openwrt/package/libs/openssl
Hauke Mehrtens b6d7048c8b
Some checks failed
Build all core packages / Build all core packages for selected target (push) Has been cancelled
openssl: Update to version 3.0.18
OpenSSL 3.0.18 is a security patch release. The most severe CVE fixed in this
release is Moderate.

This release incorporates the following bug fixes and mitigations:

 * Fix Out-of-bounds read & write in RFC 3211 KEK Unwrap. (CVE-2025-9230)

 * Fix Out-of-bounds read in HTTP client no_proxy handling. (CVE-2025-9232)

The removed patch is included upstream:
c0d968f0ac

Link: https://github.com/openwrt/openwrt/pull/20312
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 6e068b7052)
2025-12-04 15:13:14 +01:00
..
files openssl: add legacy provider 2023-04-05 08:24:49 -03:00
patches openssl: Update to version 3.0.18 2025-12-04 15:13:14 +01:00
Config.in openssl: add legacy provider 2023-04-05 08:24:49 -03:00
Makefile openssl: Update to version 3.0.18 2025-12-04 15:13:14 +01:00