openssl 3.5.5 (https://github.com/openssl/openssl/releases/tag/openssl-3.5.5)

OpenSSL 3.5.5 is a security patch release. The most severe CVE fixed in this
release is High.

This release incorporates the following bug fixes and mitigations:

    Fixed Improper validation of PBMAC1 parameters in PKCS#12 MAC verification.
    (CVE-2025-11187)

    Fixed Stack buffer overflow in CMS AuthEnvelopedData parsing.
    (CVE-2025-15467)

    Fixed NULL dereference in SSL_CIPHER_find() function on unknown cipher ID.
    (CVE-2025-15468)

    Fixed openssl dgst one-shot codepath silently truncates inputs >16 MiB.
    (CVE-2025-15469)

    Fixed TLS 1.3 CompressedCertificate excessive memory allocation.
    (CVE-2025-66199)

    Fixed Heap out-of-bounds write in BIO_f_linebuffer on short writes.
    (CVE-2025-68160)

    Fixed Unauthenticated/unencrypted trailing bytes with low-level OCB
    function calls.
    (CVE-2025-69418)

    Fixed Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion.
    (CVE-2025-69419)

    Fixed Missing ASN1_TYPE validation in TS_RESP_verify_response()
    function.
    (CVE-2025-69420)

    Fixed NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex() function.
    (CVE-2025-69421)

    Fixed Missing ASN1_TYPE validation in PKCS#12 parsing.
    (CVE-2026-22795)

    Fixed ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes()
    function.
    (CVE-2026-22796)

Author: chcg

build_3rdparty.py

@@ -5,8 +5,8 @@
 DEPENDENT_LIBS = {
     'openssl': {
         'order' : 1,
-        'url'   : 'https://github.com/openssl/openssl/releases/download/openssl-3.5.4/openssl-3.5.4.tar.gz',
-        'sha256'  : '967311f84955316969bdb1d8d4b983718ef42338639c621ec4c34fddef355e99',
+        'url'   : 'https://github.com/openssl/openssl/releases/download/openssl-3.5.5/openssl-3.5.5.tar.gz',
+        'sha256'  : 'b28c91532a8b65a1f983b4c28b7488174e4a01008e29ce8e69bd789f28bc2a89',
         'target': {
             'mingw-w64': {
                 'result':   ['include/openssl/ssl.h', 'lib/libssl.a', 'lib/libcrypto.a'],

project.spdx.json

@@ -31,10 +31,10 @@
     {
       "SPDXID": "SPDXRef-Package-openssl",
       "name": "openssl",
-      "versionInfo": "3.5.4",
-      "packageVersion": "3.5.4",
+      "versionInfo": "3.5.5",
+      "packageVersion": "3.5.5",
       "primaryPackagePurpose": "LIBRARY",
-      "downloadLocation": "https://github.com/openssl/openssl/releases/download/openssl-3.5.4/openssl-3.5.4.tar.gz",
+      "downloadLocation": "https://github.com/openssl/openssl/releases/download/openssl-3.5.5/openssl-3.5.5.tar.gz",
       "filesAnalyzed": false,
       "packageFileName": "./libs/openssl",
       "homepage": "https://openssl-library.org/",