• Bug#1109207: bookworm-pu: package openssl/3.0.17-1~deb12u1 (1/7)

    From Sebastian Andrzej Siewior@21:1/5 to All on Sun Jul 13 15:00:01 2025
    XPost: linux.debian.devel.release

    Package: release.debian.org
    Control: affects -1 + src:openssl
    X-Debbugs-Cc: [email protected]
    User: [email protected]
    Usertags: pu
    Tags: bookworm
    X-Debbugs-Cc: [email protected]
    Severity: normal

    This is a forthcoming update of OpenSSL for the 3.0 series which is in Bookworm. Upstream describes this release as "Miscellaneous minor bug
    fixes".

    The package has an extensive testsuite. The 3.5.1 release had just an
    unblock filled and was earlier in experimental and debci did not report
    any fallout. Since the 3.5.1 version is in unstable I can say that all
    fixes which are part of this package are also in unstable.

    Please find attached a debdiff against Bookworm.

    Sebastian

    diff -Nru -w openssl-3.0.16/apps/CA.pl.in openssl-3.0.17/apps/CA.pl.in
    --- openssl-3.0.16/apps/CA.pl.in 2025-02-11 15:47:41.000000000 +0100
    +++ openssl-3.0.17/apps/CA.pl.in 2025-07-01 14:11:11.000000000 +0200
    @@ -1,5 +1,5 @@
    #!{- $config{HASHBANGPERL} -}
    -# Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.
    +# Copyright 2000-2025 The OpenSSL Project Authors. All Rights Reserved.
    #
    # Licensed under the Apache License 2.0 (the "License"). You may not use
    # this file except in compliance with the License. You can obtain a copy
    @@ -19,14 +19,17 @@

    my $openssl = $ENV{'OPENSSL'} // "openssl";
    $ENV{'OPENSSL'} = $openssl;
    +my @openssl = split_val($openssl);
    +
    my $OPENSSL_CONFIG = $ENV{"OPENSSL_CONFIG"} // "";
    +my @OPENSSL_CONFIG = split_val($OPENSSL_CONFIG);

    # Command invocations.
    -my $REQ = "$openssl req $OPENSSL_CONFIG";
    -my $CA = "$openssl ca $OPENSSL_CONFIG";
    -my $VERIFY = "$openssl verify";
    -my $X509 = "$openssl x509";
    -my $PKCS12 = "$openssl pkcs12";
    +my @REQ = (@openssl, "req", @OPENSSL_CONFIG);
    +my @CA = (@openssl, "ca", @O
  • From Jonathan Wiltshire@21:1/5 to All on Mon Jul 28 10:20:02 2025
    XPost: linux.debian.devel.release

    package release.debian.org
    tags 1109207 = bookworm pending
    thanks

    Hi,

    The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm.

    Thanks for your contribution!

    Upload details
    ==============

    Package: openssl
    Version: 3.0.17-1~deb12u1

    Explanation: new upstream stable release

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)