From 98d08c4a876d61367950f3f9ca6a137b5cf3e99a Mon Sep 17 00:00:00 2001
From: Russell Keith-Magee <russell@keith-magee.com>
Date: Mon, 4 May 2026 08:37:03 +0800
Subject: [PATCH 1/2] Bump OpenSSL to 3.5.6 for mobile platforms.

---
 Android/android.py                                              | 2 +-
 Apple/__main__.py                                               | 2 +-
 .../Security/2026-05-04-08-39-19.gh-issue-149329.mcu6PU.rst     | 1 +
 3 files changed, 3 insertions(+), 2 deletions(-)
 create mode 100644 Misc/NEWS.d/next/Security/2026-05-04-08-39-19.gh-issue-149329.mcu6PU.rst

diff --git a/Android/android.py b/Android/android.py
index ec4d28bbaad84d..1b5c1387c70ebd 100755
--- a/Android/android.py
+++ b/Android/android.py
@@ -216,7 +216,7 @@ def unpack_deps(host, prefix_dir, cache_dir):
     for name_ver in [
         "bzip2-1.0.8-3",
         "libffi-3.4.4-3",
-        "openssl-3.0.20-0",
+        "openssl-3.5.6-0",
         "sqlite-3.50.4-0",
         "xz-5.4.6-1",
         "zstd-1.5.7-2"
diff --git a/Apple/__main__.py b/Apple/__main__.py
index 555cf2b26b67ee..e6089008a3f7d0 100644
--- a/Apple/__main__.py
+++ b/Apple/__main__.py
@@ -319,7 +319,7 @@ def unpack_deps(
     for name_ver in [
         "BZip2-1.0.8-2",
         "libFFI-3.4.7-2",
-        "OpenSSL-3.0.20-1",
+        "OpenSSL-3.5.6-1",
         "XZ-5.6.4-2",
         "mpdecimal-4.0.0-2",
         "zstd-1.5.7-1",
diff --git a/Misc/NEWS.d/next/Security/2026-05-04-08-39-19.gh-issue-149329.mcu6PU.rst b/Misc/NEWS.d/next/Security/2026-05-04-08-39-19.gh-issue-149329.mcu6PU.rst
new file mode 100644
index 00000000000000..946654700a10c5
--- /dev/null
+++ b/Misc/NEWS.d/next/Security/2026-05-04-08-39-19.gh-issue-149329.mcu6PU.rst
@@ -0,0 +1 @@
+Updated bundled version of OpenSSL to 3.5.6.

From 64b5f08a3fe3d968d183b8ae3b8b8048d370ee6d Mon Sep 17 00:00:00 2001
From: Russell Keith-Magee <russell@keith-magee.com>
Date: Tue, 5 May 2026 07:21:02 +0800
Subject: [PATCH 2/2] Move changenote to Build.

---
 .../next/Build/2026-05-04-08-39-19.gh-issue-149329.mcu6PU.rst    | 1 +
 .../next/Security/2026-05-04-08-39-19.gh-issue-149329.mcu6PU.rst | 1 -
 2 files changed, 1 insertion(+), 1 deletion(-)
 create mode 100644 Misc/NEWS.d/next/Build/2026-05-04-08-39-19.gh-issue-149329.mcu6PU.rst
 delete mode 100644 Misc/NEWS.d/next/Security/2026-05-04-08-39-19.gh-issue-149329.mcu6PU.rst

diff --git a/Misc/NEWS.d/next/Build/2026-05-04-08-39-19.gh-issue-149329.mcu6PU.rst b/Misc/NEWS.d/next/Build/2026-05-04-08-39-19.gh-issue-149329.mcu6PU.rst
new file mode 100644
index 00000000000000..9a31d51c3fa83e
--- /dev/null
+++ b/Misc/NEWS.d/next/Build/2026-05-04-08-39-19.gh-issue-149329.mcu6PU.rst
@@ -0,0 +1 @@
+Updated bundled version of OpenSSL on iOS and Android to 3.5.6.
diff --git a/Misc/NEWS.d/next/Security/2026-05-04-08-39-19.gh-issue-149329.mcu6PU.rst b/Misc/NEWS.d/next/Security/2026-05-04-08-39-19.gh-issue-149329.mcu6PU.rst
deleted file mode 100644
index 946654700a10c5..00000000000000
--- a/Misc/NEWS.d/next/Security/2026-05-04-08-39-19.gh-issue-149329.mcu6PU.rst
+++ /dev/null
@@ -1 +0,0 @@
-Updated bundled version of OpenSSL to 3.5.6.