mirror of
https://github.com/openwrt/openwrt.git
synced 2026-10-14 19:38:37 +04:00
OpenSSL 3.0.18 is a security patch release. The most severe CVE fixed in this release is Moderate. This release incorporates the following bug fixes and mitigations: * Fix Out-of-bounds read & write in RFC 3211 KEK Unwrap. (CVE-2025-9230) * Fix Out-of-bounds read in HTTP client no_proxy handling. (CVE-2025-9232) The removed patch is included upstream: https://github.com/openssl/openssl/commit/c0d968f0ac56ad507ab0101e537e7d530e9f0448 Link: https://github.com/openwrt/openwrt/pull/20312 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>