CVS commit: pkgsrc/security/openssl

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Tue Jul  1 14:45:15 UTC 2025

Modified Files:
        pkgsrc/security/openssl: Makefile distinfo

Log Message:
openssl: updated to 3.5.1

OpenSSL 3.5.1 is a security patch release. The most severe CVE fixed in this
release is Low.

This release incorporates the following bug fixes and mitigations:

Fix x509 application adds trusted use instead of rejected use.
([CVE-2025-4575])


To generate a diff of this commit:
cvs rdiff -u -r1.308 -r1.309 pkgsrc/security/openssl/Makefile
cvs rdiff -u -r1.180 -r1.181 pkgsrc/security/openssl/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/openssl/Makefile
diff -u pkgsrc/security/openssl/Makefile:1.308 pkgsrc/security/openssl/Makefile:1.309
--- pkgsrc/security/openssl/Makefile:1.308      Mon Jun 30 15:40:13 2025
+++ pkgsrc/security/openssl/Makefile    Tue Jul  1 14:45:15 2025
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile,v 1.308 2025/06/30 15:40:13 adam Exp $
+# $NetBSD: Makefile,v 1.309 2025/07/01 14:45:15 adam Exp $
 
 # Remember to upload-distfiles when updating OpenSSL -- otherwise it
 # is not possible for users who have bootstrapped without OpenSSL
 # to install it and enable HTTPS fetching.
-DISTNAME=      openssl-3.5.0
+DISTNAME=      openssl-3.5.1
 CATEGORIES=    security
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=openssl/}
 GITHUB_RELEASE=        ${DISTNAME}
@@ -43,7 +43,7 @@ MAKE_FLAGS+=          MANDIR=${PREFIX}/${PKGMAND
        (${MACHINE_ARCH} == "sh3el") || \
        (${MACHINE_ARCH} == "sparc") || \
        (${MACHINE_ARCH} == "vax") || \
-       !empty(MACHINE_ARCH:Mearm*))
+       ${MACHINE_ARCH:Mearm*})
 # Use OpenSSL's built-in fallbacks (not actually clang-specific)
 # see src/crypto/external/bsd/openssl/lib/libcrypto/arch/*/crypto.inc
 CFLAGS+=               -DBROKEN_CLANG_ATOMICS  # no atomic 64 bit ops

Index: pkgsrc/security/openssl/distinfo
diff -u pkgsrc/security/openssl/distinfo:1.180 pkgsrc/security/openssl/distinfo:1.181
--- pkgsrc/security/openssl/distinfo:1.180      Mon Jun 30 15:40:13 2025
+++ pkgsrc/security/openssl/distinfo    Tue Jul  1 14:45:15 2025
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.180 2025/06/30 15:40:13 adam Exp $
+$NetBSD: distinfo,v 1.181 2025/07/01 14:45:15 adam Exp $
 
-BLAKE2s (openssl-3.5.0.tar.gz) = a3895e94dec0373ab95b335bd5e754700d6784b25abeb7dbdefac1da9ef827c2
-SHA512 (openssl-3.5.0.tar.gz) = 39cc80e2843a2ee30f3f5de25cd9d0f759ad8de71b0b39f5a679afaaa74f4eb58d285ae50e29e4a27b139b49343ac91d1f05478f96fb0c6b150f16d7b634676f
-Size (openssl-3.5.0.tar.gz) = 53136912 bytes
+BLAKE2s (openssl-3.5.1.tar.gz) = c1adb91070674654ce0f6ca1808b1597ce1be1da3a81119e8d461b14c605b6d4
+SHA512 (openssl-3.5.1.tar.gz) = 0fa152ae59ab5ea066319de039dfb1d24cbb247172d7512feb5dd920db3740f219d76b0195ea562f84fe5eae36c23772302eddfbb3509df13761452b4dafb9d3
+Size (openssl-3.5.1.tar.gz) = 53158817 bytes
 SHA1 (patch-Configurations_unix-Makefile.tmpl) = ea9b0a0c8de810362813d84a4f85c5ebdedf9fc6
 SHA1 (patch-util_perl_OpenSSL_config.pm) = 3ba3c23046bf69c7d348b4c1c8c8269d83cfa2b4