This bug was fixed in the package openssl - 3.5.0-2ubuntu1
---------------
openssl (3.5.0-2ubuntu1) questing; urgency=medium
* Merge with Debian unstable (LP: #2112457). Remaining changes:
- Use perl:native in the autopkgtest for installability on i386.
- Symlink copyright/changelog.Debian.gz in libssl3* to libssl-dev/openssl
- Disable LTO with which the codebase is generally incompatible (LP
#2058017)
- Default config reads crypto-config and /etc/ssl/openssl.cnf.d dropins
- Don't enable or package anything FIPS (LP #2087955)
- fips patches (debian/patches/fips):
- crypto: Add kernel FIPS mode detection
- crypto: Automatically use the FIPS provider...
- apps/speed: Omit unavailable algorithms in FIPS mode
- apps: pass -propquery arg to the libctx DRBG fetches
- test: Ensure encoding runs with the correct context...
- Add Ubuntu-specific defines to help FIPS certification (LP #2073991)
+ UBUNTU_OSSL_SELF_TEST_DESC_PCT_DH
+ UBUNTU_OSSL_PROV_FIPS_PARAM_UNAPPROVED_USAGE
* Patches refresh
- d/p/fips/crypto-Automatically-use-the-FIPS-provider-when-the-kerne.patch
- d/p/fips/two-defines-for-fips-in-libssl-dev-headers.patch
* Dropped patch, merged upstream (LP #2096810)
- s390x-Add-hardware-acceleration-for-full-AES-XTS.patch
* Drop all post-3.4.1 upstream patches
openssl (3.5.0-2) unstable; urgency=medium
* Fix P-384 curve on lower-than-P9 PPC64 targets Closes: #1106516).
* CVE-2025-4575 ("The x509 application adds trusted use instead of
rejected use") (Closes: #1106322).
openssl (3.5.0-1) unstable; urgency=medium
* Import 3.5.0
* Upload to unstable.
openssl (3.5.0~~beta1-1) experimental; urgency=medium
* Import 3.5.0-beta1.
openssl (3.5.0~~alpha1-1) experimental; urgency=medium
* Import 3.5.0-alpha1.
* Remove usr/share/doc/libssl3 (Closes: #1098515).
-- Ravi Kant Sharma <ravi.kant.sha...@canonical.com> Wed, 04 Jun 2025
12:46:00 +0200
** Changed in: openssl (Ubuntu)
Status: Fix Committed => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2025-4575
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/2112457
Title:
Please merge openssl 3.5.0-2 into questing
Status in openssl package in Ubuntu:
Fix Released
Bug description:
tracking bug
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2112457/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
