openssl: Update to version 3.0.18
authorHauke Mehrtens <[email protected]>
Sun, 5 Oct 2025 17:43:22 +0000 (19:43 +0200)
committerHauke Mehrtens <[email protected]>
Mon, 13 Oct 2025 21:41:16 +0000 (23:41 +0200)
commit6e068b7052cccadc7e3543ca6741ece26333097e
tree9867ec288c57bbfea10877bdf8978bc6254a07e9
parentade81ff85a47ef3ae7cf90a71b51b2fc595e5a55
openssl: Update to version 3.0.18

OpenSSL 3.0.18 is a security patch release. The most severe CVE fixed in this
release is Moderate.

This release incorporates the following bug fixes and mitigations:

 * Fix Out-of-bounds read & write in RFC 3211 KEK Unwrap. (CVE-2025-9230)

 * Fix Out-of-bounds read in HTTP client no_proxy handling. (CVE-2025-9232)

The removed patch is included upstream:
https://github.com/openssl/openssl/commit/c0d968f0ac56ad507ab0101e537e7d530e9f0448

Link: https://github.com/openwrt/openwrt/pull/20312
Signed-off-by: Hauke Mehrtens <[email protected]>
package/libs/openssl/Makefile
package/libs/openssl/patches/0001-Don-t-keep-the-store-open-in-by_store_ctrl_ex.patch [deleted file]