From: Daniel Golle <redacted>
Date: Thu, 20 Aug 2026 13:31:46 +0000 (+0100)
Subject: libp11: update to 0.4.20
X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=952f8de4b51c6612a352bbf326da75692daf054a;p=openwrt-packages.git

libp11: update to 0.4.20

0.4.19:
- added native KEYMGMT, SIGNATURE and ASYM_CIPHER operations to the
  PKCS#11 provider, enabling OpenSSL 4.x support and improving RSA
  interoperability
- added support for ML-DSA, SLH-DSA and FALCON key generation, signing
  and verification; PQC key generation examples and provider tests
- added PKCS#11 provider support for ECDH, X25519 and X448 key exchange,
  including X25519/X448 key generation
- improved Ed25519/Ed448 public-key resolution with certificate fallback
- fixed use-after-free crashes after enumerating additional PKCS#11 keys
- fixed a potential out-of-bounds write while parsing PKCS#11 URI
  attributes
- fixed PKCS#11 session, attribute and key-reference leaks

0.4.20:
- added PKCS#11 3.2 interface discovery and updated the bundled header
  to version 3.2
- added PKCS#11 provider support for ML-KEM-512/768/1024 key generation,
  encapsulation and decapsulation
- added PKCS11_evp_pkey_decapsulate() API
- added provider signature AlgorithmIdentifier support, including
  RSA-PSS parameters and correct default salt length handling
- fixed RSA-PSS salt length parsing and spurious OpenSSL errors
- fixed session-pool races and deadlocks during concurrent key
  generation and cryptographic operations
- fixed key-cache and OpenSSL 1.x RSA object use-after-free bugs
- fixed provider EC parameter lifetime handling and resource leaks
  during EC, RSA, EdDSA and XDH operations and context cleanup
- fixed installation of p11_ver.h, required by p11_err.h

Signed-off-by: Daniel Golle <redacted>
---

diff --git a/libs/libp11/Makefile b/libs/libp11/Makefile
index a9db65a73..03838f824 100644
--- a/libs/libp11/Makefile
+++ b/libs/libp11/Makefile
@@ -8,12 +8,12 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=libp11
-PKG_VERSION:=0.4.18
+PKG_VERSION:=0.4.20
 PKG_RELEASE:=1
 
 PKG_SOURCE_URL:=https://github.com/OpenSC/libp11/releases/download/$(PKG_NAME)-$(PKG_VERSION)/
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
-PKG_HASH:=9292de67ca73aba1deacf577c9086b595765f36ef47712cfeb49fa31f6e772fb
+PKG_HASH:=a125e0310ff10c189fc1b32a9652101486ea94a6b07c677a30e90e3638d2db48
 
 PKG_MAINTAINER:=Daniel Golle <daniel@makrotopia.org>
 PKG_LICENSE:=LGPL-2.1-or-later