Index: /branches/rel_ag_9_4_5/ssl/Makefile
===================================================================
--- /branches/rel_ag_9_4_5/ssl/Makefile	(revision 20543)
+++ /branches/rel_ag_9_4_5/ssl/Makefile	(working copy)
@@ -74,6 +74,7 @@
 	patch < CVE-2020-1971.patch -d ../${OPENSSL_PKG}/crypto && \
 	patch < CVE-2021-3712.patch -d ../${OPENSSL_PKG} && \
 	patch < CVE-2022-0778.patch -d ../${OPENSSL_PKG} && \
+	patch < CVE-2025-9230.patch -p1 -d ../${OPENSSL_PKG} && \
 	cd ..;
 	chmod +x copy_sm2_files.sh patch_openssl_sm2.sh
 	./copy_sm2_files.sh ${OPENSSL_PKG};
Index: /branches/rel_ag_9_4_5/ssl/patch/CVE-2025-9230.patch
===================================================================
--- /branches/rel_ag_9_4_5/ssl/patch/CVE-2025-9230.patch	(revision 0)
+++ /branches/rel_ag_9_4_5/ssl/patch/CVE-2025-9230.patch	(working copy)
@@ -0,0 +1,11 @@
+--- a/crypto/cms/cms_pwri.c	2025-12-02 12:07:20.000000000 +0800
++++ b/crypto/cms/cms_pwri.c	2025-12-02 13:54:06.000000000 +0800
+@@ -215,7 +215,7 @@
+         /* Check byte failure */
+         goto err;
+     }
+-    if (inlen < (size_t)(tmp[0] - 4)) {
++    if (inlen < 4 + (size_t)tmp[0]) {
+         /* Invalid length value */
+         goto err;
+     }