[openwrt/openwrt] wolfssl: update to 5.8.4

LEDE Commits lede-commits at lists.infradead.org
Wed Nov 26 00:35:28 PST 2025


nick pushed a commit to openwrt/openwrt.git, branch main:
https://git.openwrt.org/b03c79f382f745b43746fd5cc2e2d28cd11ee1ef

commit b03c79f382f745b43746fd5cc2e2d28cd11ee1ef
Author: Nick Hainke <vincent at systemli.org>
AuthorDate: Mon Nov 24 21:06:16 2025 +0100

    wolfssl: update to 5.8.4
    
    Release Notes:
    https://www.wolfssl.com/wolfssl-5-8-4-now-available/
    
    Fixes CVEs:
    - CVE-2025-12889
    - CVE-2025-12888
    - CVE-2025-11936
    - CVE-2025-11935
    - CVE-2025-11934
    - CVE-2025-11933
    - CVE-2025-11932
    - CVE-2025-11931
    
    Link: https://github.com/openwrt/openwrt/pull/20922
    Signed-off-by: Nick Hainke <vincent at systemli.org>
---
 package/libs/wolfssl/Makefile                                  | 4 ++--
 package/libs/wolfssl/patches/100-disable-hardening-check.patch | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/libs/wolfssl/Makefile b/package/libs/wolfssl/Makefile
index 3a57123969..bde06a35c0 100644
--- a/package/libs/wolfssl/Makefile
+++ b/package/libs/wolfssl/Makefile
@@ -8,13 +8,13 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=wolfssl
-PKG_VERSION:=5.8.2
+PKG_VERSION:=5.8.4
 PKG_REAL_VERSION:=$(PKG_VERSION)-stable
 PKG_RELEASE:=1
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_REAL_VERSION).tar.gz
 PKG_SOURCE_URL:=https://github.com/wolfSSL/wolfssl/archive/v$(PKG_REAL_VERSION)
-PKG_HASH:=3ef126e3466e2f8f6ebb62b916a7f8fb26c6709dbdf2b63a167759f2fdb53068
+PKG_HASH:=2b702b7a66b0067bfd284408827b1e59288b357b0dd758d0089c062395f2a522
 
 PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_REAL_VERSION)
 
diff --git a/package/libs/wolfssl/patches/100-disable-hardening-check.patch b/package/libs/wolfssl/patches/100-disable-hardening-check.patch
index ced7645164..7f87b43d3d 100644
--- a/package/libs/wolfssl/patches/100-disable-hardening-check.patch
+++ b/package/libs/wolfssl/patches/100-disable-hardening-check.patch
@@ -1,6 +1,6 @@
 --- a/wolfssl/wolfcrypt/settings.h
 +++ b/wolfssl/wolfcrypt/settings.h
-@@ -3842,7 +3842,7 @@ extern void uITRON4_free(void *p) ;
+@@ -4048,7 +4048,7 @@ extern void uITRON4_free(void *p) ;
  
  /* warning for not using harden build options (default with ./configure) */
  /* do not warn if big integer support is disabled */




More information about the lede-commits mailing list