From d1c44f8cdf61bdce0567cd86f47d04ab0ac9df3f Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Tue, 14 Apr 2026 18:07:08 +0200 Subject: [PATCH] package/wolfssl: security bump version to 5.9.1 https://github.com/wolfSSL/wolfssl/blob/v5.9.1-stable/ChangeLog.md Restored patch 0001 to its original state. Updated license hashes due to upstream commits: "updating license from GPLv2 to GPLv3" https://github.com/wolfSSL/wolfssl/commit/629c5b4cf61ac717d40678b5cd65974b42077af6 "Add GPLv2 exception list to LICENSING" https://github.com/wolfSSL/wolfssl/commit/e02de78507778128d989febb54086f343307a47d with various follow-up commits: https://github.com/wolfSSL/wolfssl/commit/0d49df7735316cdcf9ddb5a145ea6269b11364b6 https://github.com/wolfSSL/wolfssl/commit/32d33f2a53d9a15b49694f12205dee8c0199db9d https://github.com/wolfSSL/wolfssl/commit/1e9d71af429218f1cd03ec9e21ca89470119462a https://github.com/wolfSSL/wolfssl/commit/18332faa054b58e4fe4673c041b2fbfd379247a7 Fixes the following CVEs: * [High] CVE-2026-5264 * [High] CVE-2026-5263 * [High] CVE-2026-5295 * [High] CVE-2026-5466 * [High] CVE-2026-5477 * [High] CVE-2026-5447 * [High] CVE-2026-5500 * [High] CVE-2026-5501 * [High] CVE-2026-5503 * [Low] CVE-2026-5187 * [Low] CVE-2026-5188 * [Low] CVE-2026-5448 * [Low] CVE-2026-5772 * [Low] CVE-2026-5778 * [High] CVE-2026-3548 * [High] CVE-2026-3549 * [High] CVE-2026-3547 * [Low] CVE-2026-0819 * [Low] CVE-2026-1005 * [Low] CVE-2026-2645 * [Low] CVE-2026-3230 * [Low] CVE-2025-12888 * [Med.] CVE-2025-11936 * [Low] CVE-2025-11935 * [Low] CVE-2025-11934 * [Low] CVE-2025-11933 * [Low] CVE-2025-11931 * [Low] CVE-2025-11932 * [Low] CVE-2025-12889 * [Low] CVE-2025-13912 * [High] CVE-2025-7395 * [Med.] CVE-2025-7394 * [Low] CVE-2025-7396 Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain (cherry picked from commit 99f8ed1212c8670404b2d6a2d0721914229be628) Signed-off-by: Thomas Perale --- ...E_LIMITS_H-in-options.h-rather-than-config.patch | 13 ++++++------- package/wolfssl/wolfssl.hash | 6 +++--- package/wolfssl/wolfssl.mk | 4 ++-- 3 files changed, 11 insertions(+), 12 deletions(-) diff --git a/package/wolfssl/0001-Define-HAVE_LIMITS_H-in-options.h-rather-than-config.patch b/package/wolfssl/0001-Define-HAVE_LIMITS_H-in-options.h-rather-than-config.patch index 67f9672c2a..0599f9d615 100644 --- a/package/wolfssl/0001-Define-HAVE_LIMITS_H-in-options.h-rather-than-config.patch +++ b/package/wolfssl/0001-Define-HAVE_LIMITS_H-in-options.h-rather-than-config.patch @@ -7,7 +7,6 @@ Subject: [PATCH] Define HAVE_LIMITS_H in options.h rather than config.h since Upstream: https://github.com/wolfSSL/wolfssl/pull/10097 -[Bernd: rebased for 5.7.2] Signed-off-by: Bernd Kuhls --- cmake/config.in | 3 --- @@ -33,7 +32,7 @@ diff --git a/cmake/options.h.in b/cmake/options.h.in index 985b54241d6..c46ada8045d 100644 --- a/cmake/options.h.in +++ b/cmake/options.h.in -@@ -31,6 +31,9 @@ extern "C" { +@@ -33,6 +33,9 @@ extern "C" { #endif #ifndef WOLFSSL_OPTIONS_IGNORE_SYS @@ -47,12 +46,12 @@ diff --git a/configure.ac b/configure.ac index bce600f2ecc..c5cf9f320c7 100644 --- a/configure.ac +++ b/configure.ac -@@ -116,7 +116,9 @@ - AM_CCASFLAGS="$AM_CCASFLAGS -DWOLFSSL_EXPERIMENTAL_SETTINGS" - fi +@@ -185,7 +185,9 @@ AC_ARG_ENABLE([freebsdkm-crypto-register], + [ENABLED_BSDKM_REGISTER=no] + ) --AC_CHECK_HEADERS([arpa/inet.h fcntl.h limits.h netdb.h netinet/in.h stddef.h time.h sys/ioctl.h sys/socket.h sys/time.h errno.h sys/un.h]) -+AC_CHECK_HEADERS([arpa/inet.h fcntl.h netdb.h netinet/in.h stddef.h time.h sys/ioctl.h sys/socket.h sys/time.h errno.h sys/un.h]) +-AC_CHECK_HEADERS([arpa/inet.h fcntl.h limits.h netdb.h netinet/in.h stddef.h time.h sys/ioctl.h sys/socket.h sys/time.h errno.h sys/un.h ctype.h sys/random.h]) ++AC_CHECK_HEADERS([arpa/inet.h fcntl.h netdb.h netinet/in.h stddef.h time.h sys/ioctl.h sys/socket.h sys/time.h errno.h sys/un.h ctype.h sys/random.h]) +# Special case: Since types.h depends on HAVE_LIMITS_H, we must define it in options.h. +AC_CHECK_HEADER([limits.h], [AM_CPPFLAGS="$AM_CPPFLAGS -DHAVE_LIMITS_H=1"], []) AC_CHECK_LIB([network],[socket]) diff --git a/package/wolfssl/wolfssl.hash b/package/wolfssl/wolfssl.hash index 9a1e8bfd4a..e1ecd5f98a 100644 --- a/package/wolfssl/wolfssl.hash +++ b/package/wolfssl/wolfssl.hash @@ -1,6 +1,6 @@ # Locally computed: -sha256 0f2ed82e345b833242705bbc4b08a2a2037a33f7bf9c610efae6464f6b10e305 wolfssl-5.7.2.tar.gz +sha256 d5ca7af48cd2d9a91d539e9baedeba55a0605a28d7ac8b01dc3d5254a13ca341 wolfssl-5.9.1.tar.gz # Hash for license files: -sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING -sha256 b23c1da1f85d699d3288d73c952b4cd02760d23dc1ddc1b221cbb8be82387189 LICENSING +sha256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903 COPYING +sha256 84f8096dc7f70cdb6075ccf3722a44654361063eaf3e1ce7885c9875b8465a63 LICENSING diff --git a/package/wolfssl/wolfssl.mk b/package/wolfssl/wolfssl.mk index 91ab7ca08a..44f51e06e6 100644 --- a/package/wolfssl/wolfssl.mk +++ b/package/wolfssl/wolfssl.mk @@ -4,11 +4,11 @@ # ################################################################################ -WOLFSSL_VERSION = 5.7.2 +WOLFSSL_VERSION = 5.9.1 WOLFSSL_SITE = $(call github,wolfSSL,wolfssl,v$(WOLFSSL_VERSION)-stable) WOLFSSL_INSTALL_STAGING = YES -WOLFSSL_LICENSE = GPL-2.0+ +WOLFSSL_LICENSE = GPL-3.0+ WOLFSSL_LICENSE_FILES = COPYING LICENSING WOLFSSL_CPE_ID_VENDOR = wolfssl WOLFSSL_CONFIG_SCRIPTS = wolfssl-config