From 22fdd355b1f49bd5ca14a35de8f13a3949cd5c6a Mon Sep 17 00:00:00 2001
From: Russell Keith-Magee <russell@keith-magee.com>
Date: Sat, 2 May 2026 16:51:21 +0800
Subject: [PATCH] [3.13] gh-149254: Bump OpenSSL version for Android. (#149273)

Bump OpenSSL version to 3.0.20 for Android.
---
 Android/android.py                                       | 9 +++++++--
 .../2026-05-02-16-27-17.gh-issue-149254.ng1cPU.rst       | 1 +
 2 files changed, 8 insertions(+), 2 deletions(-)
 create mode 100644 Misc/NEWS.d/next/Security/2026-05-02-16-27-17.gh-issue-149254.ng1cPU.rst

diff --git a/Android/android.py b/Android/android.py
index ecd5b3f1893..235b42160b3 100755
--- a/Android/android.py
+++ b/Android/android.py
@@ -213,8 +213,13 @@ def make_build_python(context):
 def unpack_deps(host, prefix_dir, cache_dir):
     os.chdir(prefix_dir)
     deps_url = "https://github.com/beeware/cpython-android-source-deps/releases/download"
-    for name_ver in ["bzip2-1.0.8-3", "libffi-3.4.4-3", "openssl-3.0.19-1",
-                     "sqlite-3.50.4-0", "xz-5.4.6-1"]:
+    for name_ver in [
+        "bzip2-1.0.8-3",
+        "libffi-3.4.4-3",
+        "openssl-3.0.20-0",
+        "sqlite-3.50.4-0",
+        "xz-5.4.6-1"
+    ]:
         filename = f"{name_ver}-{host}.tar.gz"
         out_path = download(f"{deps_url}/{name_ver}/{filename}", cache_dir)
         shutil.unpack_archive(out_path)
diff --git a/Misc/NEWS.d/next/Security/2026-05-02-16-27-17.gh-issue-149254.ng1cPU.rst b/Misc/NEWS.d/next/Security/2026-05-02-16-27-17.gh-issue-149254.ng1cPU.rst
new file mode 100644
index 00000000000..410ababf501
--- /dev/null
+++ b/Misc/NEWS.d/next/Security/2026-05-02-16-27-17.gh-issue-149254.ng1cPU.rst
@@ -0,0 +1 @@
+Bumps the OpenSSL version to 3.0.20 on Android.