git: f25b8c9fb4f5 - main - openssl: import 3.5.5

From: Dima Panov <fluffy_at_FreeBSD.org>
Date: Mon, 06 Apr 2026 03:49:15 UTC
Hello!

latest openssl 3.5.x updates in base missed openssl/ml_kem.h include to install

Now we have consumers in portstree which use this include if detect openssl>=3.5

Check latest security/libssh:

FAILED: [code=1] src/CMakeFiles/ssh.dir/mlkem_crypto.c.o
/usr/local/libexec/ccache/cc -DLIBSSH_EXPORTS -I/wrkdirs/usr/ports/security/libssh/work/.build/src -I/wrkdirs/usr/ports/security/libssh/work/libssh-0.12.0/src -I/wrkdirs/usr/ports/security/libssh/work/l
/wrkdirs/usr/ports/security/libssh/work/libssh-0.12.0/src/mlkem_crypto.c:31:10: fatal error: 'openssl/ml_kem.h' file not found
31 | #include <openssl/ml_kem.h>
| ^~~~~~~~~~~~~~~~~~
1 error generated.

stable/15 is also affected

On 01.02.2026 01:10, Enji Cooper wrote:
> The branch main has been updated by ngie:
>
> URL: https://cgit.FreeBSD.org/src/commit/?id=f25b8c9fb4f58cf61adb47d7570abe7caa6d385d
>
> commit f25b8c9fb4f58cf61adb47d7570abe7caa6d385d
> Merge: fe81e3944c08 808413da28df
> Author: Enji Cooper <ngie@FreeBSD.org>
> AuthorDate: 2026-01-31 22:00:39 +0000
> Commit: Enji Cooper <ngie@FreeBSD.org>
> CommitDate: 2026-01-31 22:00:39 +0000
>
> openssl: import 3.5.5
>
> This change adds OpenSSL 3.5.5 from upstream [1].
>
> The 3.5.5 artifact was been verified via PGP key [2] and by SHA256 checksum [3].
>
> This is a security release, but also contains several bugfixes. All of
> the CVE-worthy issues have already been addressed on the target
> branch(es), so the net-result is that this is a bugfix release.
>
> More information about the release (from a high level) can be found in
> the release notes [4].
>
> MFC after: 1 week
>
> 1. https://github.com/openssl/openssl/releases/download/openssl-3.5.5/openssl-3.5.5.tar.gz
> 2. https://github.com/openssl/openssl/releases/download/openssl-3.5.5/openssl-3.5.5.tar.gz.asc
> 3. https://github.com/openssl/openssl/releases/download/openssl-3.5.5/openssl-3.5.5.tar.gz.sha256
> 4. https://github.com/openssl/openssl/blob/openssl-3.5.5/NEWS.md
>
> Merge commit '808413da28df9fb93e1f304e6016b15e660f54c8'
>
>

--
Sincerely,
Dima (fluffy@FreeBSD.org, https://t.me/FluffyBSD, @fluffy:matrix-dev.freebsd.org)
(desktop, kde, x11, office, ports-secteam)@FreeBSD team