public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Dmitry Belyavskiy <dbelyavs@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/openssl] rawhide: Rebase to OpenSSL 3.5.7
Date: Wed, 10 Jun 2026 14:08:19 GMT	[thread overview]
Message-ID: <178110049965.1.6737670066047390729.rpms-openssl-16a35f5b31e8@fedoraproject.org> (raw)

            A new commit has been pushed.

            Repo   : rpms/openssl
            Branch : rawhide
            Commit : 16a35f5b31e8fef6dfb4eae69e1675ea83bc7fe3
            Author : Dmitry Belyavskiy <dbelyavs@redhat.com>
            Date   : 2026-06-10T15:56:58+02:00
            Stats  : +22/-3 in 4 file(s)
            URL    : https://src.fedoraproject.org/rpms/openssl/c/16a35f5b31e8fef6dfb4eae69e1675ea83bc7fe3?branch=rawhide

            Log:
            Rebase to OpenSSL 3.5.7

Resolves: CVE-2026-45447
Resolves: CVE-2026-34182
Resolves: CVE-2026-34183
Resolves: CVE-2026-42764
Resolves: CVE-2026-45445
Resolves: CVE-2026-7383
Resolves: CVE-2026-9076
Resolves: CVE-2026-34180
Resolves: CVE-2026-34181
Resolves: CVE-2026-42766
Resolves: CVE-2026-42767
Resolves: CVE-2026-42768
Resolves: CVE-2026-42769
Resolves: CVE-2026-42770
Resolves: CVE-2026-45446

---
diff --git a/.gitignore b/.gitignore
index 469dec0..7968638 100644
--- a/.gitignore
+++ b/.gitignore
@@ -70,3 +70,4 @@ openssl-1.0.0a-usa.tar.bz2
 /openssl-3.5.4.tar.gz
 /openssl-3.5.5.tar.gz
 /openssl-3.5.6.tar.gz
+/openssl-3.5.7.tar.gz

diff --git a/0006-RH-Add-support-for-PROFILE-SYSTEM-system-default-cip.patch b/0006-RH-Add-support-for-PROFILE-SYSTEM-system-default-cip.patch
index d53c49a..8d7cae7 100644
--- a/0006-RH-Add-support-for-PROFILE-SYSTEM-system-default-cip.patch
+++ b/0006-RH-Add-support-for-PROFILE-SYSTEM-system-default-cip.patch
@@ -317,7 +317,7 @@ index 9874e6bad6..76b6befbad 100644
 +#endif
      ADD_TEST(test_default_cipherlist_explicit);
      ADD_TEST(test_default_cipherlist_clear);
-     ADD_TEST(test_stdname_cipherlist);
+ #ifndef OPENSSL_NO_TLS1_3
 -- 
 2.52.0
 

diff --git a/openssl.spec b/openssl.spec
index 294b605..382a31b 100644
--- a/openssl.spec
+++ b/openssl.spec
@@ -33,7 +33,7 @@ print(string.sub(hash, 0, 16))
 
 Summary: Utilities from the general purpose cryptography library with TLS implementation
 Name: openssl
-Version: 3.5.6
+Version: 3.5.7
 Release: 1%{?dist}
 Epoch: 1
 Source0: openssl-%{version}.tar.gz
@@ -478,6 +478,24 @@ ln -s /etc/crypto-policies/back-ends/openssl_fips.config $RPM_BUILD_ROOT%{_sysco
 %ldconfig_scriptlets libs
 
 %changelog
+* Wed Jun 10 2026 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.7-1
+- Rebase to OpenSSL 3.5.7
+  Resolves: CVE-2026-45447
+  Resolves: CVE-2026-34182
+  Resolves: CVE-2026-34183
+  Resolves: CVE-2026-42764
+  Resolves: CVE-2026-45445
+  Resolves: CVE-2026-7383
+  Resolves: CVE-2026-9076
+  Resolves: CVE-2026-34180
+  Resolves: CVE-2026-34181
+  Resolves: CVE-2026-42766
+  Resolves: CVE-2026-42767
+  Resolves: CVE-2026-42768
+  Resolves: CVE-2026-42769
+  Resolves: CVE-2026-42770
+  Resolves: CVE-2026-45446
+
 * Mon Apr 20 2026 Pavol Žáčik <pzacik@redhat.com> - 1:3.5.6-1
 - Rebase to OpenSSL 3.5.6
   Resolves: CVE-2026-2673

diff --git a/sources b/sources
index 7e1503e..1fa392a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (openssl-3.5.6.tar.gz) = 7e48989c01751104e1c94fde05726c0d6d7cb0dd4f3d045e0e8f36b1d330a2557665970c44ec9aae86f5f7420315326022249247cd6845e6d598134aa74ac33c
+SHA512 (openssl-3.5.7.tar.gz) = de5351d2d532e1a3908a738f7d8aae448d32bc60bdb24808c556a24bc37a3f53daedf12b5d432eeb8c235e16939d842f908332ede8a447ca103ad1c493c820d7

                 reply	other threads:[~2026-06-10 14:08 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178110049965.1.6737670066047390729.rpms-openssl-16a35f5b31e8@fedoraproject.org \
    --to=dbelyavs@redhat.com \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox