From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Thu, 03 Jul 2025 23:07:27 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1uXR9T-00DlVy-1n for lore@lore.pengutronix.de; Thu, 03 Jul 2025 23:07:27 +0200 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1uXR9T-0000Lx-7l; Thu, 03 Jul 2025 23:07:27 +0200 Received: from mail-am6eur05on2093.outbound.protection.outlook.com ([40.107.22.93] helo=EUR05-AM6-obe.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1uXR9N-0000LX-FH for ptxdist@pengutronix.de; Thu, 03 Jul 2025 23:07:22 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=e7eP77/1Dcshp98o7h4DPeJ2rz3xpbGh6/vqzGmqDFfXmG9pROD6FZX0R+GP5a6WHwCH/GAPAN5XmMTbm9Ttff70GM6cBGRzVklsFTRq7s5auHNuJXJBlSwzGgEH9AWpAVkPgk23c2xucAZv7rQz5raK/c+QfbeCVlJ5IlUzzfktgTZs/ZIRF5vBKZsSDA720XbNIuaQRJsTi50Wl8t3i5IAEyXRu3uFyB6f00HasLQ3WUG99n8GA+63Lzkqc1T/ueC9/ey5/OB0yezdFVLxDy0cvorPWmNyju9rXNI7hZ9B7GZEzxbvGa9wWlH6rBLPTG33yUL7Akg2ZU25OIOnXA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=5ZujarLby0nGVopNEcJdczg12BisZpiGSfW5g2q8g98=; b=XoVzSdrT0lFMTQhW00Pc79SVf2UJffG4q0QlNl9qK9Nx4iub6gPOZdDPMQ2n0kSFIjicSbaDiC1yMxiZop6BozCyf10qysU3ACg8Sj/MohfjONgc9QpJoUxrT6mI3NBBpvEFYez15YR7tp3D1K5ZvqnvUM3+0+CFVRb0Fp5VbCxoyix0WHo2dWRnf6zBjH19iHS0ZnLeIj8Z/Q1oEaa0CNq9ozVVfdgkvog7Xp909JY8AaLs/6wNCx9qrkFJFeKiWjh4skb4ojD0gLXx/lQDNMAAF7sqW/VK3S4KqVGp4c1hCTKKkDK39gI+LzCBslfr5Znuxqacd+tWLPqpZpwJGw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5ZujarLby0nGVopNEcJdczg12BisZpiGSfW5g2q8g98=; b=kIrWObr/79xYBGgxgjZdwmUmJm3igEJDLlslNU7/9oN4cjKakGNteko+58SjXDJ/MaKLljvHkBiSbwUgxUA4gkwOR9pTCM4vxUKj8d4SYTx1YsvAlk/GiReF5Bz8SIcXAVFp6gmpnUTB3fLjzg5M4em/c6wCbTyzw/NidY9q8kc= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by AM7PPF742BA81FD.EURP251.PROD.OUTLOOK.COM (2603:10a6:20f:fff1::858) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8880.21; Thu, 3 Jul 2025 21:07:18 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%6]) with mapi id 15.20.8901.021; Thu, 3 Jul 2025 21:07:18 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Thu, 3 Jul 2025 23:07:12 +0200 Message-Id: <20250703210712.2586820-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.34.1 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GVZP280CA0007.SWEP280.PROD.OUTLOOK.COM (2603:10a6:150:273::11) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|AM7PPF742BA81FD:EE_ X-MS-Office365-Filtering-Correlation-Id: 5aa03627-75ce-4a88-ca88-08ddba759822 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|376014|52116014|1800799024|366016|38350700014; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?kle5JwXTWlX4rXrOvNUjtJnLrlMABDpb5ALl5BWgzI9yxmcCsONjU4XNAp7i?= =?us-ascii?Q?e0irczRrxc6PRM3XFgcVpVrR7e18HEwqv8wphivIA0NNqXwlnT7T/6DDQrjD?= =?us-ascii?Q?ohAn/MWQ2hGhkC772HGyMwlJcMqGmYCSdq8vbNmq07X8gCC8L2V2DxP9j55t?= =?us-ascii?Q?Y/I5D0tGdwlwYgo05w51qonMqaTXBRTadPMC7+108ozbxV7nUrwvan3VICAm?= =?us-ascii?Q?I4WZG7jxv/VUgFFpImKxIfzaulP/hQXX5XPotde6qy5d5jURvSsgMJgM6940?= =?us-ascii?Q?RCY3bYSws7oCbE2aeLQHO2EL87HQtwD7azV2Ht+w4+jPxNTaNAfGGm3AHPYt?= =?us-ascii?Q?fdTNbDr1twitD0ryEg9FtdBnXAPAavXj3J6achu/0wP2BDlJIbUqcFk0QXCa?= =?us-ascii?Q?BS65v7aCq336NFglOLuploFgVVOJ/E9V3bMA6fjwcsrd34QJbzW5e49b2gnQ?= =?us-ascii?Q?5BgAdTRxCTDz4WAqduWGy83U/LTC+1qLDKLfudjmWz8Qv0UL5bzGgSNrl+iz?= =?us-ascii?Q?cEvVeP35VTEHBRmTUg4QVfwRTxxRe84gx6HEe3KOZSjeXpHcWKpwr8zzztrs?= =?us-ascii?Q?aBNt9kaSIiatxjeIiEre68LSsV7DocK0Dgl5ux/LQ+Ofonjw0rCX7TRYZ3R5?= =?us-ascii?Q?jcljKTUdwycHS/RCiPB/As6+ybtIRvE7omFCx3b2zwdkMhqL+HvNDP0l6NMN?= =?us-ascii?Q?WPxlgHXQphN8tzM/P62NyGFvJxXn+D7VunyLgexUEm9KhVzcUsAaXsxNJHwu?= =?us-ascii?Q?fsDie6xuiDqAYyvyi3Lu9q2dWCHUQG5xvc3JFWqOE5RUnHyNm9eMQbS5Hkv7?= =?us-ascii?Q?VxedV4Ch+vtIV6IbowImB3PEnHu6Xm3rMJvpBUkQb8yCrzf/1ivcMpqBnNz8?= =?us-ascii?Q?3LMSy4riLAUqZmg4GZSFdo7FhODxd/roWA4DlDQpx87d5P8o38Eb7+p3tIVJ?= =?us-ascii?Q?4AD2RJlzmYJEkgQuD72VTyu8xYOrTEXW+66tqCiKSu6CwmYSsOEeRphie2zx?= =?us-ascii?Q?wMVpM6R4HO0xuB6T2Ssptmoyk7ujZSb1fgcjv39Kmlck1Q5RsYUCF0gtTphB?= =?us-ascii?Q?VI5y9NSuRw6vu6YjXMtMHTd06w5sBe3W3vRwXSiIOTrs+CVym18NuZpbE8RX?= =?us-ascii?Q?dZBCF+REx6sEUWVROoDUAvLExbImv3yXgAoMoKk7HnbaFHWJi7+gsi+sDUCt?= =?us-ascii?Q?vvbNM36nyBOFMfWLehMYeEtj8vZ+74ikPy6bOo++gvDaYgK8VWvCgBfBtkJU?= =?us-ascii?Q?XOaq5sOvVCbfmcEQKNBCCNNjRJjMn5xIXUeHKGy6znb1c5/HsVfGRXWaFXdE?= =?us-ascii?Q?ePtOFRyFMFlVwF2XJDSHLXLaasdcRs9GqJQnbf6mxSShsHUq89/LIZcf2LR1?= =?us-ascii?Q?4g4HUKaJQwHdd1EyYxlDOhPpBpdsALMXYs7kIzx6SRcsgmIjzmSBmXPfoLi0?= =?us-ascii?Q?dqlyzxsbcpyc/M9EDKhoLnPNhF1XozQt69hJV//KFO90MrRo/F7DEgSwEj11?= =?us-ascii?Q?86rnFcOv1Z4G4oo=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(376014)(52116014)(1800799024)(366016)(38350700014); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?UYuyy27hc5GS/cAXWm4wWxKT/zJdsUP1qjy5k4de8ipm3oaFAHSz1e17iEq9?= =?us-ascii?Q?5tMyhqyelvHK2zs5BNGHq7e4g1/xnX81SOqaqoeQYI/P+2GLIh8Ho9zdW4Yq?= =?us-ascii?Q?YZe6+geKUIVS+ouBE6dxjRSG5dEgTzveQJII+1f6FzBbkyStx9Q3mnw4CGHA?= =?us-ascii?Q?x1TT7Yj7/D87miZCqotkp0sq9mW1G5K62TTbgAfzGBk+P7LX6cImu1NqpdqV?= =?us-ascii?Q?NfhbHEE6dOW9g8la4HMGrRxqNZ0HqNwPHBS+DEEaTFzQJO9cDdbj0KMl5c1b?= =?us-ascii?Q?vmqp1gJKbwIVe1fBVdBARNaxPq7X1Hp3ZcsUB8OKYRemDhRi0A2OtxJ+GUE8?= =?us-ascii?Q?Sc7asFhMErbTCJXUmAKBzOafOE++deBYTpXB3/32j9xaE3fLTTkv7OuHlNI5?= =?us-ascii?Q?Vahhfrwmtg2daEwzBlCmytPhMPZWanLtBnIXutzwY1Wh6upyqmVM+GTwgqdt?= =?us-ascii?Q?RS+t771Lw5xElgMBGPKpN7scPEmdAKgGdFCJLXxu+zSrKxA4J5wI6yZtIymn?= =?us-ascii?Q?tUNEBfRtK6zuJBwhSyNo7eS6j3cfmJEGLioULNeJL6g/aaOvZagIYJSNHDt9?= =?us-ascii?Q?5IzZ3jV3bdGlANQqdBFRcQvSnPaQDPMXpXDZW/yC1Pd/eeqv3T/oCbpH0ySC?= =?us-ascii?Q?M6bwKQOAsN4EK631j2ITakR9ziTEfcoBiqLWPPZ7eLA1xUuvfdZJwtS3UMeF?= =?us-ascii?Q?+R0Jxn9MxcHgGdHdJ4Pu9Sh/vaxmgnXMLc9SAizc71iqH2aD7qcBU3U5ouhv?= =?us-ascii?Q?v367VX7IL0ijo31UBWz1Vaf4LnNSaknnECApnf+ADKx0gvST0/WYveooneF+?= =?us-ascii?Q?lJuYyyTkVkYrtnPHou6PWXbVnuACZ/z9GtIaxDRTrfxMrJPYK2SJK8XFvMvW?= =?us-ascii?Q?uflt5J0H3zl52D47OSSqKgjoi7l8ZNlQ5ZPvJX3tYzqXWUxsh/jpmLjNtCxR?= =?us-ascii?Q?iQSTt22dK+kbf+fHEIlxfZY/lY7A4CRm5r7VrMk+UaMImTPSzTlAsDMG45n4?= =?us-ascii?Q?kPA5gg701h3rDxJd4Tb7LQ+9jttBXFnqI2pkxlPWGbsMU9GdfGaXQiljiRzw?= =?us-ascii?Q?p9nOouK1nmRyWaLfrn7tsHEJBBrTyju7/RO1Z3bH7RzsKdTwaICDFIHpX3n9?= =?us-ascii?Q?RrBzU8ls/dXz4I0LsL/9bvKXl507BX+68Slpw/I/L1YNCYZdnGT16q85GlNl?= =?us-ascii?Q?9nIx95erCKkFYcrjpFmJ32widdsagFfgiAzm1v5Zny3nijR1V/Ve5k/HnbLw?= =?us-ascii?Q?fQtECPyJpwA0NgLOmwftB4jWOPeyzqLTktXXd27jgPReaSJyNd6+IJhHSBaG?= =?us-ascii?Q?FB0NLIKR4MBJkWlW4fNnDbMyazfuf4iRaT8xU1cJJOQlOR41mBgqwAwkwbAQ?= =?us-ascii?Q?o3XzXXu2fZ2syNAd1OigPic7JblQtFMWybd+dRFn9QaXW/YRJu8am6kLC2U3?= =?us-ascii?Q?KlxRkna32X7Wj4b72MXBF6pmkIu9poz3t6Cq4pan2/lMwvOrv++0VWeTCuJ8?= =?us-ascii?Q?qBj26TIuRl1c1pgXeiKvPvQ/TDY8jBvdLPk4C/yp+VdaNLKApniuNqXK5X/8?= =?us-ascii?Q?0gVgxIepOseaFlHI+jyYFXZgKEYBCWppRhwiQkzsEat7U++PHKUf2WNw8oxO?= =?us-ascii?Q?Ng=3D=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 5aa03627-75ce-4a88-ca88-08ddba759822 X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Jul 2025 21:07:18.4180 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: Jt5BlpKcqq8OTrHUUEgn+Lba4/O7ePuu4K3CDt36IkcagMA3l9Cc6tm9XMuzem6gs/2G/JHGFLLcyuM7fcDIMdlb6Aob98Jv9jnmDmTtZ6M= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PPF742BA81FD X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.0 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED, SPF_HELO_PASS,SPF_PASS autolearn=no autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] openssl: Version bump. 3.5.0 -> 3.5.1 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Minor security fix release. https://github.com/openssl/openssl/releases/tag/openssl-3.5.1 Plugs CVE: CVE-2025-4575: Fix x509 application adds trusted use instead of rejected use. * Adjust patchset minor offset change. Signed-off-by: Christian Melki --- .../0001-debian-targets.patch | 0 patches/{openssl-3.5.0 => openssl-3.5.1}/0002-pic.patch | 0 ...Configure-allow-to-enable-ktls-if-target-does-not-st.patch | 4 ++-- .../0004-conf-Serialize-allocation-free-of-ssl_names.patch | 0 ...Configure-drop-fzero-call-used-regs-used-gpr-from-De.patch | 0 patches/{openssl-3.5.0 => openssl-3.5.1}/series | 0 rules/openssl.make | 4 ++-- 7 files changed, 4 insertions(+), 4 deletions(-) rename patches/{openssl-3.5.0 => openssl-3.5.1}/0001-debian-targets.patch (100%) rename patches/{openssl-3.5.0 => openssl-3.5.1}/0002-pic.patch (100%) rename patches/{openssl-3.5.0 => openssl-3.5.1}/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch (95%) rename patches/{openssl-3.5.0 => openssl-3.5.1}/0004-conf-Serialize-allocation-free-of-ssl_names.patch (100%) rename patches/{openssl-3.5.0 => openssl-3.5.1}/0005-Configure-drop-fzero-call-used-regs-used-gpr-from-De.patch (100%) rename patches/{openssl-3.5.0 => openssl-3.5.1}/series (100%) diff --git a/patches/openssl-3.5.0/0001-debian-targets.patch b/patches/openssl-3.5.1/0001-debian-targets.patch similarity index 100% rename from patches/openssl-3.5.0/0001-debian-targets.patch rename to patches/openssl-3.5.1/0001-debian-targets.patch diff --git a/patches/openssl-3.5.0/0002-pic.patch b/patches/openssl-3.5.1/0002-pic.patch similarity index 100% rename from patches/openssl-3.5.0/0002-pic.patch rename to patches/openssl-3.5.1/0002-pic.patch diff --git a/patches/openssl-3.5.0/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch b/patches/openssl-3.5.1/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch similarity index 95% rename from patches/openssl-3.5.0/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch rename to patches/openssl-3.5.1/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch index 9f941b880..41c522c10 100644 --- a/patches/openssl-3.5.0/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch +++ b/patches/openssl-3.5.1/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch @@ -41,10 +41,10 @@ index cba57b41273f..7fa3eeae412f 100644 "linux-latomic" => { inherit_from => [ "linux-generic32" ], diff --git a/Configure b/Configure -index 15054f94034a..fcb1d4cfefb4 100755 +index 499585438a16..98c0bcb92a79 100755 --- a/Configure +++ b/Configure -@@ -1835,7 +1835,7 @@ unless ($disabled{devcryptoeng}) { +@@ -1836,7 +1836,7 @@ unless ($disabled{devcryptoeng}) { unless ($disabled{ktls}) { $config{ktls}=""; my $cc = $config{CROSS_COMPILE}.$config{CC}; diff --git a/patches/openssl-3.5.0/0004-conf-Serialize-allocation-free-of-ssl_names.patch b/patches/openssl-3.5.1/0004-conf-Serialize-allocation-free-of-ssl_names.patch similarity index 100% rename from patches/openssl-3.5.0/0004-conf-Serialize-allocation-free-of-ssl_names.patch rename to patches/openssl-3.5.1/0004-conf-Serialize-allocation-free-of-ssl_names.patch diff --git a/patches/openssl-3.5.0/0005-Configure-drop-fzero-call-used-regs-used-gpr-from-De.patch b/patches/openssl-3.5.1/0005-Configure-drop-fzero-call-used-regs-used-gpr-from-De.patch similarity index 100% rename from patches/openssl-3.5.0/0005-Configure-drop-fzero-call-used-regs-used-gpr-from-De.patch rename to patches/openssl-3.5.1/0005-Configure-drop-fzero-call-used-regs-used-gpr-from-De.patch diff --git a/patches/openssl-3.5.0/series b/patches/openssl-3.5.1/series similarity index 100% rename from patches/openssl-3.5.0/series rename to patches/openssl-3.5.1/series diff --git a/rules/openssl.make b/rules/openssl.make index 2cdaf5259..0dc4bd56c 100644 --- a/rules/openssl.make +++ b/rules/openssl.make @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_OPENSSL) += openssl # # Paths and names # -OPENSSL_VERSION := 3.5.0 -OPENSSL_MD5 := 51da7d2bdf7f4f508cb024f562eb9b03 +OPENSSL_VERSION := 3.5.1 +OPENSSL_MD5 := 562a4e8d14ee5272f677a754b9c1ca5c OPENSSL := openssl-$(OPENSSL_VERSION) OPENSSL_SUFFIX := tar.gz OPENSSL_URL := \ -- 2.34.1