
@@ -29,7 +29,7 @@ index ac3206e..764ef89 100755
  # Allow overriding the build file name
  $config{build_file} = env('BUILDFILE') || $target{build_file} || "Makefile";
  
-@@ -1807,6 +1803,10 @@ if ($strict_warnings)
+@@ -1808,6 +1804,10 @@ if ($strict_warnings)
                  }
          }
  
diff --git a/package/libopenssl/0004-Serialize-install-process-to-avoid-multiple-make-dep.patch b/package/libopenssl/0004-Serialize-install-process-to-avoid-multiple-make-dep.patch
index feb0e21ef7..344b8d07b7 100644
--- a/package/libopenssl/0004-Serialize-install-process-to-avoid-multiple-make-dep.patch
+++ b/package/libopenssl/0004-Serialize-install-process-to-avoid-multiple-make-dep.patch
@@ -26,7 +26,7 @@ diff --git a/Configurations/unix-Makefile.tmpl b/Configurations/unix-Makefile.tm
 index e85763ccf8..b671723813 100644
 --- a/Configurations/unix-Makefile.tmpl
 +++ b/Configurations/unix-Makefile.tmpl
-@@ -650,7 +650,11 @@ depend: Makefile
+@@ -661,7 +661,11 @@ depend: Makefile
  # Install helper targets #############################################
  ##@ Installation
  
diff --git a/package/libopenssl/libopenssl.hash b/package/libopenssl/libopenssl.hash
index d0ca45d303..e78b664aa5 100644
--- a/package/libopenssl/libopenssl.hash
+++ b/package/libopenssl/libopenssl.hash
@@ -1,5 +1,5 @@
-# From https://github.com/openssl/openssl/releases/download/openssl-3.5.3/openssl-3.5.3.tar.gz.sha256
-sha256  c9489d2abcf943cdc8329a57092331c598a402938054dc3a22218aea8a8ec3bf  openssl-3.5.3.tar.gz
+# From https://github.com/openssl/openssl/releases/download/openssl-3.5.4/openssl-3.5.4.tar.gz.sha256
+sha256  967311f84955316969bdb1d8d4b983718ef42338639c621ec4c34fddef355e99  openssl-3.5.4.tar.gz
 
 # License files
 sha256  7d5450cb2d142651b8afa315b5f238efc805dad827d91ba367d8516bc9d49e7a  LICENSE.txt
diff --git a/package/libopenssl/libopenssl.mk b/package/libopenssl/libopenssl.mk
index b892d4e236..2f844fd44a 100644
--- a/package/libopenssl/libopenssl.mk
+++ b/package/libopenssl/libopenssl.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBOPENSSL_VERSION = 3.5.3
+LIBOPENSSL_VERSION = 3.5.4
 LIBOPENSSL_SITE = https://github.com/openssl/openssl/releases/download/openssl-$(LIBOPENSSL_VERSION)
 LIBOPENSSL_SOURCE = openssl-$(LIBOPENSSL_VERSION).tar.gz
 LIBOPENSSL_LICENSE = Apache-2.0
-- 
2.43.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 16+ messages in thread

* Re: [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: security bump to version 3.5.4
  2026-03-19 12:42 ` [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: security bump to version 3.5.4 Jimmy Durand Wesolowski via buildroot
                     ` (4 preceding siblings ...)
  2026-03-19 12:42   ` [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: security bump to version 3.5.4 Jimmy Durand Wesolowski via buildroot
@ 2026-03-23 15:50   ` Quentin Schulz via buildroot
  2026-03-25  8:39     ` Jimmy Wesolowski via buildroot
  5 siblings, 1 reply; 16+ messages in thread
From: Quentin Schulz via buildroot @ 2026-03-23 15:50 UTC (permalink / raw)
  To: Jimmy Durand Wesolowski, buildroot; +Cc: guenther.harrasser

Hi Jimmy,

Your series is somehow malformed, all patches have v2 instead of v2 x/5. 
Your v1 had it correct so I'm not sure what happened since.

I highly suggest to use b4 (https://b4.docs.kernel.org/en/latest/ and 
https://pypi.org/project/b4/) if you can. Otherwise, I believe you can 
generate the series with
git format-patch --cover-letter -v 2 --subject-prefix "PATCH 2025.02.x" 
-M -s -o outgoing origin/2025.02.x
as hinted by the docs in 22.5.4. Patches for maintenance branches.

On 3/19/26 1:42 PM, Jimmy Durand Wesolowski wrote:
> As indicated by Quentin Schulz <quentin.schulz@cherry.de>, OpenSSL 3.4 is
> EoL at the end of 2026, and thus earlier than the Buildroot LTS 2025.02
> (end of 2027).
> OpenSSL version thus needs to be bumped to 3.5.x, which is currently
> 3.5.4. Note that a new 3.5.5 release is in the making.
> This series brings all the related commits from master to 2025.02.x.
> 

Considering we're using this series in one of our products and that 
before that series we had backported the patches internally and they 
were the same as in this series:

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>

Thanks!
Quentin
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: security bump to version 3.5.4
  2026-03-23 15:50   ` [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: " Quentin Schulz via buildroot
@ 2026-03-25  8:39     ` Jimmy Wesolowski via buildroot
  0 siblings, 0 replies; 16+ messages in thread
From: Jimmy Wesolowski via buildroot @ 2026-03-25  8:39 UTC (permalink / raw)
  To: Quentin Schulz, buildroot@buildroot.org; +Cc: Guenther Harrasser

Hi Quentin,


Thank you very much for the advice!
I will have a look at b4.
Thank you for the review.


Best regards,
________________________________________
From: Quentin Schulz <quentin.schulz@cherry.de>
Sent: 23 March 2026 16:50
To: Jimmy Wesolowski; buildroot@buildroot.org
Cc: Guenther Harrasser
Subject: Re: [PATCH 2025.02.x v2] Package/libopenssl: security bump to version 3.5.4

EXTERNAL EMAIL: Do not click any links or open any attachments unless you trust the sender and know the content is safe.

Hi Jimmy,

Your series is somehow malformed, all patches have v2 instead of v2 x/5.
Your v1 had it correct so I'm not sure what happened since.

I highly suggest to use b4 (https://b4.docs.kernel.org/en/latest/ and
https://pypi.org/project/b4/) if you can. Otherwise, I believe you can
generate the series with
git format-patch --cover-letter -v 2 --subject-prefix "PATCH 2025.02.x"
-M -s -o outgoing origin/2025.02.x
as hinted by the docs in 22.5.4. Patches for maintenance branches.

On 3/19/26 1:42 PM, Jimmy Durand Wesolowski wrote:
> As indicated by Quentin Schulz <quentin.schulz@cherry.de>, OpenSSL 3.4 is
> EoL at the end of 2026, and thus earlier than the Buildroot LTS 2025.02
> (end of 2027).
> OpenSSL version thus needs to be bumped to 3.5.x, which is currently
> 3.5.4. Note that a new 3.5.5 release is in the making.
> This series brings all the related commits from master to 2025.02.x.
>

Considering we're using this series in one of our products and that
before that series we had backported the patches internally and they
were the same as in this series:

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>

Thanks!
Quentin
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 16+ messages in thread

end of thread, other threads:[~2026-03-25  8:39 UTC | newest]

Thread overview: 16+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-03-16 16:13 [Buildroot] [PATCH 1/5] package/libopenssl: bump version to 3.5.0 Jimmy Durand Wesolowski via buildroot
2026-03-16 16:13 ` [Buildroot] [PATCH 2/5] package/libopenssl: security bump version to 3.5.1 Jimmy Durand Wesolowski via buildroot
2026-03-16 16:13 ` [Buildroot] [PATCH 3/5] package/libopenssl: bump version to 3.5.2 Jimmy Durand Wesolowski via buildroot
2026-03-16 16:13 ` [Buildroot] [PATCH 4/5] package/libopenssl: bump version to 3.5.3 Jimmy Durand Wesolowski via buildroot
2026-03-16 16:13 ` [Buildroot] [PATCH 5/5] package/libopenssl: security bump to version 3.5.4 Jimmy Durand Wesolowski via buildroot
2026-03-17 15:00 ` [Buildroot] [PATCH 1/5] package/libopenssl: bump version to 3.5.0 Quentin Schulz via buildroot
2026-03-17 15:24   ` Jimmy Wesolowski via buildroot
2026-03-17 15:40     ` Quentin Schulz via buildroot
2026-03-19 12:42 ` [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: security bump to version 3.5.4 Jimmy Durand Wesolowski via buildroot
2026-03-19 12:42   ` [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: bump version to 3.5.0 Jimmy Durand Wesolowski via buildroot
2026-03-19 12:42   ` [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: security bump version to 3.5.1 Jimmy Durand Wesolowski via buildroot
2026-03-19 12:42   ` [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: bump version to 3.5.2 Jimmy Durand Wesolowski via buildroot
2026-03-19 12:42   ` [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: bump version to 3.5.3 Jimmy Durand Wesolowski via buildroot
2026-03-19 12:42   ` [Buildroot] [PATCH 2025.02.x v2] package/libopenssl: security bump to version 3.5.4 Jimmy Durand Wesolowski via buildroot
2026-03-23 15:50   ` [Buildroot] [PATCH 2025.02.x v2] Package/libopenssl: " Quentin Schulz via buildroot
2026-03-25  8:39     ` Jimmy Wesolowski via buildroot

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox