mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-08 00:20:38 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/wolfssl: security bump version to 5.9.1

Browse Source 
https://github.com/wolfSSL/wolfssl/blob/v5.9.1-stable/ChangeLog.md

Restored patch 0001 to its original state.

Updated license hashes due to upstream commits:

"updating license from GPLv2 to GPLv3"
629c5b4cf6

"Add GPLv2 exception list to LICENSING"
e02de78507

with various follow-up commits:
0d49df7735
32d33f2a53
1e9d71af42
18332faa05

Fixes the following CVEs:

* [High] CVE-2026-5264
* [High] CVE-2026-5263
* [High] CVE-2026-5295
* [High] CVE-2026-5466
* [High] CVE-2026-5477
* [High] CVE-2026-5447
* [High] CVE-2026-5500
* [High] CVE-2026-5501
* [High] CVE-2026-5503
* [Low] CVE-2026-5187
* [Low] CVE-2026-5188
* [Low] CVE-2026-5448
* [Low] CVE-2026-5772
* [Low] CVE-2026-5778
* [High] CVE-2026-3548
* [High] CVE-2026-3549
* [High] CVE-2026-3547
* [Low] CVE-2026-0819
* [Low] CVE-2026-1005
* [Low] CVE-2026-2645
* [Low] CVE-2026-3230
* [Low] CVE-2025-12888
* [Med.] CVE-2025-11936
* [Low] CVE-2025-11935
* [Low] CVE-2025-11934
* [Low] CVE-2025-11933
* [Low] CVE-2025-11931
* [Low] CVE-2025-11932
* [Low] CVE-2025-12889
* [Low] CVE-2025-13912
* [High] CVE-2025-7395
* [Med.] CVE-2025-7394
* [Low] CVE-2025-7396

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 99f8ed1212)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
Bernd Kuhls
2026-04-14 18:07:08 +02:00
committed by Thomas Perale
parent fadcabd086
commit d1c44f8cdf
3 changed files with 11 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
package/wolfssl/0001-Define-HAVE_LIMITS_H-in-options.h-rather-than-config.patch
View File

@@ -7,7 +7,6 @@ Subject: [PATCH] Define HAVE_LIMITS_H in options.h rather than config.h since
Upstream: https://github.com/wolfSSL/wolfssl/pull/10097
[Bernd: rebased for 5.7.2]
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
cmake/config.in | 3 ---
@@ -33,7 +32,7 @@ diff --git a/cmake/options.h.in b/cmake/options.h.in
index 985b54241d6..c46ada8045d 100644
--- a/cmake/options.h.in
+++ b/cmake/options.h.in
@@ -31,6 +31,9 @@ extern "C" {
@@ -33,6 +33,9 @@ extern "C" {
#endif
#ifndef WOLFSSL_OPTIONS_IGNORE_SYS
@@ -47,12 +46,12 @@ diff --git a/configure.ac b/configure.ac
index bce600f2ecc..c5cf9f320c7 100644
--- a/configure.ac
+++ b/configure.ac
@@ -116,7 +116,9 @@
AM_CCASFLAGS="$AM_CCASFLAGS -DWOLFSSL_EXPERIMENTAL_SETTINGS"
fi
@@ -185,7 +185,9 @@ AC_ARG_ENABLE([freebsdkm-crypto-register],
[ENABLED_BSDKM_REGISTER=no]
)
-AC_CHECK_HEADERS([arpa/inet.h fcntl.h limits.h netdb.h netinet/in.h stddef.h time.h sys/ioctl.h sys/socket.h sys/time.h errno.h sys/un.h])
+AC_CHECK_HEADERS([arpa/inet.h fcntl.h netdb.h netinet/in.h stddef.h time.h sys/ioctl.h sys/socket.h sys/time.h errno.h sys/un.h])
-AC_CHECK_HEADERS([arpa/inet.h fcntl.h limits.h netdb.h netinet/in.h stddef.h time.h sys/ioctl.h sys/socket.h sys/time.h errno.h sys/un.h ctype.h sys/random.h])
+AC_CHECK_HEADERS([arpa/inet.h fcntl.h netdb.h netinet/in.h stddef.h time.h sys/ioctl.h sys/socket.h sys/time.h errno.h sys/un.h ctype.h sys/random.h])
+# Special case: Since types.h depends on HAVE_LIMITS_H, we must define it in options.h.
+AC_CHECK_HEADER([limits.h], [AM_CPPFLAGS="$AM_CPPFLAGS -DHAVE_LIMITS_H=1"], [])
AC_CHECK_LIB([network],[socket])

6
package/wolfssl/wolfssl.hash
View File

@@ -1,6 +1,6 @@
# Locally computed:
sha256 0f2ed82e345b833242705bbc4b08a2a2037a33f7bf9c610efae6464f6b10e305 wolfssl-5.7.2.tar.gz
sha256 d5ca7af48cd2d9a91d539e9baedeba55a0605a28d7ac8b01dc3d5254a13ca341 wolfssl-5.9.1.tar.gz
# Hash for license files:
sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING
sha256 b23c1da1f85d699d3288d73c952b4cd02760d23dc1ddc1b221cbb8be82387189 LICENSING
sha256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903 COPYING
sha256 84f8096dc7f70cdb6075ccf3722a44654361063eaf3e1ce7885c9875b8465a63 LICENSING

4
package/wolfssl/wolfssl.mk
View File

@@ -4,11 +4,11 @@
#
################################################################################
WOLFSSL_VERSION = 5.7.2
WOLFSSL_VERSION = 5.9.1
WOLFSSL_SITE = $(call github,wolfSSL,wolfssl,v$(WOLFSSL_VERSION)-stable)
WOLFSSL_INSTALL_STAGING = YES
WOLFSSL_LICENSE = GPL-2.0+
WOLFSSL_LICENSE = GPL-3.0+
WOLFSSL_LICENSE_FILES = COPYING LICENSING
WOLFSSL_CPE_ID_VENDOR = wolfssl
WOLFSSL_CONFIG_SCRIPTS = wolfssl-config