Commit ba21ee3795 for openssl.org

commit ba21ee3795679846001e84e599bb9b286e3e6dd9
Author: Tomas Mraz <tomas@openssl.org>
Date:   Wed Mar 25 18:54:18 2026 +0100

    Configurations/10-main.conf: minimum NASM version needs to be 2.09 on Windows

    Otherwise some assembler code might be miscompiled.

    Fixes: https://github.com/openssl/openssl/issues/20529

    Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
    Reviewed-by: Paul Dale <paul.dale@oracle.com>
    MergeDate: Tue Mar 31 01:47:41 2026
    (Merged from https://github.com/openssl/openssl/pull/30576)

diff --git a/Configurations/10-main.conf b/Configurations/10-main.conf
index a038c3cb91..76cbf0ffa0 100644
--- a/Configurations/10-main.conf
+++ b/Configurations/10-main.conf
@@ -5,7 +5,8 @@
 my $vc_win64a_info = {};
 sub vc_win64a_info {
     unless (%$vc_win64a_info) {
-        if (`nasm -v 2>NUL` =~ /NASM version ([0-9]+\.[0-9]+)/ && $1 >= 2.0) {
+        # Minimum NASM version is 2.09 otherwise SHA3 might be miscompiled
+        if (`nasm -v 2>NUL` =~ /NASM version ([0-9]+)\.([0-9]+)/ && ($1 > 2 || ($1 == 2 && $2 >= 9))) {
             $vc_win64a_info = { AS        => "nasm",
                                 ASFLAGS   => "-g",
                                 asflags   => "-Ox -f win64 -DNEAR",