From nobody Mon Apr 6 03:49:15 2026 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4fpwLP5CNSz6YYgc; Mon, 06 Apr 2026 03:49:17 +0000 (UTC) (envelope-from fluffy@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R13" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4fpwLP4YL7z3jR0; Mon, 06 Apr 2026 03:49:17 +0000 (UTC) (envelope-from fluffy@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1775447357; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=cmI/c5C5LoKWhGvuN4O1CrUXj6ujezNtPwgGpEgRGAY=; b=u5x6Wiyub9ufacS+Zg9Xcb09Vbx948qwvMh/tZBG6D4n01x0aNKboBBYUWGveFF3WAD38P cymv5N1tR/1QmClSAjpSgMxLDhN+u9+w8q4b1Ah59i1zKPlHs3L+bgtSOpp+bV7LKN4qmI gYMbFMOhiEebFq+xDOX7XZM1N1sxTHaATJveTOIUOfS58asgo9nS1pkFgfy1L5RyAIrnUD AQYpWuIFqzEndGkc/z/aJShnsj19RnuwnMWXG/xr7b+XSj4JxAoXJKrXrIF23GhB3ba7Np 4YxrTa1OYhoGuhw50H7EiuZ2yFhrx6O9iQzPRI2C8OWM49GglAVkowt8bU7ShQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1775447357; a=rsa-sha256; cv=none; b=jQn0wDqDJcfmDiKENYY79okAtqskSIlSVT55Pyw+gLPuNq98ZZmGm9bQ1iIpICT6kITFyy YO6a645hFrdxu7gp5T97nIPSf/qFEYVrCDwsPs6I3ciIhKKtfxnIvzg+KA8L/ErooI3vT8 llYQGfMCA32vMi50mue4UE8ekJdpN9fqWCpcx/w8PXYTJm402YoFSo34RFN7pCodHra9uT XZ+GzeWavW5bb1aJgYkXy3fZAkRkTFpMz1tHSveSfDiXEPxxTfArhKKPqffvHphNF8R/pT Bpa9olT/NDy8PsvGxSLGxT9e1oQD/yzYag3/zz9MaA00E6ZuXY0QDvkqM9XfjA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1775447357; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=cmI/c5C5LoKWhGvuN4O1CrUXj6ujezNtPwgGpEgRGAY=; b=HJHbEVsfCHGSrfQxgrOphoE+VnioKpV7tOJSRo87IFFVPvoqDS+IQbZhqkFGqXPrwIH0Dg MdMclvzhDsnWa9HT+Q+2/1hjoVeeFI1bUAxbEhliHyQgyKkjFrJJnZ7H4f1OOSId9L6zjN JUDfbzIbyUVzZrYbc11rLGGboT43SK89P35G0d/pypNMC1cPSir7ip5tLEWx3FwljlasQC YJF/JjVKIWgmn8YcdJWY13pLK71EoIAprcfO1dVRn7kUHrY9f4pEM6DyCZ/k6Pb20hzkTJ +gyvmfZinLFQqZ929Pvb1KOQDVefgbc7KTZQhtmFNkOg94jEL/uaR+YPxitpYg== Received: from [2a05:3580:e727:cd00::10:0] (unknown [IPv6:2a05:3580:e727:cd00:f12f:a04f:e6c3:f02f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) (Authenticated sender: fluffy) by smtp.freebsd.org (Postfix) with ESMTPSA id 4fpwLN6QL0ztmY; Mon, 06 Apr 2026 03:49:16 +0000 (UTC) (envelope-from fluffy@FreeBSD.org) Date: Mon, 6 Apr 2026 06:49:15 +0300 From: Dima Panov To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org, Enji Cooper Message-ID: In-Reply-To: <697e7de2.42768.a2d8647@gitrepo.freebsd.org> References: <697e7de2.42768.a2d8647@gitrepo.freebsd.org> Subject: git: f25b8c9fb4f5 - main - openssl: import 3.5.5 List-Id: Commit messages for the main branch of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-main@freebsd.org Sender: owner-dev-commits-src-main@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="69d32d3b_6b8b4567_cca2" --69d32d3b_6b8b4567_cca2 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Content-Disposition: inline Hello! latest openssl 3.5.x updates in base missed openssl/ml_kem.h include to install Now we have consumers in portstree which use this include if detect openssl>=3.5 Check latest security/libssh: FAILED: [code=1] src/CMakeFiles/ssh.dir/mlkem_crypto.c.o /usr/local/libexec/ccache/cc -DLIBSSH_EXPORTS -I/wrkdirs/usr/ports/security/libssh/work/.build/src -I/wrkdirs/usr/ports/security/libssh/work/libssh-0.12.0/src -I/wrkdirs/usr/ports/security/libssh/work/l /wrkdirs/usr/ports/security/libssh/work/libssh-0.12.0/src/mlkem_crypto.c:31:10: fatal error: 'openssl/ml_kem.h' file not found 31 | #include | ^~~~~~~~~~~~~~~~~~ 1 error generated. stable/15 is also affected On 01.02.2026 01:10, Enji Cooper wrote: > The branch main has been updated by ngie: > > URL: https://cgit.FreeBSD.org/src/commit/?id=f25b8c9fb4f58cf61adb47d7570abe7caa6d385d > > commit f25b8c9fb4f58cf61adb47d7570abe7caa6d385d > Merge: fe81e3944c08 808413da28df > Author: Enji Cooper > AuthorDate: 2026-01-31 22:00:39 +0000 > Commit: Enji Cooper > CommitDate: 2026-01-31 22:00:39 +0000 > > openssl: import 3.5.5 > > This change adds OpenSSL 3.5.5 from upstream [1]. > > The 3.5.5 artifact was been verified via PGP key [2] and by SHA256 checksum [3]. > > This is a security release, but also contains several bugfixes. All of > the CVE-worthy issues have already been addressed on the target > branch(es), so the net-result is that this is a bugfix release. > > More information about the release (from a high level) can be found in > the release notes [4]. > > MFC after: 1 week > > 1. https://github.com/openssl/openssl/releases/download/openssl-3.5.5/openssl-3.5.5.tar.gz > 2. https://github.com/openssl/openssl/releases/download/openssl-3.5.5/openssl-3.5.5.tar.gz.asc > 3. https://github.com/openssl/openssl/releases/download/openssl-3.5.5/openssl-3.5.5.tar.gz.sha256 > 4. https://github.com/openssl/openssl/blob/openssl-3.5.5/NEWS.md > > Merge commit '808413da28df9fb93e1f304e6016b15e660f54c8' > > -- Sincerely, Dima (fluffy@FreeBSD.org, https://t.me/FluffyBSD, @fluffy:matrix-dev.freebsd.org) (desktop, kde, x11, office, ports-secteam)@FreeBSD team --69d32d3b_6b8b4567_cca2 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline
Hello=21

latest openssl 3.5.x updates in base missed= openssl/ml=5Fkem.h include to install

Now we have consumers in = portstree which use this include if detect openssl>=3D3.5

Che= ck latest security/libssh:

=46AILED: =5Bcode=3D1=5D src/CMake=46= iles/ssh.dir/mlkem=5Fcrypto.c.o
/usr/local/libexec/ccache/cc -DLIBSSH= =5FEXPORTS -I/wrkdirs/usr/ports/security/libssh/work/.build/src -I/wrkdir= s/usr/ports/security/libssh/work/libssh-0.12.0/src -I/wrkdirs/usr/ports/s= ecurity/libssh/work/l
/wrkdirs/usr/ports/security/libssh/work/libssh-= 0.12.0/src/mlkem=5Fcrypto.c:31:10: fatal error: 'openssl/ml=5Fkem.h' file= not found
31 =7C =23include <openssl/ml=5Fkem.h>
=7C =5E= =7E=7E=7E=7E=7E=7E=7E=7E=7E=7E=7E=7E=7E=7E=7E=7E=7E
1 error generated= .


stable/15 is also affected


On 01.02.2026 01= :10, Enji Cooper wrote:
The branch main= has been updated by ngie:

URL: https://cgit.=46reeBSD.org/src/c= ommit/=3Fid=3Df25b8c9fb4f58cf61adb47d7570abe7caa6d385d

commit f2= 5b8c9fb4f58cf61adb47d7570abe7caa6d385d
Merge: fe81e3944c08 808413da28= df
Author: Enji Cooper <ngie=40=46reeBSD.org>
AuthorDate: 2= 026-01-31 22:00:39 +0000
Commit: Enji Cooper <ngie=40=46reeBSD.org= >
CommitDate: 2026-01-31 22:00:39 +0000

openssl: import 3= .5.5

This change adds OpenSSL 3.5.5 from upstream =5B1=5D.
=
The 3.5.5 artifact was been verified via PGP key =5B2=5D and by SHA25= 6 checksum =5B3=5D.

This is a security release, but also contain= s several bugfixes. All of
the CVE-worthy issues have already been ad= dressed on the target
branch(es), so the net-result is that this is a= bugfix release.

More information about the release (from a high= level) can be found in
the release notes =5B4=5D.

M=46C aft= er: 1 week

1. https://github.com/openssl/openssl/releases/downlo= ad/openssl-3.5.5/openssl-3.5.5.tar.gz
2. https://github.com/openssl/o= penssl/releases/download/openssl-3.5.5/openssl-3.5.5.tar.gz.asc
3. ht= tps://github.com/openssl/openssl/releases/download/openssl-3.5.5/openssl-= 3.5.5.tar.gz.sha256
4. https://github.com/openssl/openssl/blob/openss= l-3.5.5/NEWS.md

Merge commit '808413da28df9fb93e1f304e6016b15e66= 0f54c8'



--
Sincerely,
Dima (fluff= y=40=46reeBSD.org, https://t.me/=46luffyBSD, =40fluffy:matrix-dev.freebsd= .org)
(desktop, kde, x11, office, ports-secteam)=40=46reeBSD team
--69d32d3b_6b8b4567_cca2--