Thanks, applied as 343ed162d006de87136283d4263b4ccbb56ad781. Michael
[sent from post-receive hook] On Sat, 05 Jul 2025 10:22:28 +0200, Christian Melki <[email protected]> wrote: > Minor security fix release. > https://github.com/openssl/openssl/releases/tag/openssl-3.5.1 > > Plugs CVE: > CVE-2025-4575: Fix x509 application adds trusted use instead of rejected use. > > * Adjust patchset minor offset change. > > Signed-off-by: Christian Melki <[email protected]> > Message-Id: <[email protected]> > Signed-off-by: Michael Olbrich <[email protected]> > > diff --git a/patches/openssl-3.5.0/0001-debian-targets.patch > b/patches/openssl-3.5.1/0001-debian-targets.patch > similarity index 100% > rename from patches/openssl-3.5.0/0001-debian-targets.patch > rename to patches/openssl-3.5.1/0001-debian-targets.patch > diff --git a/patches/openssl-3.5.0/0002-pic.patch > b/patches/openssl-3.5.1/0002-pic.patch > similarity index 100% > rename from patches/openssl-3.5.0/0002-pic.patch > rename to patches/openssl-3.5.1/0002-pic.patch > diff --git > a/patches/openssl-3.5.0/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch > > b/patches/openssl-3.5.1/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch > similarity index 95% > rename from > patches/openssl-3.5.0/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch > rename to > patches/openssl-3.5.1/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch > index 9f941b880776..41c522c1044e 100644 > --- > a/patches/openssl-3.5.0/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch > +++ > b/patches/openssl-3.5.1/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch > @@ -41,10 +41,10 @@ index cba57b41273f..7fa3eeae412f 100644 > "linux-latomic" => { > inherit_from => [ "linux-generic32" ], > diff --git a/Configure b/Configure > -index 15054f94034a..fcb1d4cfefb4 100755 > +index 499585438a16..98c0bcb92a79 100755 > --- a/Configure > +++ b/Configure > -@@ -1835,7 +1835,7 @@ unless ($disabled{devcryptoeng}) { > +@@ -1836,7 +1836,7 @@ unless ($disabled{devcryptoeng}) { > unless ($disabled{ktls}) { > $config{ktls}=""; > my $cc = $config{CROSS_COMPILE}.$config{CC}; > diff --git > a/patches/openssl-3.5.0/0004-conf-Serialize-allocation-free-of-ssl_names.patch > > b/patches/openssl-3.5.1/0004-conf-Serialize-allocation-free-of-ssl_names.patch > similarity index 100% > rename from > patches/openssl-3.5.0/0004-conf-Serialize-allocation-free-of-ssl_names.patch > rename to > patches/openssl-3.5.1/0004-conf-Serialize-allocation-free-of-ssl_names.patch > diff --git > a/patches/openssl-3.5.0/0005-Configure-drop-fzero-call-used-regs-used-gpr-from-De.patch > > b/patches/openssl-3.5.1/0005-Configure-drop-fzero-call-used-regs-used-gpr-from-De.patch > similarity index 100% > rename from > patches/openssl-3.5.0/0005-Configure-drop-fzero-call-used-regs-used-gpr-from-De.patch > rename to > patches/openssl-3.5.1/0005-Configure-drop-fzero-call-used-regs-used-gpr-from-De.patch > diff --git a/patches/openssl-3.5.0/series b/patches/openssl-3.5.1/series > similarity index 100% > rename from patches/openssl-3.5.0/series > rename to patches/openssl-3.5.1/series > diff --git a/rules/openssl.make b/rules/openssl.make > index 2cdaf52594e9..0dc4bd56ce9d 100644 > --- a/rules/openssl.make > +++ b/rules/openssl.make > @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_OPENSSL) += openssl > # > # Paths and names > # > -OPENSSL_VERSION := 3.5.0 > -OPENSSL_MD5 := 51da7d2bdf7f4f508cb024f562eb9b03 > +OPENSSL_VERSION := 3.5.1 > +OPENSSL_MD5 := 562a4e8d14ee5272f677a754b9c1ca5c > OPENSSL := openssl-$(OPENSSL_VERSION) > OPENSSL_SUFFIX := tar.gz > OPENSSL_URL := \
