diff -Nru openssl-3.0.7/debian/changelog openssl-3.0.7/debian/changelog --- openssl-3.0.7/debian/changelog 2022-12-13 16:47:17.000000000 +0100 +++ openssl-3.0.7/debian/changelog 2022-12-06 15:11:40.000000000 +0100 @@ -1,3 +1,34 @@ +openssl (3.0.7-2ubuntu1~ppa1) lunar; urgency=medium + + * Merge 3.0.7 from Debian unstable (LP: #1998942) + - Drop patches merged upstream: + + CVE-2022-3358.patch + + CVE-2022-3602-1.patch + + CVE-2022-3602-2.patch + - Shrink patch since upstream fixed some tests in the patch above: + + tests-use-seclevel-1.patch + - Drop patch since -DOPENSSL_TLS_SECURITY_LEVEL=2 is now hard-coded: + + Set-systemwide-default-settings-for-libssl-users.patch + - Drop Debian patch not needed anymore: + + TEST-Provide-a-default-openssl.cnf-for-tests.patch + - Mention Debian as defaulting to SECLEVEL=2 in addition to Ubuntu: + + tls1.2-min-seclevel2.patch + - Remaining changes: + + Symlink changelog{,.Debian}.gz and copyright.gz from libssl-dev to + openssl + + d/libssl3.postinst: Revert Debian deletion + - Skip services restart & reboot notification if needrestart is in-use. + - Bump version check to 1.1.1 (bug opened as LP #1999139) + - Use a different priority for libssl1.1/restart-services depending + on whether a desktop, or server dist-upgrade is being performed. + - Import libraries/restart-without-asking template as used by above. + + Add support for building with noudeb build profile. + + Use perl:native in the autopkgtest for installability on i386. + * Correct comment as to which TLS version is disabled with our seclevel: + - skip_tls1.1_seclevel3_tests.patch + + -- Adrien Nader Tue, 06 Dec 2022 15:11:40 +0100 + openssl (3.0.7-2) UNRELEASED; urgency=medium * CVE-2022-3996 (X.509 Policy Constraints Double Locking). @@ -30,6 +61,53 @@ -- Sebastian Andrzej Siewior Sun, 18 Sep 2022 21:48:05 +0200 +openssl (3.0.5-2ubuntu2) kinetic-security; urgency=medium + + * SECURITY UPDATE: X.509 Email Address Buffer Overflow + - debian/patches/CVE-2022-3602-1.patch: fix off by one in punycode + decoder in crypto/punycode.c, test/build.info, test/punycode_test.c, + test/recipes/04-test_punycode.t. + - debian/patches/CVE-2022-3602-2.patch: ensure the result is zero + terminated in crypto/punycode.c. + - CVE-2022-3602 + * SECURITY UPDATE: legacy custom cipher issue + - debian/patches/CVE-2022-3358.patch: fix usage of custom EVP_CIPHER + objects in crypto/evp/digest.c, crypto/evp/evp_enc.c. + - CVE-2022-3358 + + -- Marc Deslauriers Thu, 27 Oct 2022 13:05:01 -0400 + +openssl (3.0.5-2ubuntu1) kinetic; urgency=low + + * Merge from Debian unstable (LP: #1987047). Remaining changes: + - Replace duplicate files in the doc directory with symlinks. + - d/libssl3.postinst: Revert Debian deletion + + Skip services restart & reboot notification if needrestart is in-use. + + Bump version check to to 1.1.1. + + Use a different priority for libssl1.1/restart-services depending + on whether a desktop, or server dist-upgrade is being performed. + + Import libraries/restart-without-asking template as used by above. + - Add support for building with noudeb build profile. + - Revert "Enable system default config to enforce TLS1.2 as a + minimum" & "Increase default security level from 1 to 2". + - Set OPENSSL_TLS_SECURITY_LEVEL=2 as compiled-in minimum security + level. Change meaning of SECURITY_LEVEL=2 to prohibit TLS versions + below 1.2 and update documentation. Previous default of 1, can be set + by calling SSL_CTX_set_security_level(), SSL_set_security_level() or + using ':@SECLEVEL=1' CipherString value in openssl.cfg. + - Use perl:native in the autopkgtest for installability on i386. + - d/p/skip_tls1.1_seclevel3_tests.patch: new Ubuntu-specific patch for the + testsuite + - d/p/Set-systemwide-default-settings-for-libssl-users: partially apply it + on Ubuntu to make it easier for user to change security level + * Dropped changes, merged upstream: + - d/p/fix-avx512-overflow.patch: Cherry-picked from upstream to fix a 3.0.4 + regression on AVX-512 capable CPUs. + * Revert the provider removal from the default configuration, following + discussions on LP: #1979639 + + -- Simon Chopin Fri, 19 Aug 2022 10:05:04 +0200 + openssl (3.0.5-2) unstable; urgency=medium * Update to commit ce3951fc30c7b ("VC++ 2008 or earlier x86 compilers…") @@ -54,6 +132,39 @@ -- Sebastian Andrzej Siewior Fri, 24 Jun 2022 19:27:02 +0200 +openssl (3.0.4-1ubuntu1) kinetic; urgency=medium + + * Merge from Debian unstable (LP: #1979639). Remaining changes: + - Replace duplicate files in the doc directory with symlinks. + - d/libssl3.postinst: Revert Debian deletion + + Skip services restart & reboot notification if needrestart is in-use. + + Bump version check to to 1.1.1. + + Use a different priority for libssl1.1/restart-services depending + on whether a desktop, or server dist-upgrade is being performed. + + Import libraries/restart-without-asking template as used by above. + - Add support for building with noudeb build profile. + - Revert "Enable system default config to enforce TLS1.2 as a + minimum" & "Increase default security level from 1 to 2". + - Set OPENSSL_TLS_SECURITY_LEVEL=2 as compiled-in minimum security + level. Change meaning of SECURITY_LEVEL=2 to prohibit TLS versions + below 1.2 and update documentation. Previous default of 1, can be set + by calling SSL_CTX_set_security_level(), SSL_set_security_level() or + using ':@SECLEVEL=1' CipherString value in openssl.cfg. + - Use perl:native in the autopkgtest for installability on i386. + - d/p/skip_tls1.1_seclevel3_tests.patch: new Ubuntu-specific patch for the + testsuite + - d/p/Set-systemwide-default-settings-for-libssl-users: partially apply it + on Ubuntu to make it easier for user to change security level + * Dropped changes, merged upstream: + - Add some more string comparison fixes + - d/p/lp1947588.patch: Cherry-picked as our patches make it very easy to + trigger the underlying bug + - d/p/lp1978093/*: renew some expiring test certificates + * d/p/fix-avx512-overflow.patch: Cherry-picked from upstream to fix a 3.0.4 + regression on AVX-512 capable CPUs. + + -- Simon Chopin Thu, 23 Jun 2022 12:43:23 +0200 + openssl (3.0.4-1) unstable; urgency=medium * Import 3.0.4 @@ -81,6 +192,49 @@ -- Sebastian Andrzej Siewior Sat, 04 Jun 2022 15:25:53 +0200 +openssl (3.0.3-5ubuntu3) kinetic; urgency=medium + + * d/p/lp1978093/*: renew some expiring test certificates (LP: #1978093) + + -- Simon Chopin Thu, 09 Jun 2022 13:20:55 +0200 + +openssl (3.0.3-5ubuntu2) kinetic; urgency=medium + + * d/p/Set-systemwide-default-settings-for-libssl-users: don't comment out + the CipherString string to avoid an empty section. + + -- Simon Chopin Tue, 31 May 2022 13:02:15 +0200 + +openssl (3.0.3-5ubuntu1) kinetic; urgency=medium + + * Merge with Debian unstable (LP: #1974035): + Remaining change: + - Replace duplicate files in the doc directory with symlinks. + - d/libssl3.postinst: Revert Debian deletion + + Skip services restart & reboot notification if needrestart is in-use. + + Bump version check to to 1.1.1. + + Use a different priority for libssl1.1/restart-services depending + on whether a desktop, or server dist-upgrade is being performed. + + Import libraries/restart-without-asking template as used by above. + - Add support for building with noudeb build profile. + - Revert "Enable system default config to enforce TLS1.2 as a + minimum" & "Increase default security level from 1 to 2". + - Set OPENSSL_TLS_SECURITY_LEVEL=2 as compiled-in minimum security + level. Change meaning of SECURITY_LEVEL=2 to prohibit TLS versions + below 1.2 and update documentation. Previous default of 1, can be set + by calling SSL_CTX_set_security_level(), SSL_set_security_level() or + using ':@SECLEVEL=1' CipherString value in openssl.cfg. + - Use perl:native in the autopkgtest for installability on i386. + - d/p/skip_tls1.1_seclevel3_tests.patch: new Ubuntu-specific patch for the + testsuite + * Add some more string comparison fixes (LP: #1974037) + * d/p/Set-systemwide-default-settings-for-libssl-users: partially apply it on + Ubuntu to make it easier for user to change security level (LP: #1972056) + * d/p/lp1947588.patch: Cherry-picked as our patches make it very easy to + trigger the underlying bug (LP: #1947588) + + -- Simon Chopin Tue, 31 May 2022 09:49:54 +0200 + openssl (3.0.3-5) unstable; urgency=medium * Don't generate endbr32 opcodes on i386. Thanks to Wolfgang Walter @@ -130,6 +284,14 @@ -- Sebastian Andrzej Siewior Fri, 06 May 2022 22:21:52 +0200 +openssl (3.0.3-0ubuntu1) kinetic; urgency=medium + + * New upstream release (LP: #1968997): + - d/p/CVE-2022-*: dropped, present upstream + - d/p/c_rehash-compat.patch: refreshed + + -- Simon Chopin Thu, 05 May 2022 10:56:04 +0200 + openssl (3.0.2-1) experimental; urgency=medium * Import 3.0.2 @@ -138,6 +300,40 @@ -- Sebastian Andrzej Siewior Tue, 15 Mar 2022 20:54:57 +0100 +openssl (3.0.2-0ubuntu2) kinetic; urgency=medium + + * SECURITY UPDATE: c_rehash script allows command injection + - debian/patches/CVE-2022-1292.patch: do not use shell to invoke + openssl in tools/c_rehash.in. + - CVE-2022-1292 + * SECURITY UPDATE: OCSP_basic_verify may incorrectly verify the response + signing certificate + - debian/patches/CVE-2022-1343-1.patch: fix OCSP_basic_verify signer + certificate validation in crypto/ocsp/ocsp_vfy.c. + - debian/patches/CVE-2022-1343-2.patch: test ocsp with invalid + responses in test/recipes/80-test_ocsp.t. + - CVE-2022-1343 + * SECURITY UPDATE: incorrect MAC key used in the RC4-MD5 ciphersuite + - debian/patches/CVE-2022-1434.patch: fix the RC4-MD5 cipher in + providers/implementations/ciphers/cipher_rc4_hmac_md5.c, + test/recipes/30-test_evp_data/evpciph_aes_stitched.txt, + test/recipes/30-test_evp_data/evpciph_rc4_stitched.txt. + - CVE-2022-1434 + * SECURITY UPDATE: resource leakage when decoding certificates and keys + - debian/patches/CVE-2022-1473.patch: fix bug in OPENSSL_LH_flush in + crypto/lhash/lhash.c. + - CVE-2022-1473 + + -- Marc Deslauriers Tue, 03 May 2022 12:01:34 -0400 + +openssl (3.0.2-0ubuntu1) jammy; urgency=medium + + * New upstream bugfix release (LP: #1965141) + * d/p/skip_tls1.1_seclevel3_tests.patch: new Ubuntu-specific patch for the + testsuite + + -- Simon Chopin Wed, 16 Mar 2022 09:35:51 +0100 + openssl (3.0.1-1) experimental; urgency=medium * Import 3.0.1 @@ -149,6 +345,60 @@ -- Sebastian Andrzej Siewior Mon, 27 Dec 2021 11:44:50 +0100 +openssl (3.0.1-0ubuntu1) jammy; urgency=medium + + * New upstream release (LP: #1955026). + + Dropped patches, merged upstream: + - d/p/double-engine-load* + - d/p/Add-null-digest-implementation-to-the-default-provid.patch + - d/p/Don-t-create-an-ECX-key-with-short-keys.patch + + Refreshed patches: + - d/p/c_rehash-compat.patch + + -- Simon Chopin Thu, 16 Dec 2021 09:10:48 +0100 + +openssl (3.0.0-1ubuntu2) jammy; urgency=medium + + * Cherry-pick upstream fixes to prevent double engine loading (LP: #1951943) + + -- Julian Andres Klode Tue, 07 Dec 2021 17:15:51 +0100 + +openssl (3.0.0-1ubuntu1) jammy; urgency=medium + + * Manual merge of version 3.0.0-1 from Debian experimental, remaining + changes: + - Replace duplicate files in the doc directory with symlinks. + - debian/libssl1.1.postinst: + + Display a system restart required notification on libssl1.1 + upgrade on servers, unless needrestart is available. + + Use a different priority for libssl1.1/restart-services depending + on whether a desktop, or server dist-upgrade is being performed. + + Skip services restart & reboot notification if needrestart is in-use. + + Bump version check to to 1.1.1. + + Import libraries/restart-without-asking template as used by above. + - Revert "Enable system default config to enforce TLS1.2 as a + minimum" & "Increase default security level from 1 to 2". + - Reword the NEWS entry, as applicable on Ubuntu. + - Set OPENSSL_TLS_SECURITY_LEVEL=2 as compiled-in minimum security + level. Change meaning of SECURITY_LEVEL=2 to prohibit TLS versions + below 1.2 and update documentation. Previous default of 1, can be set + by calling SSL_CTX_set_security_level(), SSL_set_security_level() or + using ':@SECLEVEL=1' CipherString value in openssl.cfg. + - Add support for building with noudeb build profile. + * d/p/Don-t-create-an-ECX-key-with-short-keys.patch: + Backported from upstream to fix a regression with short keys (LP: #1946213) + * d/p/Add-null-digest-implementation-to-the-default-provid.patch: + Backported from upstream to fix a compatibility issue with 1.1.1l + * Manually call dh_installdirs to fix build failure + * Drop some Ubuntu patches merged upstream + + The s390x series (00xx) has been applied upstream + + The lp-1927161 Intel CET series has been applied upstream + + CVE-2021-3449 has been fixed upstream + + CVE-2021-3450 doesn't apply to 3.0 branch + * Refresh and adapt the remaining patches + + -- Simon Chopin Mon, 20 Sep 2021 18:09:50 +0200 + openssl (3.0.0-1) experimental; urgency=medium * Import 3.0.0. @@ -223,6 +473,152 @@ -- Sebastian Andrzej Siewior Sat, 25 Apr 2020 23:08:44 +0200 +openssl (1.1.1j-1ubuntu4) impish; urgency=medium + + * Split d/p/pr12272.patch into multiple patchfiles to fix dpkg-source + error when attempting to build a source package, due to pr12272.patch + patching files multiple times within the same patch. (LP: #1927161) + - d/p/lp-1927161-1-x86-Add-endbranch-to-indirect-branch-targets-fo.patch + - d/p/lp-1927161-2-Use-swapcontext-for-Intel-CET.patch + - d/p/lp-1927161-3-x86-Always-generate-note-gnu-property-section-f.patch + - d/p/lp-1927161-4-x86_64-Always-generate-note-gnu-property-sectio.patch + - d/p/lp-1927161-5-x86_64-Add-endbranch-at-function-entries-for-In.patch + + -- Matthew Ruffell Wed, 05 May 2021 11:49:27 +1200 + +openssl (1.1.1j-1ubuntu3) hirsute; urgency=medium + + * SECURITY UPDATE: NULL pointer deref in signature_algorithms processing + - debian/patches/CVE-2021-3449-1.patch: fix NULL pointer dereference in + ssl/statem/extensions.c. + - debian/patches/CVE-2021-3449-2.patch: teach TLSProxy how to encrypt + <= TLSv1.2 ETM records in util/perl/TLSProxy/Message.pm. + - debian/patches/CVE-2021-3449-3.patch: add a test to + test/recipes/70-test_renegotiation.t. + - debian/patches/CVE-2021-3449-4.patch: ensure buffer/length pairs are + always in sync in ssl/s3_lib.c, ssl/ssl_lib.c, + ssl/statem/extensions.c, ssl/statem/extensions_clnt.c, + ssl/statem/statem_clnt.c, ssl/statem/statem_srvr.c. + - CVE-2021-3449 + * SECURITY UPDATE: CA cert check bypass with X509_V_FLAG_X509_STRICT + - debian/patches/CVE-2021-3450-1.patch: do not override error return + value by check_curve in crypto/x509/x509_vfy.c, + test/verify_extra_test.c. + - debian/patches/CVE-2021-3450-2.patch: fix return code check in + crypto/x509/x509_vfy.c. + - CVE-2021-3450 + + -- Marc Deslauriers Thu, 25 Mar 2021 11:44:30 -0400 + +openssl (1.1.1j-1ubuntu2) hirsute; urgency=medium + + * No-change upload to pick up lto. + + -- Matthias Klose Tue, 23 Mar 2021 15:24:20 +0100 + +openssl (1.1.1j-1ubuntu1) hirsute; urgency=medium + + * Merge from Debian unstable. Remaining changes: + - Replace duplicate files in the doc directory with symlinks. + - debian/libssl1.1.postinst: + + Display a system restart required notification on libssl1.1 + upgrade on servers, unless needrestart is available. + + Use a different priority for libssl1.1/restart-services depending + on whether a desktop, or server dist-upgrade is being performed. + + Skip services restart & reboot notification if needrestart is in-use. + + Bump version check to to 1.1.1. + + Import libraries/restart-without-asking template as used by above. + - Revert "Enable system default config to enforce TLS1.2 as a + minimum" & "Increase default security level from 1 to 2". + - Reword the NEWS entry, as applicable on Ubuntu. + - Cherrypick s390x SIMD acceleration patches for poly1305 and chacha20 + and ECC from master. + - Use perl:native in the autopkgtest for installability on i386. + - Set OPENSSL_TLS_SECURITY_LEVEL=2 as compiled-in minimum security + level. Change meaning of SECURITY_LEVEL=2 to prohibit TLS versions + below 1.2 and update documentation. Previous default of 1, can be set + by calling SSL_CTX_set_security_level(), SSL_set_security_level() or + using ':@SECLEVEL=1' CipherString value in openssl.cfg. + - Import https://github.com/openssl/openssl/pull/12272.patch to enable + CET. + * Add support for building with noudeb build profile. + + -- Dimitri John Ledkov Tue, 23 Feb 2021 22:01:12 +0000 + +openssl (1.1.1j-1) unstable; urgency=medium + + * New upstream version. + - CVE-2021-23841 (NULL pointer deref in X509_issuer_and_serial_hash()). + - CVE-2021-23840 (Possible overflow of the output length argument in + EVP_CipherUpdate(), EVP_EncryptUpdate() and EVP_DecryptUpdate()). + + -- Sebastian Andrzej Siewior Tue, 16 Feb 2021 20:50:01 +0100 + +openssl (1.1.1i-3ubuntu2) hirsute; urgency=medium + + * No-change rebuild to drop the udeb package. + + -- Matthias Klose Mon, 22 Feb 2021 10:35:47 +0100 + +openssl (1.1.1i-3ubuntu1) hirsute; urgency=medium + + * Merge from Debian unstable. Remaining changes: + - Replace duplicate files in the doc directory with symlinks. + - debian/libssl1.1.postinst: + + Display a system restart required notification on libssl1.1 + upgrade on servers, unless needrestart is available. + + Use a different priority for libssl1.1/restart-services depending + on whether a desktop, or server dist-upgrade is being performed. + + Skip services restart & reboot notification if needrestart is in-use. + + Bump version check to to 1.1.1. + + Import libraries/restart-without-asking template as used by above. + - Revert "Enable system default config to enforce TLS1.2 as a + minimum" & "Increase default security level from 1 to 2". + - Reword the NEWS entry, as applicable on Ubuntu. + - Cherrypick s390x SIMD acceleration patches for poly1305 and chacha20 + and ECC from master. + - Use perl:native in the autopkgtest for installability on i386. + - Set OPENSSL_TLS_SECURITY_LEVEL=2 as compiled-in minimum security + level. Change meaning of SECURITY_LEVEL=2 to prohibit TLS versions + below 1.2 and update documentation. Previous default of 1, can be set + by calling SSL_CTX_set_security_level(), SSL_set_security_level() or + using ':@SECLEVEL=1' CipherString value in openssl.cfg. + - Import https://github.com/openssl/openssl/pull/12272.patch to enable + CET. + + * Drop many patches included upstream. + + -- Dimitri John Ledkov Mon, 08 Feb 2021 11:08:21 +0000 + +openssl (1.1.1i-3) unstable; urgency=medium + + * Cherry-pick a patch from upstream to address #13931. + * Enable LFS. Thanks to Dan Nicholson for debugging (Closes: #923479). + + -- Sebastian Andrzej Siewior Sat, 30 Jan 2021 14:06:46 +0100 + +openssl (1.1.1i-2) unstable; urgency=medium + + * Apply two patches from upstream to address x509 related regressions. + + -- Sebastian Andrzej Siewior Sun, 17 Jan 2021 20:08:26 +0100 + +openssl (1.1.1i-1) unstable; urgency=medium + + * New upstream version. + - CVE-2020-1971 (EDIPARTYNAME NULL pointer de-reference). + - Restore rejection of expired trusted (root) certificate + (Closes: #976465). + + -- Sebastian Andrzej Siewior Tue, 08 Dec 2020 20:32:32 +0100 + +openssl (1.1.1h-1) unstable; urgency=medium + + * New upstream version + * Disable CAPI engine, it is designed for Windows. + + -- Sebastian Andrzej Siewior Sun, 11 Oct 2020 00:00:47 +0200 + openssl (1.1.1g-1) unstable; urgency=medium * New upstream version @@ -230,6 +626,87 @@ -- Sebastian Andrzej Siewior Tue, 21 Apr 2020 21:45:21 +0200 +openssl (1.1.1f-1ubuntu5) hirsute; urgency=medium + + * SECURITY UPDATE: EDIPARTYNAME NULL pointer de-ref + - debian/patches/CVE-2020-1971-1.patch: use explicit tagging for + DirectoryString in crypto/x509v3/v3_genn.c. + - debian/patches/CVE-2020-1971-2.patch: correctly compare EdiPartyName + in crypto/x509v3/v3_genn.c. + - debian/patches/CVE-2020-1971-3.patch: check that multi-strings/CHOICE + types don't use implicit tagging in crypto/asn1/asn1_err.c, + crypto/asn1/tasn_dec.c, crypto/err/openssl.txt, + include/openssl/asn1err.h. + - debian/patches/CVE-2020-1971-4.patch: complain if we are attempting + to encode with an invalid ASN.1 template in crypto/asn1/asn1_err.c, + crypto/asn1/tasn_enc.c, crypto/err/openssl.txt, + include/openssl/asn1err.h. + - debian/patches/CVE-2020-1971-5.patch: add a test for GENERAL_NAME_cmp + in test/v3nametest.c. + - debian/patches/CVE-2020-1971-6.patch: add a test for + encoding/decoding using an invalid ASN.1 Template in + test/asn1_decode_test.c, test/asn1_encode_test.c. + - CVE-2020-1971 + + -- Marc Deslauriers Tue, 08 Dec 2020 12:33:52 -0500 + +openssl (1.1.1f-1ubuntu4) groovy; urgency=medium + + * Cherrypick upstream fix for non-interactive detection on Linux. LP: + #1879826 + * Cherrypick AES CTR-DRGB: performance improvement LP: #1799928 + * Skip services restart & reboot notification if needrestart is in-use + LP: #1895708 + + -- Dimitri John Ledkov Tue, 15 Sep 2020 18:04:36 +0100 + +openssl (1.1.1f-1ubuntu3) groovy; urgency=medium + + * Import https://github.com/openssl/openssl/pull/12272.patch to enable + CET. + + -- Dimitri John Ledkov Thu, 25 Jun 2020 14:18:43 +0100 + +openssl (1.1.1f-1ubuntu2) focal; urgency=medium + + * SECURITY UPDATE: Segmentation fault in SSL_check_chain + - debian/patches/CVE-2020-1967-1.patch: add test for CVE-2020-1967 in + test/recipes/70-test_sslsigalgs.t. + - debian/patches/CVE-2020-1967-2.patch: fix NULL dereference in + SSL_check_chain() for TLS 1.3 in ssl/t1_lib.c. + - debian/patches/CVE-2020-1967-3.patch: fix test in + test/recipes/70-test_sslsigalgs.t. + - debian/patches/CVE-2020-1967-4.patch: fix test in + test/recipes/70-test_sslsigalgs.t. + - CVE-2020-1967 + + -- Marc Deslauriers Mon, 20 Apr 2020 07:53:50 -0400 + +openssl (1.1.1f-1ubuntu1) focal; urgency=low + + * Merge from Debian unstable. Remaining changes: + - Replace duplicate files in the doc directory with symlinks. + - debian/libssl1.1.postinst: + + Display a system restart required notification on libssl1.1 + upgrade on servers. + + Use a different priority for libssl1.1/restart-services depending + on whether a desktop, or server dist-upgrade is being performed. + + Bump version check to to 1.1.1. + + Import libraries/restart-without-asking template as used by above. + - Revert "Enable system default config to enforce TLS1.2 as a + minimum" & "Increase default security level from 1 to 2". + - Reword the NEWS entry, as applicable on Ubuntu. + - Cherrypick s390x SIMD acceleration patches for poly1305 and chacha20 + and ECC from master. + - Use perl:native in the autopkgtest for installability on i386. + - Set OPENSSL_TLS_SECURITY_LEVEL=2 as compiled-in minimum security + level. Change meaning of SECURITY_LEVEL=2 to prohibit TLS versions + below 1.2 and update documentation. Previous default of 1, can be set + by calling SSL_CTX_set_security_level(), SSL_set_security_level() or + using ':@SECLEVEL=1' CipherString value in openssl.cfg. + + -- Dimitri John Ledkov Fri, 03 Apr 2020 18:31:00 +0100 + openssl (1.1.1f-1) unstable; urgency=medium * New upstream version @@ -250,6 +727,50 @@ -- Sebastian Andrzej Siewior Wed, 18 Mar 2020 20:59:39 +0100 +openssl (1.1.1d-2ubuntu6) focal; urgency=medium + + * Revert version number change to 1.1.1e-dev. + + -- Dimitri John Ledkov Fri, 06 Mar 2020 04:08:51 +0000 + +openssl (1.1.1d-2ubuntu4) focal; urgency=medium + + * Apply 1_1_1-stable branch patches + * Apply s390x ECC assembly pack improvements + + -- Dimitri John Ledkov Wed, 26 Feb 2020 21:54:47 +0000 + +openssl (1.1.1d-2ubuntu3) focal; urgency=medium + + * Use perl:native in the autopkgtest for installability on i386. + + -- Dimitri John Ledkov Thu, 16 Jan 2020 14:15:26 +0000 + +openssl (1.1.1d-2ubuntu2) focal; urgency=low + + * Merge from Debian unstable. Remaining changes: + - Replace duplicate files in the doc directory with symlinks. + - debian/libssl1.1.postinst: + + Display a system restart required notification on libssl1.1 + upgrade on servers. + + Use a different priority for libssl1.1/restart-services depending + on whether a desktop, or server dist-upgrade is being performed. + + Bump version check to to 1.1.1. + + Import libraries/restart-without-asking template as used by above. + - Revert "Enable system default config to enforce TLS1.2 as a + minimum" & "Increase default security level from 1 to 2". + - Reword the NEWS entry, as applicable on Ubuntu. + - Cherrypick s390x SIMD acceleration patches for poly1305 and chacha20 + from master. + + * Set OPENSSL_TLS_SECURITY_LEVEL=2 as compiled-in minimum security + level. Change meaning of SECURITY_LEVEL=2 to prohibit TLS versions + below 1.2 and update documentation. Previous default of 1, can be set + by calling SSL_CTX_set_security_level(), SSL_set_security_level() or + using ':@SECLEVEL=1' CipherString value in openssl.cfg. + + -- Dimitri John Ledkov Wed, 08 Jan 2020 17:17:41 +0000 + openssl (1.1.1d-2) unstable; urgency=medium * Reenable AES-CBC-HMAC-SHA ciphers (Closes: #941987). @@ -268,6 +789,47 @@ -- Sebastian Andrzej Siewior Sat, 14 Sep 2019 00:38:12 +0200 +openssl (1.1.1c-1ubuntu4) eoan; urgency=medium + + * Cherrypick s390x SIMD acceleration patches for poly1305 and chacha20 + from master. LP: #1736705 LP: #1736704 + + -- Dimitri John Ledkov Tue, 20 Aug 2019 12:46:33 +0100 + +openssl (1.1.1c-1ubuntu3) eoan; urgency=medium + + * Import libraries/restart-without-asking as used in postinst, to + prevent failure to configure the package without debconf database. LP: + #1832919 + + -- Dimitri John Ledkov Thu, 20 Jun 2019 17:59:55 +0100 + +openssl (1.1.1c-1ubuntu2) eoan; urgency=medium + + * Bump major version of OpenSSL in postinst to trigger services restart + upon upgrade. Many services listed there must be restarted when + upgrading 1.1.0 to 1.1.1. LP: #1832522 + * Fix path to Xorg for reboot notifications on desktop. LP: #1832421 + + -- Dimitri John Ledkov Thu, 13 Jun 2019 15:29:07 +0100 + +openssl (1.1.1c-1ubuntu1) eoan; urgency=low + + * Merge from Debian unstable. Remaining changes: + - Replace duplicate files in the doc directory with symlinks. + - debian/libssl1.1.postinst: + + Display a system restart required notification on libssl1.1 + upgrade on servers. + + Use a different priority for libssl1.1/restart-services depending + on whether a desktop, or server dist-upgrade is being performed. + - Revert "Enable system default config to enforce TLS1.2 as a + minimum" & "Increase default security level from 1 to 2". + - Drop the NEWS entry, not applicable on Ubuntu. + * Cherrypick upstream patch to fix ca -spkac output to be text again + LP: #1828215 + + -- Dimitri John Ledkov Mon, 10 Jun 2019 18:11:35 +0100 + openssl (1.1.1c-1) unstable; urgency=medium * New upstream version @@ -276,6 +838,21 @@ -- Sebastian Andrzej Siewior Thu, 30 May 2019 17:27:48 +0200 +openssl (1.1.1b-2ubuntu1) devel; urgency=medium + + * Merge from Debian unstable, remaining changes: + - Replace duplicate files in the doc directory with symlinks. + - debian/libssl1.1.postinst: + + Display a system restart required notification on libssl1.1 + upgrade on servers. + + Use a different priority for libssl1.1/restart-services depending + on whether a desktop, or server dist-upgrade is being performed. + - Revert "Enable system default config to enforce TLS1.2 as a + minimum" & "Increase default security level from 1 to 2". + - Drop the NEWS entry, not applicable on Ubuntu. + + -- Dimitri John Ledkov Wed, 17 Apr 2019 17:26:42 +0100 + openssl (1.1.1b-2) unstable; urgency=medium * Fix BUF_MEM regression (Closes: #923516) @@ -284,6 +861,33 @@ -- Kurt Roeckx Tue, 16 Apr 2019 21:31:11 +0200 +openssl (1.1.1b-1ubuntu2) disco; urgency=medium + + * debian/rules: Ship openssl.cnf in libssl1.1-udeb, as required to use + OpenSSL by other udebs, e.g. wget-udeb. LP: #1822898 + + * Drop debian/patches/UBUNTU-lower-tls-security-level-for-compat.patch + to revert TLS_SECURITY_LEVEL back to 1. LP: #1822984 + + -- Dimitri John Ledkov Wed, 03 Apr 2019 11:50:23 +0100 + +openssl (1.1.1b-1ubuntu1) disco; urgency=medium + + * Merge from Debian unstable, remaining changes: + - Replace duplicate files in the doc directory with symlinks. + - debian/libssl1.1.postinst: + + Display a system restart required notification on libssl1.1 + upgrade on servers. + + Use a different priority for libssl1.1/restart-services depending + on whether a desktop, or server dist-upgrade is being performed. + - Revert "Enable system default config to enforce TLS1.2 as a + minimum" & "Increase default security level from 1 to 2". + - Further decrease security level from 1 to 0, for compatibility with + openssl 1.0.2. + - Drop the NEWS entry, not applicable on Ubuntu. + + -- Dimitri John Ledkov Wed, 27 Feb 2019 18:13:17 -0500 + openssl (1.1.1b-1) unstable; urgency=medium [ Sebastian Andrzej Siewior ] @@ -295,6 +899,28 @@ -- Kurt Roeckx Tue, 26 Feb 2019 19:52:12 +0100 +openssl (1.1.1a-1ubuntu2) disco; urgency=medium + + * Drop the NEWS entry, not applicable on Ubuntu. + + -- Dimitri John Ledkov Wed, 28 Nov 2018 14:24:28 +0000 + +openssl (1.1.1a-1ubuntu1) disco; urgency=medium + + * Merge from Debian unstable, remaining changes: + - Replace duplicate files in the doc directory with symlinks. + - debian/libssl1.1.postinst: + + Display a system restart required notification on libssl1.1 + upgrade on servers. + + Use a different priority for libssl1.1/restart-services depending + on whether a desktop, or server dist-upgrade is being performed. + - Revert "Enable system default config to enforce TLS1.2 as a + minimum" & "Increase default security level from 1 to 2". + - Further decrease security level from 1 to 0, for compatibility with + openssl 1.0.2. + + -- Dimitri John Ledkov Wed, 28 Nov 2018 14:06:04 +0000 + openssl (1.1.1a-1) unstable; urgency=medium * Add Breaks on python-boto (See: #909545) @@ -318,6 +944,28 @@ -- Sebastian Andrzej Siewior Sun, 28 Oct 2018 23:52:24 +0100 +openssl (1.1.1-1ubuntu2) cosmic; urgency=medium + + * Fixup typpos in the autopkgtest binary name. + + -- Dimitri John Ledkov Tue, 25 Sep 2018 15:41:07 +0100 + +openssl (1.1.1-1ubuntu1) cosmic; urgency=medium + + * Merge from Debian unstable, remaining changes: + - Replace duplicate files in the doc directory with symlinks. + - debian/libssl1.1.postinst: + + Display a system restart required notification on libssl1.1 + upgrade on servers. + + Use a different priority for libssl1.1/restart-services depending + on whether a desktop, or server dist-upgrade is being performed. + - Revert "Enable system default config to enforce TLS1.2 as a + minimum" & "Increase default security level from 1 to 2". + - Further decrease security level from 1 to 0, for compatibility with + openssl 1.0.2. + + -- Dimitri John Ledkov Mon, 17 Sep 2018 13:24:38 +0100 + openssl (1.1.1-1) unstable; urgency=medium * New upstream version. @@ -2620,3 +3268,4 @@ * Initial Release. -- Christoph Martin Fri, 22 Nov 1996 21:29:51 +0100 + diff -Nru openssl-3.0.7/debian/control openssl-3.0.7/debian/control --- openssl-3.0.7/debian/control 2022-12-13 16:47:17.000000000 +0100 +++ openssl-3.0.7/debian/control 2022-12-06 15:11:40.000000000 +0100 @@ -2,7 +2,8 @@ Build-Depends: debhelper-compat (= 13), m4, bc, dpkg-dev (>= 1.15.7) Section: utils Priority: optional -Maintainer: Debian OpenSSL Team +Maintainer: Ubuntu Developers +XSBC-Original-Maintainer: Debian OpenSSL Team Uploaders: Christoph Martin , Kurt Roeckx , Sebastian Andrzej Siewior Standards-Version: 4.6.1 Vcs-Browser: https://salsa.debian.org/debian/openssl @@ -44,6 +45,7 @@ Package: libcrypto3-udeb Package-Type: udeb +Build-Profiles: Section: debian-installer Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends} @@ -57,6 +59,7 @@ Package: libssl3-udeb Package-Type: udeb +Build-Profiles: Section: debian-installer Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends} diff -Nru openssl-3.0.7/debian/libssl3.postinst openssl-3.0.7/debian/libssl3.postinst --- openssl-3.0.7/debian/libssl3.postinst 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/libssl3.postinst 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,226 @@ +#!/bin/sh + +. /usr/share/debconf/confmodule + +set -e + +package_name() +{ + echo $(basename $0 .postinst) +} + +# element() is a helper function for file-rc: +element() { + local element list IFS + + element="$1" + + [ "$2" = "in" ] && shift + list="$2" + [ "$list" = "-" ] && return 1 + [ "$list" = "*" ] && return 0 + + IFS="," + set -- $list + case $element in + "$1"|"$2"|"$3"|"$4"|"$5"|"$6"|"$7"|"$8"|"$9") + return 0 + esac + return 1 +} + +# filerc (runlevel, service) returns /etc/init.d/service, if service is +# running in $runlevel: +filerc() { + local runlevel basename + runlevel=$1 + basename=$2 + while read LINE + do + case $LINE in + \#*|"") continue + esac + + set -- $LINE + SORT_NO="$1"; STOP="$2"; START="$3"; CMD="$4" + [ "$CMD" = "/etc/init.d/$basename" ] || continue + + if element "$runlevel" in "$START" || element "S" in "$START" + then + echo "/etc/init.d/$basename" + return 0 + fi + done < /etc/runlevel.conf + echo "" +} + +if [ "$1" = "configure" ] +then + if [ ! -z "$2" ] && [ ! -x /usr/lib/needrestart/apt-pinvoke ] ; then + # This triggers services restarting, so limit this to major upgrades + # only. Security updates should not restart services automatically. + if dpkg --compare-versions "$2" lt 1.1.1-1ubuntu2.1~18.04.2; then + echo -n "Checking for services that may need to be restarted..." + check="amanda-server anon-proxy apache2 apache-ssl" + check="$check apf-firewall asterisk bacula-director-common" + check="$check bacula-fd bacula-sd bind9 bip boinc-client" + check="$check boxbackup-client boxbackup-server bozo cfengine2" + check="$check cfengine3 citadel-server clamav-daemon clamav-freshclam" + check="$check clamcour collectd-core conserver-server courier-imap-ssl" + check="$check courier-mta-ssl courier-pop-ssl cyrus21-imapd" + check="$check cyrus21-pop3d cyrus-common cyrus-imspd dovecot-core" + check="$check ejabberd exim4 fetchmail freeradius ftpd-ssl gatling" + check="$check globus-gatekeeper inn inn2 libapache-mod-ssl lighttpd lldpd" + check="$check lwresd monit myproxy-server nagios-nrpe-server nginx-common" + check="$check ntp openntpd openssh-server openvpn partimage-server" + check="$check postfix postgresql-7.4 postgresql-8.0 postgresql-8.1" + check="$check postgresql-8.2 postgresql-9.1 postgresql-9.2 postgresql-9.3" + check="$check proftpd proftpd-ldap proftpd-basic" + check="$check proftpd-mysql proftpd-pgsql racoon sendmail slapd" + check="$check spamassassin ssh-nonfree stunnel4 syslog-ng tor unbound" + check="$check vsftpd" + # Only get the ones that are installed, and configured + check=$(dpkg -s $check 2> /dev/null | egrep '^Package:|^Status:' | awk '{if ($1 ~ /^Package:/) { package=$2 } else if ($0 ~ /^Status: .* installed$/) { print package }}') + # init script rewrites + check=$(echo $check | sed " + # The name of proftpd-{ldap,mysql,pgsql,basic} init script is + # same as "proftpd". + s/proftpd-.*/proftpd/g; + # dovecot-core ships its init script, but the + # script name is dovecot for dovecot-{imapd,pop3d}. + s/dovecot-core/dovecot/g; + # openssh-server's init script it called ssh + s/openssh-server/ssh/g; + # bacula-director-common's init is bacula-director + s/bacula-director-common/bacula-director/g; + # citadel server + s/citadel-server/citadel/g; + # collectd + s/collectd-core/collectd/g; + # cyrus + s/cyrus-common/cyrus-imapd/g; + # nginx + s/nginx-common/nginx/g; + ") + echo "done." + fi + if dpkg --compare-versions "$2" lt 1.1.1-1ubuntu2.1~18.04.2; then + echo -n "Checking for services that may need to be restarted..." + check2="chef chef-expander chef-server-api" + check2="$check2 chef-solr pound postgresql-common" + check2="$check2 prosody puppet puppetmaster snmpd" + + # Only get the ones that are installed, and configured + check2=$(dpkg -s $check2 2> /dev/null | egrep '^Package:|^Status:' | awk '{if ($1 ~ /^Package:/) { package=$2 } else if ($0 ~ /^Status: .* installed$/) { print package }}') + # init script rewrites + check2=$(echo $check2 | sed -r " + s/chef\s/chef-client/g; + s/chef-server-api/chef-server/g; + s/postgresql-common/postgresql/g; + ") + echo "done." + if [ -n "$check2" ]; then + check="$check $check2" + fi + fi + + if [ -n "$check" ]; then + db_version 2.0 + echo "Checking init scripts..." + for service in $check; do + if [ -x "`which invoke-rc.d 2>/dev/null`" ]; then + idl=$(ls /etc/init.d/${service} 2> /dev/null | head -n 1) + if [ -n "$idl" ] && [ -x $idl ]; then + services="$service $services" + else + echo "WARNING: init script for $service not found." + fi + else + if [ -f /usr/share/file-rc/rc ] || [ -f /usr/lib/file-rc/rc ] && [ -f /etc/runlevel.conf ]; then + + idl=$(filerc $rl $service) + else + idl=$(ls /etc/rc${rl}.d/S??${service} 2> /dev/null | head -n 1) + fi + if [ -n "$idl" ] && [ -x $idl ]; then + services="$service $services" + fi + fi + done + if [ -n "$services" ]; then + db_input critical libraries/restart-without-asking || true + db_go || true + db_get libraries/restart-without-asking + if [ "x$RET" != xtrue ]; then + db_reset libssl3/restart-services + db_set libssl3/restart-services "$services" + db_input critical libssl3/restart-services || true + if [ "$RELEASE_UPGRADE_MODE" = desktop ]; then + db_input medium libssl3/restart-services || true + else + db_input critical libssl3/restart-services || true + fi + db_go || true + db_get libssl3/restart-services + + if [ "x$RET" != "x" ] + then + services=$RET + answer=yes + else + answer=no + fi + else + answer=yes + fi + echo + if [ "$answer" = yes ] && [ "$services" != "" ]; then + echo "Restarting services possibly affected by the upgrade:" + failed="" + rl=$(runlevel | sed 's/.*\ //') + for service in $services; do + if [ -x "`which invoke-rc.d 2>/dev/null`" ]; then + idl="invoke-rc.d ${service}" + elif [ -f /usr/share/file-rc/rc ] || [ -f /usr/lib/file-rc/rc ] && [ -f /etc/runlevel.conf ]; then + idl=$(filerc $rl $service) + else + idl=$(ls /etc/rc${rl}.d/S??${service} 2> /dev/null | head -n 1) + fi + + if ! $idl restart; then + failed="$service $failed" + fi + done + echo + if [ -n "$failed" ]; then + db_subst libssl3/restart-failed services "$failed" + db_input critical libssl3/restart-failed || true + db_go || true + else + echo "Services restarted successfully." + fi + echo + fi + else + echo "Nothing to restart." + fi + # Shut down the frontend, to make sure none of the + # restarted services keep a connection open to it + db_stop + fi # end upgrading and $2 lt 0.9.8c-2 + + # Here we issue the reboot notification for upgrades and + # security updates. We do want services to be restarted when we + # update for a security issue, but planned by the sysadmin, not + # automatically. + + # Only issue the reboot notification for servers; we proxy this by + # testing that the X server is not running (LP: #244250) + if ! pidof /usr/lib/xorg/Xorg > /dev/null && [ -x /usr/share/update-notifier/notify-reboot-required ]; then + /usr/share/update-notifier/notify-reboot-required + fi + + fi # Upgrading +fi + +#DEBHELPER# diff -Nru openssl-3.0.7/debian/libssl3.templates openssl-3.0.7/debian/libssl3.templates --- openssl-3.0.7/debian/libssl3.templates 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/libssl3.templates 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,42 @@ +Template: libssl3/restart-services +Type: string +_Description: Services to restart to make them use the new libraries: + This release of OpenSSL fixes some security issues. Services will not + use these fixes until they are restarted. Please note that restarting + the SSH server (sshd) should not affect any existing connections. + . + Please check the list of detected services that need to be restarted + and correct it, if needed. The services names must be identical to the + initialization script names in /etc/init.d and separated by + spaces. No services will be restarted if the list is empty. + . + Any service that later fails unexpectedly after this upgrade should + be restarted. It is recommended to reboot this host to avoid any + SSL-related trouble. + +Template: libssl3/restart-failed +Type: error +#flag:translate!:3 +#flag:comment:2 +# This paragraph is followed by a (non translatable) paragraph containing +# a list of services that could not be restarted +_Description: Failure restarting some services for OpenSSL upgrade + The following services could not be restarted for the OpenSSL library upgrade: + . + ${services} + . + You will need to start these manually by running + '/etc/init.d/ start'. + +Template: libraries/restart-without-asking +Type: boolean +Default: false +_Description: Restart services during package upgrades without asking? + There are services installed on your system which need to be restarted + when certain libraries, such as libpam, libc, and libssl, are upgraded. + Since these restarts may cause interruptions of service for the system, + you will normally be prompted on each upgrade for the list of services + you wish to restart. You can choose this option to avoid being prompted; + instead, all necessary restarts will be done for you automatically so you + can avoid being asked questions on each library upgrade. + diff -Nru openssl-3.0.7/debian/patches/CVE-2022-3358.patch openssl-3.0.7/debian/patches/CVE-2022-3358.patch --- openssl-3.0.7/debian/patches/CVE-2022-3358.patch 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/patches/CVE-2022-3358.patch 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,64 @@ +From 5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b Mon Sep 17 00:00:00 2001 +From: Matt Caswell +Date: Wed, 10 Aug 2022 15:31:00 +0100 +Subject: [PATCH] Fix usage of custom EVP_CIPHER objects + +If a custom EVP_CIPHER object has been passed to EVP_CipherInit() then it +should be used in preference to a fetched cipher. + +We also fix a possible NULL pointer deref in the same code for digests. + +If the custom cipher passed to EVP_CipherInit() happens to use NID_undef +(which should be a discouraged practice), then in the previous +implementation this could result in the NULL cipher being fetched and +hence NULL encryption being unexpectedly used. + +CVE-2022-3358 + +Fixes #18970 + +Reviewed-by: Tomas Mraz +Reviewed-by: Paul Dale +(Merged from https://github.com/openssl/openssl/pull/19300) + +(cherry picked from commit 25d47cccf203c3b71171e78865e48ea061a039a8) +--- + crypto/evp/digest.c | 4 +++- + crypto/evp/evp_enc.c | 6 ++++-- + 2 files changed, 7 insertions(+), 3 deletions(-) + +--- a/crypto/evp/digest.c ++++ b/crypto/evp/digest.c +@@ -225,7 +225,9 @@ static int evp_md_init_internal(EVP_MD_C + || tmpimpl != NULL + #endif + || (ctx->flags & EVP_MD_CTX_FLAG_NO_INIT) != 0 +- || type->origin == EVP_ORIG_METH) { ++ || (type != NULL && type->origin == EVP_ORIG_METH) ++ || (type == NULL && ctx->digest != NULL ++ && ctx->digest->origin == EVP_ORIG_METH)) { + if (ctx->digest == ctx->fetched_digest) + ctx->digest = NULL; + EVP_MD_free(ctx->fetched_digest); +--- a/crypto/evp/evp_enc.c ++++ b/crypto/evp/evp_enc.c +@@ -131,7 +131,10 @@ static int evp_cipher_init_internal(EVP_ + #if !defined(OPENSSL_NO_ENGINE) && !defined(FIPS_MODULE) + || tmpimpl != NULL + #endif +- || impl != NULL) { ++ || impl != NULL ++ || (cipher != NULL && cipher->origin == EVP_ORIG_METH) ++ || (cipher == NULL && ctx->cipher != NULL ++ && ctx->cipher->origin == EVP_ORIG_METH)) { + if (ctx->cipher == ctx->fetched_cipher) + ctx->cipher = NULL; + EVP_CIPHER_free(ctx->fetched_cipher); +@@ -147,7 +150,6 @@ static int evp_cipher_init_internal(EVP_ + ctx->cipher_data = NULL; + } + +- + /* Start of non-legacy code below */ + + /* Ensure a context left lying around from last time is cleared */ diff -Nru openssl-3.0.7/debian/patches/CVE-2022-3602-1.patch openssl-3.0.7/debian/patches/CVE-2022-3602-1.patch --- openssl-3.0.7/debian/patches/CVE-2022-3602-1.patch 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/patches/CVE-2022-3602-1.patch 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,413 @@ +From eddcc0de5b31cad2e066b57ce032e943b8b2de70 Mon Sep 17 00:00:00 2001 +From: Pauli +Date: Wed, 19 Oct 2022 10:46:50 +1100 +Subject: [PATCH] Fix CVE in punycode decoder. + +An off by one error in the punycode decoder allowed for a single unsigned int +overwrite of a buffer which could cause a crash and possible code execution. + +Also fixed the ossl_a2ulabel() function which was broken and also contained +a potential buffer overflow, albeit one byte without control of the contents. + +Added a test case that errors without the CVE fix and passes with it. + +Fixes CVE-2022-3602. + +Reviewed-by: Matt Caswell +Reviewed-by: Tomas Mraz +--- + crypto/punycode.c | 65 +++++----- + test/build.info | 6 +- + test/punycode_test.c | 220 ++++++++++++++++++++++++++++++++ + test/recipes/04-test_punycode.t | 11 ++ + 4 files changed, 266 insertions(+), 36 deletions(-) + create mode 100644 test/punycode_test.c + create mode 100644 test/recipes/04-test_punycode.t + +--- a/crypto/punycode.c ++++ b/crypto/punycode.c +@@ -123,7 +123,6 @@ int ossl_punycode_decode(const char *pEn + unsigned int bias = initial_bias; + size_t processed_in = 0, written_out = 0; + unsigned int max_out = *pout_length; +- + unsigned int basic_count = 0; + unsigned int loop; + +@@ -181,11 +180,11 @@ int ossl_punycode_decode(const char *pEn + n = n + i / (written_out + 1); + i %= (written_out + 1); + +- if (written_out > max_out) ++ if (written_out >= max_out) + return 0; + + memmove(pDecoded + i + 1, pDecoded + i, +- (written_out - i) * sizeof *pDecoded); ++ (written_out - i) * sizeof(*pDecoded)); + pDecoded[i] = n; + i++; + written_out++; +@@ -255,30 +254,35 @@ int ossl_a2ulabel(const char *in, char * + */ + char *outptr = out; + const char *inptr = in; +- size_t size = 0; ++ size_t size = 0, maxsize; + int result = 1; +- ++ unsigned int i, j; + unsigned int buf[LABEL_BUF_SIZE]; /* It's a hostname */ +- if (out == NULL) ++ ++ if (out == NULL) { + result = 0; ++ maxsize = 0; ++ } else { ++ maxsize = *outlen; ++ } ++ ++#define PUSHC(c) \ ++ do \ ++ if (size++ < maxsize) \ ++ *outptr++ = c; \ ++ else \ ++ result = 0; \ ++ while (0) + + while (1) { + char *tmpptr = strchr(inptr, '.'); +- size_t delta = (tmpptr) ? (size_t)(tmpptr - inptr) : strlen(inptr); ++ size_t delta = tmpptr != NULL ? (size_t)(tmpptr - inptr) : strlen(inptr); + + if (strncmp(inptr, "xn--", 4) != 0) { +- size += delta + 1; +- +- if (size >= *outlen - 1) +- result = 0; +- +- if (result > 0) { +- memcpy(outptr, inptr, delta + 1); +- outptr += delta + 1; +- } ++ for (i = 0; i < delta + 1; i++) ++ PUSHC(inptr[i]); + } else { + unsigned int bufsize = LABEL_BUF_SIZE; +- unsigned int i; + + if (ossl_punycode_decode(inptr + 4, delta - 4, buf, &bufsize) <= 0) + return -1; +@@ -286,26 +290,16 @@ int ossl_a2ulabel(const char *in, char * + for (i = 0; i < bufsize; i++) { + unsigned char seed[6]; + size_t utfsize = codepoint2utf8(seed, buf[i]); ++ + if (utfsize == 0) + return -1; + +- size += utfsize; +- if (size >= *outlen - 1) +- result = 0; +- +- if (result > 0) { +- memcpy(outptr, seed, utfsize); +- outptr += utfsize; +- } ++ for (j = 0; j < utfsize; j++) ++ PUSHC(seed[j]); + } + +- if (tmpptr != NULL) { +- *outptr = '.'; +- outptr++; +- size++; +- if (size >= *outlen - 1) +- result = 0; +- } ++ if (tmpptr != NULL) ++ PUSHC('.'); + } + + if (tmpptr == NULL) +@@ -313,7 +307,9 @@ int ossl_a2ulabel(const char *in, char * + + inptr = tmpptr + 1; + } ++#undef PUSHC + ++ *outlen = size; + return result; + } + +@@ -330,9 +326,8 @@ int ossl_a2ucompare(const char *a, const + char a_ulabel[LABEL_BUF_SIZE]; + size_t a_size = sizeof(a_ulabel); + +- if (ossl_a2ulabel(a, a_ulabel, &a_size) <= 0) { ++ if (ossl_a2ulabel(a, a_ulabel, &a_size) <= 0) + return -1; +- } + +- return (strcmp(a_ulabel, u) == 0) ? 0 : 1; ++ return strcmp(a_ulabel, u) != 0; + } +--- a/test/build.info ++++ b/test/build.info +@@ -40,7 +40,7 @@ IF[{- !$disabled{tests} -}] + exptest pbetest localetest evp_pkey_ctx_new_from_name\ + evp_pkey_provided_test evp_test evp_extra_test evp_extra_test2 \ + evp_fetch_prov_test evp_libctx_test ossl_store_test \ +- v3nametest v3ext \ ++ v3nametest v3ext punycode_test \ + evp_pkey_provided_test evp_test evp_extra_test evp_extra_test2 \ + evp_fetch_prov_test v3nametest v3ext \ + crltest danetest bad_dtls_test lhash_test sparse_array_test \ +@@ -293,6 +293,10 @@ IF[{- !$disabled{tests} -}] + INCLUDE[pkcs7_test]=../include ../apps/include + DEPEND[pkcs7_test]=../libcrypto libtestutil.a + ++ SOURCE[punycode_test]=punycode_test.c ++ INCLUDE[punycode_test]=../include ../apps/include ++ DEPEND[punycode_test]=../libcrypto.a libtestutil.a ++ + SOURCE[stack_test]=stack_test.c + INCLUDE[stack_test]=../include ../apps/include + DEPEND[stack_test]=../libcrypto libtestutil.a +--- /dev/null ++++ b/test/punycode_test.c +@@ -0,0 +1,220 @@ ++/* ++ * Copyright 2022 The OpenSSL Project Authors. All Rights Reserved. ++ * ++ * Licensed under the Apache License 2.0 (the "License"). You may not use ++ * this file except in compliance with the License. You can obtain a copy ++ * in the file LICENSE in the source distribution or at ++ * https://www.openssl.org/source/license.html ++ */ ++ ++#include ++#include ++ ++#include "crypto/punycode.h" ++#include "internal/nelem.h" ++#include "testutil.h" ++ ++ ++static const struct puny_test { ++ unsigned int raw[50]; ++ const char *encoded; ++} puny_cases[] = { ++ /* Test cases from RFC 3492 */ ++ { /* Arabic (Egyptian) */ ++ { 0x0644, 0x064A, 0x0647, 0x0645, 0x0627, 0x0628, 0x062A, 0x0643, 0x0644, ++ 0x0645, 0x0648, 0x0634, 0x0639, 0x0631, 0x0628, 0x064A, 0x061F ++ }, ++ "egbpdaj6bu4bxfgehfvwxn" ++ }, ++ { /* Chinese (simplified) */ ++ { 0x4ED6, 0x4EEC, 0x4E3A, 0x4EC0, 0x4E48, 0x4E0D, 0x8BF4, 0x4E2D, 0x6587 ++ }, ++ "ihqwcrb4cv8a8dqg056pqjye" ++ }, ++ { /* Chinese (traditional) */ ++ { 0x4ED6, 0x5011, 0x7232, 0x4EC0, 0x9EBD, 0x4E0D, 0x8AAA, 0x4E2D, 0x6587 ++ }, ++ "ihqwctvzc91f659drss3x8bo0yb" ++ }, ++ { /* Czech: Proprostnemluvesky */ ++ { 0x0050, 0x0072, 0x006F, 0x010D, 0x0070, 0x0072, 0x006F, 0x0073, 0x0074, ++ 0x011B, 0x006E, 0x0065, 0x006D, 0x006C, 0x0075, 0x0076, 0x00ED, 0x010D, ++ 0x0065, 0x0073, 0x006B, 0x0079 ++ }, ++ "Proprostnemluvesky-uyb24dma41a" ++ }, ++ { /* Hebrew */ ++ { 0x05DC, 0x05DE, 0x05D4, 0x05D4, 0x05DD, 0x05E4, 0x05E9, 0x05D5, 0x05D8, ++ 0x05DC, 0x05D0, 0x05DE, 0x05D3, 0x05D1, 0x05E8, 0x05D9, 0x05DD, 0x05E2, ++ 0x05D1, 0x05E8, 0x05D9, 0x05EA ++ }, ++ "4dbcagdahymbxekheh6e0a7fei0b" ++ }, ++ { /* Hindi (Devanagari) */ ++ { 0x092F, 0x0939, 0x0932, 0x094B, 0x0917, 0x0939, 0x093F, 0x0928, 0x094D, ++ 0x0926, 0x0940, 0x0915, 0x094D, 0x092F, 0x094B, 0x0902, 0x0928, 0x0939, ++ 0x0940, 0x0902, 0x092C, 0x094B, 0x0932, 0x0938, 0x0915, 0x0924, 0x0947, ++ 0x0939, 0x0948, 0x0902 ++ }, ++ "i1baa7eci9glrd9b2ae1bj0hfcgg6iyaf8o0a1dig0cd" ++ }, ++ { /* Japanese (kanji and hiragana) */ ++ { 0x306A, 0x305C, 0x307F, 0x3093, 0x306A, 0x65E5, 0x672C, 0x8A9E, 0x3092, ++ 0x8A71, 0x3057, 0x3066, 0x304F, 0x308C, 0x306A, 0x3044, 0x306E, 0x304B ++ }, ++ "n8jok5ay5dzabd5bym9f0cm5685rrjetr6pdxa" ++ }, ++ { /* Korean (Hangul syllables) */ ++ { 0xC138, 0xACC4, 0xC758, 0xBAA8, 0xB4E0, 0xC0AC, 0xB78C, 0xB4E4, 0xC774, ++ 0xD55C, 0xAD6D, 0xC5B4, 0xB97C, 0xC774, 0xD574, 0xD55C, 0xB2E4, 0xBA74, ++ 0xC5BC, 0xB9C8, 0xB098, 0xC88B, 0xC744, 0xAE4C ++ }, ++ "989aomsvi5e83db1d2a355cv1e0vak1dwrv93d5xbh15a0dt30a5jpsd879ccm6fea98c" ++ }, ++ { /* Russian (Cyrillic) */ ++ { 0x043F, 0x043E, 0x0447, 0x0435, 0x043C, 0x0443, 0x0436, 0x0435, 0x043E, ++ 0x043D, 0x0438, 0x043D, 0x0435, 0x0433, 0x043E, 0x0432, 0x043E, 0x0440, ++ 0x044F, 0x0442, 0x043F, 0x043E, 0x0440, 0x0443, 0x0441, 0x0441, 0x043A, ++ 0x0438 ++ }, ++ "b1abfaaepdrnnbgefbaDotcwatmq2g4l" ++ }, ++ { /* Spanish */ ++ { 0x0050, 0x006F, 0x0072, 0x0071, 0x0075, 0x00E9, 0x006E, 0x006F, 0x0070, ++ 0x0075, 0x0065, 0x0064, 0x0065, 0x006E, 0x0073, 0x0069, 0x006D, 0x0070, ++ 0x006C, 0x0065, 0x006D, 0x0065, 0x006E, 0x0074, 0x0065, 0x0068, 0x0061, ++ 0x0062, 0x006C, 0x0061, 0x0072, 0x0065, 0x006E, 0x0045, 0x0073, 0x0070, ++ 0x0061, 0x00F1, 0x006F, 0x006C ++ }, ++ "PorqunopuedensimplementehablarenEspaol-fmd56a" ++ }, ++ { /* Vietnamese */ ++ { 0x0054, 0x1EA1, 0x0069, 0x0073, 0x0061, 0x006F, 0x0068, 0x1ECD, 0x006B, ++ 0x0068, 0x00F4, 0x006E, 0x0067, 0x0074, 0x0068, 0x1EC3, 0x0063, 0x0068, ++ 0x1EC9, 0x006E, 0x00F3, 0x0069, 0x0074, 0x0069, 0x1EBF, 0x006E, 0x0067, ++ 0x0056, 0x0069, 0x1EC7, 0x0074 ++ }, ++ "TisaohkhngthchnitingVit-kjcr8268qyxafd2f1b9g" ++ }, ++ { /* Japanese: 3B */ ++ { 0x0033, 0x5E74, 0x0042, 0x7D44, 0x91D1, 0x516B, 0x5148, 0x751F ++ }, ++ "3B-ww4c5e180e575a65lsy2b" ++ }, ++ { /* Japanese: -with-SUPER-MONKEYS */ ++ { 0x5B89, 0x5BA4, 0x5948, 0x7F8E, 0x6075, 0x002D, 0x0077, 0x0069, 0x0074, ++ 0x0068, 0x002D, 0x0053, 0x0055, 0x0050, 0x0045, 0x0052, 0x002D, 0x004D, ++ 0x004F, 0x004E, 0x004B, 0x0045, 0x0059, 0x0053 ++ }, ++ "-with-SUPER-MONKEYS-pc58ag80a8qai00g7n9n" ++ }, ++ { /* Japanese: Hello-Another-Way- */ ++ { 0x0048, 0x0065, 0x006C, 0x006C, 0x006F, 0x002D, 0x0041, 0x006E, 0x006F, ++ 0x0074, 0x0068, 0x0065, 0x0072, 0x002D, 0x0057, 0x0061, 0x0079, 0x002D, ++ 0x305D, 0x308C, 0x305E, 0x308C, 0x306E, 0x5834, 0x6240 ++ }, ++ "Hello-Another-Way--fc4qua05auwb3674vfr0b" ++ }, ++ { /* Japanese: 2 */ ++ { 0x3072, 0x3068, 0x3064, 0x5C4B, 0x6839, 0x306E, 0x4E0B, 0x0032 ++ }, ++ "2-u9tlzr9756bt3uc0v" ++ }, ++ { /* Japanese: MajiKoi5 */ ++ { 0x004D, 0x0061, 0x006A, 0x0069, 0x3067, 0x004B, 0x006F, 0x0069, 0x3059, ++ 0x308B, 0x0035, 0x79D2, 0x524D ++ }, ++ "MajiKoi5-783gue6qz075azm5e" ++ }, ++ { /* Japanese: de */ ++ { 0x30D1, 0x30D5, 0x30A3, 0x30FC, 0x0064, 0x0065, 0x30EB, 0x30F3, 0x30D0 ++ }, ++ "de-jg4avhby1noc0d" ++ }, ++ { /* Japanese: */ ++ { 0x305D, 0x306E, 0x30B9, 0x30D4, 0x30FC, 0x30C9, 0x3067 ++ }, ++ "d9juau41awczczp" ++ }, ++ { /* -> $1.00 <- */ ++ { 0x002D, 0x003E, 0x0020, 0x0024, 0x0031, 0x002E, 0x0030, 0x0030, 0x0020, ++ 0x003C, 0x002D ++ }, ++ "-> $1.00 <--" ++ } ++}; ++ ++static int test_punycode(int n) ++{ ++ const struct puny_test *tc = puny_cases + n; ++ unsigned int buffer[50]; ++ unsigned int bsize = OSSL_NELEM(buffer); ++ size_t i; ++ ++ if (!TEST_true(ossl_punycode_decode(tc->encoded, strlen(tc->encoded), ++ buffer, &bsize))) ++ return 0; ++ for (i = 0; i < sizeof(tc->raw); i++) ++ if (tc->raw[i] == 0) ++ break; ++ if (!TEST_mem_eq(buffer, bsize * sizeof(*buffer), ++ tc->raw, i * sizeof(*tc->raw))) ++ return 0; ++ return 1; ++} ++ ++static int test_a2ulabel(void) ++{ ++ char out[50]; ++ size_t outlen; ++ ++ /* ++ * Test that no buffer correctly returns the true length. ++ * The punycode being passed in and parsed is malformed but we're not ++ * verifying that behaviour here. ++ */ ++ if (!TEST_int_eq(ossl_a2ulabel("xn--a.b.c", NULL, &outlen), 0) ++ || !TEST_size_t_eq(outlen, 7) ++ || !TEST_int_eq(ossl_a2ulabel("xn--a.b.c", out, &outlen), 1)) ++ return 0; ++ /* Test that a short input length returns the true length */ ++ outlen = 1; ++ if (!TEST_int_eq(ossl_a2ulabel("xn--a.b.c", out, &outlen), 0) ++ || !TEST_size_t_eq(outlen, 7) ++ || !TEST_int_eq(ossl_a2ulabel("xn--a.b.c", out, &outlen), 1) ++ || !TEST_str_eq(out,"\xc2\x80.b.c")) ++ return 0; ++ /* Test for an off by one on the buffer size works */ ++ outlen = 6; ++ if (!TEST_int_eq(ossl_a2ulabel("xn--a.b.c", out, &outlen), 0) ++ || !TEST_size_t_eq(outlen, 7) ++ || !TEST_int_eq(ossl_a2ulabel("xn--a.b.c", out, &outlen), 1) ++ || !TEST_str_eq(out,"\xc2\x80.b.c")) ++ return 0; ++ return 1; ++} ++ ++static int test_puny_overrun(void) ++{ ++ static const unsigned int out[] = { ++ 0x0033, 0x5E74, 0x0042, 0x7D44, 0x91D1, 0x516B, 0x5148, 0x751F ++ }; ++ static const char *in = "3B-ww4c5e180e575a65lsy2b"; ++ unsigned int buf[OSSL_NELEM(out)]; ++ unsigned int bsize = OSSL_NELEM(buf) - 1; ++ ++ if (!TEST_false(ossl_punycode_decode(in, strlen(in), buf, &bsize))) { ++ if (TEST_mem_eq(buf, bsize * sizeof(*buf), out, sizeof(out))) ++ TEST_error("CRITICAL: buffer overrun detected!"); ++ return 0; ++ } ++ return 1; ++} ++ ++int setup_tests(void) ++{ ++ ADD_ALL_TESTS(test_punycode, OSSL_NELEM(puny_cases)); ++ ADD_TEST(test_a2ulabel); ++ ADD_TEST(test_puny_overrun); ++ return 1; ++} +--- /dev/null ++++ b/test/recipes/04-test_punycode.t +@@ -0,0 +1,11 @@ ++#! /usr/bin/env perl ++# Copyright 2022 The OpenSSL Project Authors. All Rights Reserved. ++# ++# Licensed under the Apache License 2.0 (the "License"). You may not use ++# this file except in compliance with the License. You can obtain a copy ++# in the file LICENSE in the source distribution or at ++# https://www.openssl.org/source/license.html ++ ++use OpenSSL::Test::Simple; ++ ++simple_test("test_punycode", "punycode_test"); diff -Nru openssl-3.0.7/debian/patches/CVE-2022-3602-2.patch openssl-3.0.7/debian/patches/CVE-2022-3602-2.patch --- openssl-3.0.7/debian/patches/CVE-2022-3602-2.patch 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/patches/CVE-2022-3602-2.patch 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,34 @@ +From 2061a656b97ac7126431eed05dcf2c0317418be4 Mon Sep 17 00:00:00 2001 +From: Pauli +Date: Mon, 24 Oct 2022 19:06:13 +1100 +Subject: [PATCH] punycode: ensure the result is zero terminated + +Reviewed-by: Matt Caswell +Reviewed-by: Tomas Mraz +--- + crypto/punycode.c | 5 ++--- + 1 file changed, 2 insertions(+), 3 deletions(-) + +diff --git a/crypto/punycode.c b/crypto/punycode.c +index 8cba508382..b9b4e3d785 100644 +--- a/crypto/punycode.c ++++ b/crypto/punycode.c +@@ -298,8 +298,7 @@ int ossl_a2ulabel(const char *in, char *out, size_t *outlen) + PUSHC(seed[j]); + } + +- if (tmpptr != NULL) +- PUSHC('.'); ++ PUSHC(tmpptr != NULL ? '.' : '\0'); + } + + if (tmpptr == NULL) +@@ -323,7 +322,7 @@ int ossl_a2ulabel(const char *in, char *out, size_t *outlen) + + int ossl_a2ucompare(const char *a, const char *u) + { +- char a_ulabel[LABEL_BUF_SIZE]; ++ char a_ulabel[LABEL_BUF_SIZE + 1]; + size_t a_size = sizeof(a_ulabel); + + if (ossl_a2ulabel(a, a_ulabel, &a_size) <= 0) diff -Nru openssl-3.0.7/debian/patches/Remove-the-provider-section.patch openssl-3.0.7/debian/patches/Remove-the-provider-section.patch --- openssl-3.0.7/debian/patches/Remove-the-provider-section.patch 2022-12-13 16:47:17.000000000 +0100 +++ openssl-3.0.7/debian/patches/Remove-the-provider-section.patch 1970-01-01 01:00:00.000000000 +0100 @@ -1,40 +0,0 @@ -From: Sebastian Andrzej Siewior -Date: Wed, 8 Jun 2022 20:45:32 +0200 -Subject: Remove the provider section. - -The provider section breaks libssl1.1 users. Remove it for now. - -Link: https://bugs.debian.org/1011051 -Signed-off-by: Sebastian Andrzej Siewior ---- - apps/openssl.cnf | 8 ++++---- - 1 file changed, 4 insertions(+), 4 deletions(-) - -diff --git a/apps/openssl.cnf b/apps/openssl.cnf -index 03330e0120a2..215768bfe710 100644 ---- a/apps/openssl.cnf -+++ b/apps/openssl.cnf -@@ -51,11 +51,11 @@ tsa_policy3 = 1.2.3.4.5.7 - # .include fipsmodule.cnf - - [openssl_init] --providers = provider_sect -+# providers = provider_sect - - # List of providers to load --[provider_sect] --default = default_sect -+# [provider_sect] -+# default = default_sect - # The fips section name should match the section name inside the - # included fipsmodule.cnf. - # fips = fips_sect -@@ -68,7 +68,7 @@ default = default_sect - # becomes unavailable in openssl. As a consequence applications depending on - # OpenSSL may not work correctly which could lead to significant system - # problems including inability to remotely access the system. --[default_sect] -+# [default_sect] - # activate = 1 - - diff -Nru openssl-3.0.7/debian/patches/series openssl-3.0.7/debian/patches/series --- openssl-3.0.7/debian/patches/series 2022-12-13 16:47:17.000000000 +0100 +++ openssl-3.0.7/debian/patches/series 2022-12-06 15:11:40.000000000 +0100 @@ -1,10 +1,15 @@ +# Debian patches debian-targets.patch man-section.patch no-symbolic.patch pic.patch c_rehash-compat.patch Configure-allow-to-enable-ktls-if-target-does-not-start-w.patch -Remove-the-provider-section.patch conf-Serialize-allocation-free-of-ssl_names.patch Fix-tests-for-new-default-security-level.patch x509-fix-double-locking-problem.patch + +# Ubuntu patches +tests-use-seclevel-1.patch +tls1.2-min-seclevel2.patch +skip_tls1.1_seclevel3_tests.patch diff -Nru openssl-3.0.7/debian/patches/Set-systemwide-default-settings-for-libssl-users.patch openssl-3.0.7/debian/patches/Set-systemwide-default-settings-for-libssl-users.patch --- openssl-3.0.7/debian/patches/Set-systemwide-default-settings-for-libssl-users.patch 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/patches/Set-systemwide-default-settings-for-libssl-users.patch 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,37 @@ +From: Sebastian Andrzej Siewior +Date: Tue, 20 Mar 2018 22:07:30 +0100 +Subject: Set systemwide default settings for libssl users + +This config change enforeces a TLS1.2 protocol version as minimum. It +can be overwritten by the system administrator. + +It also changes the default security level from 1 to 2, moving from the 80 bit +security level to the 112 bit security level. + +Signed-off-by: Sebastian Andrzej Siewior +--- + apps/openssl.cnf | 8 ++++++++ + 1 file changed, 8 insertions(+) + +diff --git a/apps/openssl.cnf b/apps/openssl.cnf +index 03330e0120a2..46ae4f2d7758 100644 +--- a/apps/openssl.cnf ++++ b/apps/openssl.cnf +@@ -52,6 +52,7 @@ tsa_policy3 = 1.2.3.4.5.7 + + [openssl_init] + providers = provider_sect ++ssl_conf = ssl_sect + + # List of providers to load + [provider_sect] +@@ -388,3 +389,9 @@ oldcert = $insta::certout # insta.cert.pem + # Certificate revocation + cmd = rr + oldcert = $insta::certout # insta.cert.pem ++ ++[ssl_sect] ++system_default = system_default_sect ++ ++[system_default_sect] ++CipherString = DEFAULT:@SECLEVEL=2 diff -Nru openssl-3.0.7/debian/patches/skip_tls1.1_seclevel3_tests.patch openssl-3.0.7/debian/patches/skip_tls1.1_seclevel3_tests.patch --- openssl-3.0.7/debian/patches/skip_tls1.1_seclevel3_tests.patch 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/patches/skip_tls1.1_seclevel3_tests.patch 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,51 @@ +Description: Skip TLS 1.1 tests on seclevel 3 + In the Ubuntu package, we changed the semantics of seclevel 2 (and above) to + also disable TLS <= 1.1. This makes those tests fail. +Author: Simon Chopin +Forwarded: not-needed +Last-Update: 2022-03-21 +--- +This patch header follows DEP-3: http://dep.debian.net/deps/dep3/ +--- a/test/recipes/80-test_ssl_old.t ++++ b/test/recipes/80-test_ssl_old.t +@@ -583,32 +583,32 @@ + if $no_tls1_1; + + SKIP: { +- skip "skipping auto DHE PSK test at SECLEVEL 3", 1 +- if ($no_dh || $no_psk); ++ skip "skipping auto DHE PSK test at SECLEVEL 3", 1; ++ # if ($no_dh || $no_psk); + + ok(run(test(['ssl_old_test', '-tls1_1', '-dhe4096', '-psk', '0102030405', '-cipher', '@SECLEVEL=3:DHE-PSK-AES256-CBC-SHA384'])), + 'test auto DHE PSK meets security strength'); + } + + SKIP: { +- skip "skipping auto ECDHE PSK test at SECLEVEL 3", 1 +- if ($no_ec || $no_psk); ++ skip "skipping auto ECDHE PSK test at SECLEVEL 3", 1; ++ # if ($no_ec || $no_psk); + + ok(run(test(['ssl_old_test', '-tls1_1', '-no_dhe', '-psk', '0102030405', '-cipher', '@SECLEVEL=3:ECDHE-PSK-AES256-CBC-SHA384'])), + 'test auto ECDHE PSK meets security strength'); + } + + SKIP: { +- skip "skipping no RSA PSK at SECLEVEL 3 test", 1 +- if ($no_rsa || $no_psk); ++ skip "skipping no RSA PSK at SECLEVEL 3 test", 1; ++ # if ($no_rsa || $no_psk); + + ok(!run(test(['ssl_old_test', '-tls1_1', '-no_dhe', '-psk', '0102030405', '-cipher', '@SECLEVEL=3:RSA-PSK-AES256-CBC-SHA384'])), + 'test auto RSA PSK does not meet security level 3 requirements (PFS)'); + } + + SKIP: { +- skip "skipping no PSK at SECLEVEL 3 test", 1 +- if ($no_psk); ++ skip "skipping no PSK at SECLEVEL 3 test", 1; ++ # if ($no_psk); + + ok(!run(test(['ssl_old_test', '-tls1_1', '-no_dhe', '-psk', '0102030405', '-cipher', '@SECLEVEL=3:PSK-AES256-CBC-SHA384'])), + 'test auto PSK does not meet security level 3 requirements (PFS)'); diff -Nru openssl-3.0.7/debian/patches/tests-use-seclevel-1.patch openssl-3.0.7/debian/patches/tests-use-seclevel-1.patch --- openssl-3.0.7/debian/patches/tests-use-seclevel-1.patch 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/patches/tests-use-seclevel-1.patch 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,27 @@ +Description: Change testsuite to use SECLEVEL 1 by default + The testsuite often assumes that SECLEVEL is set to 1, and some tests fail, + when one raises security level to 2. Some test certs use insecure hash + algorithms and small key sizes. +Author: Dimitri John Ledkov + +--- a/test/ssl_test.c ++++ b/test/ssl_test.c +@@ -464,6 +470,7 @@ + goto err; + } + client_ctx = SSL_CTX_new_ex(libctx, NULL, TLS_client_method()); ++ SSL_CTX_set_security_level(client_ctx, 1); + if (!TEST_true(SSL_CTX_set_max_proto_version(client_ctx, maxversion))) + goto err; + +--- a/test/bad_dtls_test.c ++++ b/test/bad_dtls_test.c +@@ -491,6 +491,8 @@ + goto end; + + ctx = SSL_CTX_new(DTLS_client_method()); ++ if (TEST_ptr(ctx)) ++ SSL_CTX_set_security_level(ctx, 1); + if (!TEST_ptr(ctx) + || !TEST_true(SSL_CTX_set_min_proto_version(ctx, DTLS1_BAD_VER)) + || !TEST_true(SSL_CTX_set_max_proto_version(ctx, DTLS1_BAD_VER)) diff -Nru openssl-3.0.7/debian/patches/tls1.2-min-seclevel2.patch openssl-3.0.7/debian/patches/tls1.2-min-seclevel2.patch --- openssl-3.0.7/debian/patches/tls1.2-min-seclevel2.patch 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/patches/tls1.2-min-seclevel2.patch 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,63 @@ +Description: TLS versions below 1.2 are not permitted as security level 2. + +--- a/ssl/ssl_cert.c ++++ b/ssl/ssl_cert.c +@@ -1012,18 +1012,12 @@ + } + case SSL_SECOP_VERSION: + if (!SSL_IS_DTLS(s)) { +- /* SSLv3 not allowed at level 2 */ +- if (nid <= SSL3_VERSION && level >= 2) +- return 0; +- /* TLS v1.1 and above only for level 3 */ +- if (nid <= TLS1_VERSION && level >= 3) +- return 0; +- /* TLS v1.2 only for level 4 and above */ +- if (nid <= TLS1_1_VERSION && level >= 4) ++ /* TLS v1.2 only for level 2 and above */ ++ if (nid <= TLS1_1_VERSION && level >= 2) + return 0; + } else { +- /* DTLS v1.2 only for level 4 and above */ +- if (DTLS_VERSION_LT(nid, DTLS1_2_VERSION) && level >= 4) ++ /* DTLS v1.2 only for level 2 and above */ ++ if (DTLS_VERSION_LT(nid, DTLS1_2_VERSION) && level >= 2) + return 0; + } + break; +--- a/doc/man3/SSL_CTX_set_security_level.pod ++++ b/doc/man3/SSL_CTX_set_security_level.pod +@@ -84,22 +84,20 @@ + Security level set to 112 bits of security. As a result RSA, DSA and DH keys + shorter than 2048 bits and ECC keys shorter than 224 bits are prohibited. + In addition to the level 1 exclusions any cipher suite using RC4 is also +-prohibited. SSL version 3 is also not allowed. Compression is disabled. ++prohibited. On Ubuntu, TLS versions below 1.2 are not permitted. Compression is disabled. + + =item B + + Security level set to 128 bits of security. As a result RSA, DSA and DH keys + shorter than 3072 bits and ECC keys shorter than 256 bits are prohibited. + In addition to the level 2 exclusions cipher suites not offering forward +-secrecy are prohibited. TLS versions below 1.1 are not permitted. Session +-tickets are disabled. ++secrecy are prohibited. Session tickets are disabled. + + =item B + + Security level set to 192 bits of security. As a result RSA, DSA and + DH keys shorter than 7680 bits and ECC keys shorter than 384 bits are +-prohibited. Cipher suites using SHA1 for the MAC are prohibited. TLS +-versions below 1.2 are not permitted. ++prohibited. Cipher suites using SHA1 for the MAC are prohibited. + + =item B + +@@ -116,6 +114,7 @@ + + The default security level can be configured when OpenSSL is compiled by + setting B<-DOPENSSL_TLS_SECURITY_LEVEL=level>. If not set then 1 is used. ++On Debian and Ubuntu, 2 is used unconditionally. + + The security framework disables or reject parameters inconsistent with the + set security level. In the past this was difficult as applications had to set diff -Nru openssl-3.0.7/debian/po/ar.po openssl-3.0.7/debian/po/ar.po --- openssl-3.0.7/debian/po/ar.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/ar.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,108 @@ +# translation of openssl-ar.po to Arabic +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# +# Ossama M. Khayat , 2007, 2010. +msgid "" +msgstr "" +"Project-Id-Version: openssl-ar\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2010-09-09 01:29+0300\n" +"Last-Translator: Ossama M. Khayat \n" +"Language-Team: Arabic \n" +"Language: ar\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: Lokalize 1.0\n" +"Plural-Forms: nplurals=6; plural=n==1 ? 0 : n==0 ? 1 : n==2 ? 2: n%100>=3 && " +"n%100<=10 ? 3 : n%100>=11 && n%100<=99 ? 4 : 5\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "الخدمات المطلوب إعادة تشغيلها لجعلها تستخدم المكتبات الجديدة:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"هذا الإصدار من OpenSSL يحل بعض المشاكل الأمنية. ولن تستخدم الخدمات هذه " +"الحلول حتى يتم إعادة تشغيلها. الرجاء التنبه إلى أن إعادة تشغيل خادم SSH " +"(sshd) لا يؤثر على أية اتصالات حالية." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"الرجاء التحقق من قائمة الخدمات المكتشفة والتي يجب إعادة تشغيلها وقم بتصحيحها " +"إن كانت هناك حاجة لذلك. يجب أن تكون أسماء الخدمات مطابقة لأسماء ملفات شيفرات " +"التشغيل في /etc/init.d وتفصلها مسافات. لن تتم إعادة تشغيل أية خدمات إن كانت " +"القائمة فارغة." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"يجب إعادة تشغيل أية خدمة تفشل بشكل غير متوقع عقب عملية الترقية هذه. كما أنه " +"من المستحسن إعادة تشغيل هذا الجهاز لتجنب أية مشاكل متعلقة بخدمة SSL." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "فشل إعادة تشغيل بعض الخدمات لترقية OpenSSL" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "تعذر إعادة تشغيل الخدمات التالية لترقية مكتبة OpenSSL:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"يجب أن تقوم بتشغيل هذه الخدمات يدوياً بتفيذ الأمر '/etc/init.d/ " +"start'." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" diff -Nru openssl-3.0.7/debian/po/ca.po openssl-3.0.7/debian/po/ca.po --- openssl-3.0.7/debian/po/ca.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/ca.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,117 @@ +# +# Catalan translation for openssl package. +# Copyright (C) 2007 Debian OpenSSL Team. +# This file is distributed under the same license as the openssl package. +# +# Aleix Badia i Bosch , 2004 +# Jordà Polo , 2007. +# +msgid "" +msgstr "" +"Project-Id-Version: openssl_0.9.8g-3\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2007-11-24 16:43+0100\n" +"Last-Translator: Jordà Polo \n" +"Language-Team: Català \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "Serveis que cal reiniciar perquè utilitzin les noves biblioteques:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Aquesta versió d'OpenSSL resol alguns problemes de seguretat. Els serveis no " +"utilitzaran les correccions fins que no es tornin a iniciar. Fixeu-vos que " +"reiniciar el servidor SSH (sshd) no hauria d'afectar cap de les connexions " +"existents." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Si us plau, comproveu la llista de serveis detectats que caldria reiniciar, " +"i esmeneu-la si és necessari. Els noms dels serveis han de ser idèntics als " +"noms dels scripts que hi ha al directori /etc/init.d, i haurien d'estar " +"separats per espais. Si la llista és buida no es reiniciarà cap servei." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Si després de l'actualització fallen altres serveis de forma inesperada, és " +"possible que també calgui tornar a iniciar-los. Si els problemes relacionats " +"amb SSL persisteixen, podeu reiniciar l'ordinador." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "" +"S'ha trobat un error mentre es reiniciaven alguns serveis per " +"l'actualització de l'OpenSSL" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"No s'han pogut reiniciar els següents serveis per l'actualització de la " +"biblioteca OpenSSL:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"Aquests els haureu d'iniciar manualment executant «/etc/init.d/ " +"start»." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" + +#~ msgid "${services}" +#~ msgstr "${services}" diff -Nru openssl-3.0.7/debian/po/cs.po openssl-3.0.7/debian/po/cs.po --- openssl-3.0.7/debian/po/cs.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/cs.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,119 @@ +# +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans +# +# Developers do not need to manually edit POT or PO files. +# +msgid "" +msgstr "" +"Project-Id-Version: openssl\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2008-05-12 19:14+0200\n" +"Last-Translator: Miroslav Kure \n" +"Language-Team: Czech \n" +"Language: cs\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "Služby, které se mají restartovat, aby začaly využívat nové knihovny:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Toto vydání OpenSSL opravuje některé bezpečnostní problémy. Tyto opravy se v " +"programech projeví až po jejich restartu. Poznamenejme, že restart SSH " +"serveru (sshd) by neměl ovlivnit stávající spojení." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Zkontrolujte prosím seznam rozpoznaných služeb, které je třeba restartovat. " +"Jestliže se vám zdá, že je seznam chybný, můžete jej upravit. Názvy služeb " +"musí být shodné s názvy skriptů v adresáři /etc/init.d a musí být odděleny " +"mezerami. Pokud seznam vymažete, nebude restartována žádná služba." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Jestliže po této aktualizaci začnou neočekávaně selhávat některé služby, " +"měli byste je taktéž restartovat. Abyste se vyhnuli problémům spojeným se " +"SSL, doporučujeme restartovat celý počítač." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "Chyba při restartu některých služeb po aktualizaci OpenSSL" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Následující služby se nepodařilo po aktualizaci knihovny OpenSSL restartovat:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "Budete je muset spustit ručně příkazem „/etc/init.d/ start“." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "Restartovat služby při aktualizaci balíku bez ptaní?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"V systému jsou nainstalovány služby, které je nutno při aktualizaci určitých " +"knihoven (libpam, libc nebo libssl) restartovat. Během restartu služeb jsou " +"tyto po nějakou dobu nedostupné. Abychom předešli nechtěné nedostupnosti, je " +"při každé aktualizaci nabídnut seznam služeb, které se mají restartovat. " +"Povolíte-li tuto možnost, budou se všechny potřebné služby restartovat při " +"aktualizaci knihoven automaticky bez ptaní." diff -Nru openssl-3.0.7/debian/po/da.po openssl-3.0.7/debian/po/da.po --- openssl-3.0.7/debian/po/da.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/da.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,119 @@ +# Danish translation openssl. +# Copyright (C) 2010 openssl & Joe Hansen. +# This file is distributed under the same license as the openssl package. +# Claus Hindsgaul , 2004. +# Claus Hindsgaul , 2007. +# Joe Hansen , 2010. +# +msgid "" +msgstr "" +"Project-Id-Version: openssl\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2010-10-07 05:26+0100\n" +"Last-Translator: Joe Hansen \n" +"Language-Team: Danish \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=2; plural=(n != 1);\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "" +"Tjenester der skal genstartes for at få dem til at benytte de nye " +"biblioteker:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Denne version af OpenSSL retter nogle sikkerhedsproblemer. Tjenester vil " +"ikke benytte disse rettelser, før de er blevet genstartet. Bemærk at det " +"ikke vil påvirke eksisterende forbindelser at genstarte SSH-serveren (sshd)." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Tjek listen over fundne tjenester, som skal genstartes, og ret den om " +"nødvendigt. Tjenestenavnene skal være identiske med " +"initialiseringsskriptenes navne i /etc/init.d, og være adskilt med " +"mellemrum. Hvis listen er tom, vil ingen tjenester blive genstartet." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Enhver tjeneste, der fejler uden grund efter denne opgradering, bør " +"genstartes. Det anbefales at genstarte denne maskine for at undgå SSL-" +"relaterede problemer." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "Fejl ved genstart af nogle tjenester for OpenSSl-opgradering" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"De følgende tjenester kunne ikke genstartes for OpenSSL-" +"biblioteksopgraderingen:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"Du skal genstarte disse manuelt ved at køre '/etc/init.d/ start'." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "Genstart tjenester under pakkeopgraderinger uden at spørge?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"Der er tjenester installeret på dit system, som kræver at blive genstartet " +"når bestemte biblioteker, såsom libpam, libc og libssl, opgraderes. Da disse " +"genstarter kan medføre forstyrrelse af systemets tjenester, vil du normalt " +"blive spurgt ved hver opgradering om listen over tjenester, du ønsker at " +"genstarte. Du kan vælge denne indstilling for at undgå at blive spurgt; i " +"stedet for vil alle nødvendige genstarter blive udført automatisk, så du kan " +"undgå spørgsmål ved hver biblioteksopgradering." diff -Nru openssl-3.0.7/debian/po/de.po openssl-3.0.7/debian/po/de.po --- openssl-3.0.7/debian/po/de.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/de.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,119 @@ +# German translation of openssl's debconf templates +# Copyright (C) 2006-2008 Johannes Starosta +# This file is distributed under the same license as the openssl package. +# +msgid "" +msgstr "" +"Project-Id-Version: openssl 0.9.8e-4\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2008-03-24 22:48+0100\n" +"Last-Translator: Johannes Starosta \n" +"Language-Team: German \n" +"Language: de\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "" +"Welche Dienste sollen erneut gestartet werden, damit sie die neuen " +"Bibliotheken verwenden?" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"In dieser Version von OpenSSL wurden Sicherheitsprobleme behoben. Dienste " +"werden diese Aktualisierungen nicht nutzen, bis sie neugestartet werden. " +"Hinweis: Den SSH-Server (sshd) neu zu starten, dürfte keine bestehenden " +"Verbindungen beeinträchtigen." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Es folgt nun eine Liste der erkannten Dienste, die neu gestartet werden " +"sollten. Bitte berichtigen Sie die Liste, falls Sie glauben, dass sie Fehler " +"enthält. Die Namen der Dienste müssen den Namen der Skripte in /etc/init.d " +"entsprechen und werden durch Leerzeichen getrennt. Es wird kein Dienst neu " +"gestartet, falls die Liste leer bleibt." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Falls andere Dienste nach diesem Upgrade ein merkwürdiges Fehlverhalten " +"zeigen, könnte es nötig werden, sie ebenfalls neu zu starten. Es wird " +"empfohlen, den Rechner neu zu starten, um Probleme mit SSL zu vermeiden." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "Neustarten einiger Dienste beim OpenSSL-Upgrade fehlgeschlagen" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Die folgenden Dienste konnten beim Upgrade der OpenSSL-Bibliothek nicht neu " +"gestartet werden:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"Sie werden sie manuell durch Aufruf von »/etc/init.d/ start« starten " +"müssen." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "Dienste bei Paket-Upgrades ohne Rückfrage neu starten?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"Auf Ihrem System sind Dienste installiert, die beim Upgrade bestimmter " +"Bibliotheken, wie Libpam, Libc und Libssl, neu gestartet werden müssen. Da " +"diese Neustarts zu Unterbrechungen der Dienste für dieses System führen " +"können, werden Sie normalerweise bei jedem Upgrade über die Liste der neu zu " +"startenden Dienste befragt. Sie können diese Option wählen, um diese Abfrage " +"zu vermeiden; stattdessen werden alle notwendigen Dienste-Neustarts für Sie " +"automatisch vorgenommen und die Beantwortung dieser Fragen bei jedem Upgrade " +"von Bibliotheken vermieden." diff -Nru openssl-3.0.7/debian/po/el.po openssl-3.0.7/debian/po/el.po --- openssl-3.0.7/debian/po/el.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/el.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,115 @@ +# translation of el.po to Greek +# translation of templates.po to Greek +# +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans# +# Developers do not need to manually edit POT or PO files. +# Konstantinos Margaritis , 2004. +# Vangelis Skarmoutsos , 2017. +# +msgid "" +msgstr "" +"Project-Id-Version: el\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2019-06-20 17:58+0100\n" +"PO-Revision-Date: 2017-07-06 21:00+0300\n" +"Last-Translator: Vangelis Skarmoutsos \n" +"Language-Team: Greek \n" +"Language: el\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: Poedit 2.0.2\n" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" + +#. Type: error +#. Description +#: ../libssl1.1.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.1.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" + +#. Type: error +#. Description +#: ../libssl1.1.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" +"Επανεκκίνηση υπηρεσιών, κατά την διάρκεια αναβάθμισης πακέτων, χωρίς να " +"γίνει ερώτηση;" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"Αυτές είναι εγκατεστημένες υπηρεσίες στο σύστημα σας, που χρειάζεται να " +"επανεκκινηθούν, όταν αναβαθμίζονται συγκεκριμένες βιβλιοθήκες, όπως οι " +"libpam, libc και libssl. Καθώς αυτές οι επανεκκινήσεις μπορούν να " +"προκαλέσουν διακοπές των υπηρεσιών του συστήματος, φυσιολογικά θα ερωτηθείτε " +"σε κάθε αναβάθμιση για την λίστα των υπηρεσιών που επιθυμείτε να " +"επανεκκινήσετε. Μπορείτε να διαλέξετε αυτή την επιλογή για να αποφύγετε να " +"ερωτηθείτε και έτσι όλες οι απαραίτητες επανεκκινήσεις θα γίνουν αυτόματα " +"ώστε να αποφύγετε τις ερωτήσεις για κάθε αναβάθμιση βιβλιοθήκης." diff -Nru openssl-3.0.7/debian/po/es.po openssl-3.0.7/debian/po/es.po --- openssl-3.0.7/debian/po/es.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/es.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,153 @@ +# openssl translation to spanish +# Copyright (C) 2004 Software in the Public Interest +# This file is distributed under the same license as the openssl package. +# +# Changes: +# - Initial translation +# Lucas Wall , 2004 +# +# - Last revision +# Manuel Porras Peralta «Venturi», 2007 +# Maximiliano Marín, 2007 +# Manuel "Venturi" Porras Peralta , 2014. +# +# Traductores, si no conoce el formato PO, merece la pena leer la +# documentación de gettext, especialmente las secciones dedicadas a este +# formato, por ejemplo ejecutando: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# +# Equipo de traducción al español, por favor lean antes de traducir +# los siguientes documentos: +# +# - El proyecto de traducción de Debian al español +# http://www.debian.org/intl/spanish/coordinacion +# especialmente las notas de traducción en +# http://www.debian.org/intl/spanish/notas +# +# - La guía de traducción de po's de debconf: +# /usr/share/doc/po-debconf/README-trans +# o http://www.debian.org/intl/l10n/po-debconf/README-trans +# +# +msgid "" +msgstr "" +"Project-Id-Version: openssl 0.9.7d-3\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2014-12-02 18:29+0100\n" +"Last-Translator: Manuel «Venturi» Porras Peralta \n" +"Language-Team: es \n" +"Language: es\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=2; plural=(n != 1);\n" +"X-Generator: Poedit 1.6.10\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "" +"Servicios que tienen que reiniciarse para que usen las nuevas bibliotecas:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Esta versión de OpenSSL corrige algunos problemas de seguridad. Los " +"servicios no aplicarán estas correcciones hasta que se reinicien. Tenga en " +"cuenta que reiniciar el servicio SSH (sshd) no debería afectar a ninguna de " +"las conexiones existentes." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Compruebe la lista de los servicios detectados que necesitan reiniciarse y " +"corríjala si fuera necesario. Los nombres de los servicios deben ser " +"idénticos a los nombres de los programas de inicio en «/etc/init.d» y deben " +"estar separados por espacios. No se reiniciará ningún servicio si deja la " +"lista en blanco." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Debería reiniciar cualquier servicio que tras haber actualizado, falle " +"inesperadamente. Se recomienda reiniciar el sistema para evitar cualquier " +"problema relacionado con SSL." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "Fallo al reiniciar algunos servicios por la actualización de OpenSSL" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"No fue posible reiniciar los servicios indicados a continuación por la " +"actualización de la biblioteca de OpenSSL: " + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"Tendrá que iniciarlos manualmente ejecutando « /etc/init.d/ start " +"»." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" +"¿Quiere que los servicios se actualicen durante una actualización de paquete " +"sin solicitar confirmación?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"Hay algunos servicios instalados en el sistema que requieren reiniciarse al " +"actualizar paquetes como libpam, libc, y libssl. Ya que reiniciar estos " +"servicios puede provocar una interrupción de servicio del sistema, " +"habitualmente se le solicitará en cada actualización una lista de los " +"servicios que desea reiniciar. Puede seleccionar esta opción para impedir " +"que se le solicite esta información; en su lugar, cada reinicio de servicio " +"se hará de forma automática de forma que evitará que se le planteen " +"preguntas cada vez que se actualice una biblioteca." + +#~ msgid "${services}" +#~ msgstr "${services}" diff -Nru openssl-3.0.7/debian/po/eu.po openssl-3.0.7/debian/po/eu.po --- openssl-3.0.7/debian/po/eu.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/eu.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,114 @@ +# translation of eu.po to Euskara +# Openssl debconf template basque translation +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# +# Piarres Beobide , 2007. +msgid "" +msgstr "" +"Project-Id-Version: eu\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2007-12-21 10:56+0100\n" +"Last-Translator: Piarres Beobide \n" +"Language-Team: Euskara \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" +"Plural-Forms: nplurals=2; plural=(n != 1)\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "" +"Liburutegi berriak erabili ditzaten berrabiarazi behar diren zerbitzuak:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"OpenSSL bertsio honek zenbait segurtasun arazo konpontzen ditu. Zerbitzuak " +"ez dituzte konponketa hauek erabiliko berrabiarazi arte. Kontutan izan SSH " +"zerbitzua berrabiarazteak ez dituela sorturik dauden konexioei eragingo." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Mesedez egiaztatu antzemandako berrabiarazi beharra dute zerbitzuen zerrenda " +"eta zuzendu behar izanez gero. Zerbitzu izenak /etc/init.d-eko abiarazte " +"Script-en berdinak izan behar dira. Zerrenda hutsik utziaz ez da zerbitzurik " +"berrabiaraziko." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Bertsio berritze honen ondoren esperogabe huts egiten duen edozein zerbitzu " +"berrabiarazi egin beharko zenuke. Ostalari osoa berrabiaraztea gomendatzen " +"da SSL inguruko arazoak saihesteko." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "Huts OpenSSL bertsio-berritzerako zerbitzu batzuek berrabiaraztean." + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Hurrengo zerbitzuak ezin izan dira berrabiarazi OpenSSL liburutegi bertsio-" +"berritzerako:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"Eskuz berrabiarazi beharko dituzu '/etc/ init.d/ start' eginez." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" + +#~ msgid "${services}" +#~ msgstr "${services}" diff -Nru openssl-3.0.7/debian/po/fi.po openssl-3.0.7/debian/po/fi.po --- openssl-3.0.7/debian/po/fi.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/fi.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,121 @@ +msgid "" +msgstr "" +"Project-Id-Version: openssl_0.9.8e-8\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2007-12-30 00:00+0200\n" +"Last-Translator: Esko Arajärvi \n" +"Language-Team: Finnish \n" +"Language: fi\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=utf-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Poedit-Language: Finnish\n" +"X-Poedit-Country: FINLAND\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "" +"Palvelut, jotka käynnistetään uudelleen uusien kirjastojen käyttämiseksi:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Tämä OpenSSL:n julkaisu sisältää joitain turvapäivityksiä. Palvelut eivät " +"käytä näitä päivityksiä ennen kuin ne on käynnistetty uudelleen. Huomaa, " +"että SSH-palvelimen (sshd) uudelleenkäynnistyksen ei pitäisi vaikuttaa " +"olemassa oleviin yhteyksiin." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Tarkista alla oleva lista löydetyistä palveluista, jotka pitää käynnistää " +"uudelleen, ja korjaa sitä tarvittaessa. Palveluiden nimien pitää täsmätä " +"hakemistossa /etc/init.d olevien alustustiedostojen nimiin ja olla " +"välilyönnein eroteltuja. Jos lista on tyhjä, mitään palveluita ei " +"käynnistetä uudelleen." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Palvelut, joissa esiintyy odottamattomia häiriöitä päivityksen jälkeen " +"tulisi käynnistää uudelleen. On suositeltavaa käynnistää kone uudelleen SSL:" +"än liittyvien ongelmien välttämiseksi." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "" +"Joidenkin palveluiden käynnistäminen uudelleen OpenSSL:n päivityksen " +"yhteydessä epäonnistui." + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Seuraavia palveluita ei voitu käynnistää uudelleen päivitettäessä OpenSSL-" +"kirjasto:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"Nämä tarvitsee käynnistää käsin ajamalla ”/etc/init.d/ start”." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" +"Käynnistetäänkö palvelut kysymättä uudelleen pakettien päivityksen " +"yhteydessä?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"Järjestelmässäsi on asennettuna palveluita, jotka tulee käynnistää uudelleen " +"päivitettäessä tiettyjä ohjelmakirjastoja, kuten libpam, libc ja libssl. " +"Koska palveluiden uudelleenkäynnistys saattaa aiheuttaa katkoja palveluihin, " +"kunkin päivityksen yhteydessä yleensä kysytään luetteloa käynnistettävistä " +"palveluista. Voit valita tämän vaihtoehdon, jos et halua nähdä kysymystä " +"jokaisen kirjastopäivityksen yhteydessä. Tällöin tarvittavat palvelut " +"käynnistetään uudelleen automaattisesti." + +#~ msgid "${services}" +#~ msgstr "${services}" diff -Nru openssl-3.0.7/debian/po/fr.po openssl-3.0.7/debian/po/fr.po --- openssl-3.0.7/debian/po/fr.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/fr.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,128 @@ +# +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans# +# Developers do not need to manually edit POT or PO files. +# +msgid "" +msgstr "" +"Project-Id-Version: openssl_0.9.8e-4\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2007-11-11 18:47+0100\n" +"Last-Translator: Michel Grentzinger \n" +"Language-Team: French \n" +"Language: fr\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "Services à redémarrer afin d'utiliser les nouvelles bibliothèques :" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Cette version d'OpenSSL corrige certaines failles de sécurité. Les services " +"n'utiliseront pas ces correctifs tant qu'ils n'auront pas été redémarrés. " +"Veuillez noter que le redémarrage du serveur SSH (sshd) n'affectera aucune " +"connexion existante." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Veuillez vérifier et corriger si nécessaire la liste des services devant " +"être redémarrés. Les noms des services doivent être identiques aux noms des " +"scripts présents dans /etc/init.d et doivent être séparés par des espaces. " +"Si la liste est vide, aucun service ne sera redémarré." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Si d'autres services ne fonctionnent plus correctement après cette mise à " +"jour, ils devront être redémarrés. Il est fortement recommandé de redémarrer " +"le système pour éviter les problèmes liés à SSL." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "" +"Impossible de redémarrer certains services lors de la mise à jour d'OpenSSL" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Les services suivants ne peuvent pas être redémarrés lors de la mise à jour " +"de la bibliothèque OpenSSL :" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"Vous devrez les redémarrer vous-même avec la commande « /etc/init.d/" +" start »." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" +"Redémarrer inconditionnellement les services lors des mises à niveau de " +"paquets ?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"Certains services installés sur le système doivent être redémarrés lorsque " +"certaines bibliothèques, comme libpam, libc ou libssl, sont mises à niveau. " +"Comme ces redémarrages peuvent conduire à une interruption du service, le " +"choix de les redémarrer ou non est en général offert lors de ces mises à " +"niveau. Vous pouvez choisir ici que ce choix ne soit plus offert et que les " +"redémarrages aient lieu systématiquement lors des mises à niveau de " +"bibliothèques." + +#~ msgid "${services}" +#~ msgstr "${services}" diff -Nru openssl-3.0.7/debian/po/gl.po openssl-3.0.7/debian/po/gl.po --- openssl-3.0.7/debian/po/gl.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/gl.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,108 @@ +# Galician translation of openssl's debconf templates. +# This file is distributed under the same license as the openssl package. +# Jacobo Tarrio , 2006, 2007, 2008. +# +msgid "" +msgstr "" +"Project-Id-Version: openssl\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2008-05-13 00:08+0100\n" +"Last-Translator: Jacobo Tarrio \n" +"Language-Team: Galician \n" +"Language: gl\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "Servizos a reiniciar para facer que empreguen as novas bibliotecas:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Esta versión de OpenSSL arranxa algúns fallos de seguridade. Os servizos non " +"han ter eses fallos arranxados ata que se reinicien. Teña en conta que " +"reiniciar o servidor de SSH (sshd) non debería afectar a ningunha conexión " +"existente." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Verifique a lista de servizos detectados que hai que reiniciar e corríxaa se " +"é preciso. Os nomes dos servizos deben ser idénticos aos nomes dos scripts " +"de inicialización de /etc/init.d e deben ir separados por espazos. Non se ha " +"reiniciar ningún servizo se a lista está baleira." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Tamén se debería reiniciar calquera servizo que falle de xeito inesperado " +"trala actualización. Recoméndase reiniciar esta máquina para evitar " +"experimentar problemas relacionados con SSL." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "Problemas ao reiniciar algúns servizos para a actualización de OpenSSL" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Non se puido reiniciar os seguintes servizos para a actualización da " +"biblioteca OpenSSL:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"Ha ter que reinicialos manualmente executando \"/etc/init.d/ start" +"\"." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" diff -Nru openssl-3.0.7/debian/po/hu.po openssl-3.0.7/debian/po/hu.po --- openssl-3.0.7/debian/po/hu.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/hu.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,101 @@ +# SZERVÁC Attila , +# Dr. Nagy Elemér Károly , 2013. +# +msgid "" +msgstr "" +"Project-Id-Version: glibc\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2019-06-20 17:58+0100\n" +"PO-Revision-Date: 2013-05-14 18:47+0200\n" +"Last-Translator: Dr. Nagy Elemér Károly \n" +"Language-Team: Hungarian \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: UTF-8\n" +"Plural-Forms: ???\n" +"X-Poedit-Language: Hungarian\n" +"X-Poedit-Country: HUNGARY\n" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" + +#. Type: error +#. Description +#: ../libssl1.1.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.1.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" + +#. Type: error +#. Description +#: ../libssl1.1.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "A csomag frissítésekor kérdés nélkül újraindítsam a szolgáltatásokat?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"Ezen a rendszeren olyan szolgáltatások vannak telepítve, amelyeket újra kell " +"indítani, bizonyos könyvtárak (mint a libpam, libc, libssl) frissítésekor. " +"Mivel ezek az újraindítások megszakítják a szolgáltatásokat, alapesetben " +"minden frissítésnél megkérdezi az újraindítandó szolgáltatások listáját a " +"rendszer. Dönthetsz úgy, hogy ne kérdezzen - ilyenkor minden szükséges " +"szolgáltatás-újraindítást elvégez a rendszer és nem kérdezget." diff -Nru openssl-3.0.7/debian/po/it.po openssl-3.0.7/debian/po/it.po --- openssl-3.0.7/debian/po/it.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/it.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,117 @@ +# openssl po-debconf translation to Italian (it) +# Copyright (C) 2006 Software in the Public Interest +# This file is distributed under the same license as the openssl package. +# Luca Monducci , 2006-2008. +# Giuseppe Sacco , 2007 +# +msgid "" +msgstr "" +"Project-Id-Version: openssl 0.9.8g italian debconf templates\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2008-01-19 21:17+0100\n" +"Last-Translator: Luca Monducci \n" +"Language-Team: Italian \n" +"Language: it\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "Servizi da riavviare per l'uso delle nuove librerie:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Questo rilascio di OpenSSL corregge alcuni problemi legati alla sicurezza, " +"ma i servizi non utilizzeranno queste correzioni finché non verranno " +"riavviati. Notare che il riavvio del server SSH (sshd) non ha effetti sulle " +"connessioni attive." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Controllare ed eventualmente correggere l'elenco dei servizi che devono " +"essere riavviati. Il nome dei servizi, separati da spazi, devono essere gli " +"stessi degli script di inizializzazione che si trovano in /etc/init.d. Se " +"l'elenco è vuoto non verrà riavviato nessun servizio." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Qualsiasi servizio che si bloccasse in maniera imprevista dopo questo " +"aggiornamento dovrà essere riavviato. Si consiglia di riavviare la macchina " +"per evitare qualsiasi problema legato a SSL." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "Errore nel riavvio di alcuni servizi per l'aggiornamento di OpenSSL" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Non è stato possibile riavviare i seguenti servizi per l'aggiornamento di " +"OpenSSL:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"È necessario avviarli manualmente con \"/etc/init.d/ start\"." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "Riavviare i servizi durante l'aggiornamento senza chiedere conferma?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"Sul proprio sistema sono installati dei servizi che devono essere riavviati " +"dopo l'aggiornamento di determinate librerie, quali libpam, libc e libssl. " +"Poiché questi riavvii possono causare delle interruzioni dei servizi offerti " +"dal sistema normalmente, a ogni aggiornamento, viene mostrato l'elenco dei " +"servizi e viene chiesto di confermarne il riavvio. È possibile evitare che " +"sia chiesta la conferma del riavvio accettando questa opzione; saranno " +"effettuati automaticamente tutti i riavvii necessari senza fare domande per " +"ogni aggiornamento della libreria." diff -Nru openssl-3.0.7/debian/po/ja.po openssl-3.0.7/debian/po/ja.po --- openssl-3.0.7/debian/po/ja.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/ja.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,109 @@ +msgid "" +msgstr "" +"Project-Id-Version: openssl 0.9.8e-4\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2008-01-22 07:37+0900\n" +"Last-Translator: Hideki Yamane (Debian-JP) \n" +"Language-Team: Japanese \n" +"Language: ja\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "新しいライブラリを使うために再起動するサービス:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"OpenSSL は、今回のリリースでセキュリティホールが修正されました。各サービスは" +"再起動を行わないと、この修正されたライブラリを利用しません。注意: SSH サーバ " +"(sshd) を再起動しても、現状の接続には何ら影響しません。" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"再起動が必要だと判断されたサービスのリストを確認してください。必要であれば修" +"正してください。サービス名は /etc/init.d にあるスクリプトの名前を指し、空白で" +"区切る必要があります。リストが空の場合は、どのサービスも再起動されません。" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"他のサービスがここでのアップグレードの後に何故かエラーを起こし始めた場合、そ" +"れらも再起動する必要があります。SSL 関連のトラブルを避けるためには、マシンを" +"再起動するのをお勧めします。" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "OpenSSL のアップグレードによって再起動に失敗したサービス" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"以下のサービスは OpenSSL ライブラリのアップグレードに伴った再起動を行うことが" +"できませんでした。" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"開始するには '/etc/init.d/ start' を手動で実行する必要があります。" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" +"パッケージのアップグレード中、質問することなくサービスを再起動しますか?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"このシステムには、libpam や libc、libssl といった特定のライブラリがアップグ" +"レードされたときに再起動を必要とするサービスがインストールされています。この" +"再起動はそのシステムで動作しているサービスの中断を伴う可能性があるため、通常" +"は再起動させるサービス一覧をアップグレードの度に質問します。このオプションを" +"選択するとその質問を避けられます。代わりに、再起動が必要な場合は全て自動で再" +"起動させるため、ライブラリをアップグレードする度に質問されるのを避けられま" +"す。" diff -Nru openssl-3.0.7/debian/po/ko.po openssl-3.0.7/debian/po/ko.po --- openssl-3.0.7/debian/po/ko.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/ko.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,104 @@ +# Korean translations for openssl package +# openssl 패키지에 대한 한국어 번역문. +# Copyright (C) 2007 THE openssl'S COPYRIGHT HOLDER +# This file is distributed under the same license as the openssl package. +# Sunjae Park , 2007. +# +msgid "" +msgstr "" +"Project-Id-Version: openssl\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2007-04-11 13:43-0400\n" +"Last-Translator: Sunjae Park \n" +"Language-Team: Korean \n" +"Language: ko\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=1; plural=0;\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "새 라이브러리를 사용하도록 재시작할 서비스 목록:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"이번 OpenSSL 릴리즈는 보안 문제를 몇 개 해결합니다. 서비스들을 재시작시킬 때" +"까지는 이 문제들이 해결되지 않습니다. 참고로 SSH 서버(sshd)를 재시작시키더라" +"도 기존 연결에는 영향을 주지 않을 것입니다." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"재시작시킬 서비스의 목록을 확인하시고 필요할 경우 목록을 수정하십시오. 서비스" +"의 이름들은 /etc/init.d에 있는 초기화 스크립트의 이름과 같아야 하며 빈칸으로 " +"구분되어야 합니다. 목록이 비어있을 경우에는 서비스를 재시작시키지 않습니다." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"이 업그레이드를 적용한 후 갑자기 오동작을 하는 서비스는 재시작시키십시오. " +"SSL 관련된 문제가 없도록 이 호스트를 재부팅하시길 권장합니다." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" diff -Nru openssl-3.0.7/debian/po/lt.po openssl-3.0.7/debian/po/lt.po --- openssl-3.0.7/debian/po/lt.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/lt.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,124 @@ +# translation of openssl_0.9.8b-2_templates.po to Lithuanian +# opensll debconf translation templates. +# Copyright (C) 2003 Christoph Martin +# This file is distributed under the same license as the openssl package. +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry'# +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans# +# Developers do not need to manually edit POT or PO files. +# +# Gintautas Miliauskas , 2006. +msgid "" +msgstr "" +"Project-Id-Version: openssl_0.9.8b-2_templates\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2006-06-19 01:32+0300\n" +"Last-Translator: Gintautas Miliauskas \n" +"Language-Team: Lithuanian \n" +"Language: lt\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.2\n" +"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && (n" +"%100<10 || n%100>=20) ? 1 : 2);\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +#, fuzzy +msgid "Services to restart to make them use the new libraries:" +msgstr "" +"Kuriuos servisus norėtumėte paleisti iš naujo, kad jie naudotų naujas " +"bibliotekas?" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +#, fuzzy +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Šioje versijoje ištaisytos saugumo skylės. Servisai nenaudos šių pataisymų, " +"kol nebus iš naujo paleisti. Pastaba: sshd paleidimas iš naujo neturėtų " +"turėti įtakos esamiems prisijungimams." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +#, fuzzy +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Pateiktas servisų, kuriuos reikėtų paleisti iš naujo, sąrašas. Jei matote " +"klaidų, sąrašą pataisykite. Servisų vardai turi būti identiški atitinkamų " +"paleidžiamųjų failų /etc/init.d kataloge vardams ir turi būti atskirti " +"tarpais. Jei sąrašą paliksite tuščią, nė vienas servisas nebus iš naujo " +"paleistas." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +#, fuzzy +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Jei kiti servisai po šio atnaujinimo sutriks, gali reikėti ir juos paleisti " +"iš naujo. Rekomenduojame perkrauti sistemą, jei norite išvengti problemų, " +"susijusių su SSL." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" diff -Nru openssl-3.0.7/debian/po/ml.po openssl-3.0.7/debian/po/ml.po --- openssl-3.0.7/debian/po/ml.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/ml.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,106 @@ +# English translation of openssl. +# Copyright (C) 2007 THE openssl'S COPYRIGHT HOLDER +# This file is distributed under the same license as the openssl package. +# Praveen|പ്രവീണ്‍ A|എ , 2007. +# +# +msgid "" +msgstr "" +"Project-Id-Version: openssl 20070415\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2007-04-14 07:15+0530\n" +"Last-Translator: Praveen|പ്രവീണ്‍ A|എ \n" +"Language-Team: Swathanthra|സ്വതന്ത്ര Malayalam|മലയാളം Computing|കമ്പ്യൂട്ടിങ്ങ് \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "പുിതിയ ലൈബ്രറികള്‍ ഉപയോഗിയ്ക്കാന്‍ പുനരാരംഭിയ്ക്കേണ്ട സേവനങ്ങള്‍:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"OpenSSL ന്റെ ഈ പതിപ്പ് ചില സുരക്ഷാ പ്രശ്നങ്ങളെ പരിഹരിയ്ക്കുന്നുണ്ട്. പുനരാരംഭിയ്ക്കുന്നത് വരെ " +"സേവനങ്ങള്‍ ഈ പരിഹാരങ്ങള്‍ ഉപയോഗിയ്ക്കുന്നതല്ല. SSH സേവകന്‍ (sshd) പുനരാരംഭിയ്ക്കുന്നത് " +"നേരത്തെയുള്ള ബന്ധങ്ങളെ ബാധിയ്ക്കുകയില്ല." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"ദയവായി പുനരാരംഭിയ്ക്കേണ്ടതായി കണ്ടുപിടിയ്ക്കപ്പെട്ട സേവനങ്ങളുടെ പട്ടിക ദയവായി " +"പരിശോദിയ്ക്കുകയും ആവശ്യമെങ്കില്‍ തിരുത്തുകയും ചെയ്യുക. സേവന നാമങ്ങള്‍ /etc/init.d യിലെ ആരംഭ " +"സ്ക്രിപ്റ്റ് നാമങ്ങളുമായി സമാനമായിരിയ്ക്കുയും സ്പേയ്സുകള്‍ കൊണ്ട് " +"വേര്‍തിരിയ്ക്കപ്പെട്ടവയുമായിരിയ്ക്കണം. പട്ടിക ശൂന്യമാണെങ്കില്‍ സേവനങ്ങളൊന്നും പുനരാരംഭിയ്ക്കുന്നതല്ല." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"ഈ പുതുക്കലിന് ശേഷം പിന്നീട് അപ്രതീക്ഷിതമായി മുടങ്ങുന്ന ഏതൊരു സേവനങ്ങളേയും " +"പുനരാരംഭിയ്ക്കേണ്ടതുണ്ട്. SSL ലുമായി ബന്ധപ്പെട്ട പ്രശ്നം ഒഴിവാക്കാന്‍ ഈ ഹോസ്റ്റിനെ " +"പുനരാരംഭിയ്ക്കാന്‍ ശുപാര്‍ശ ചെയ്തിരിയ്ക്കുന്നു." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" diff -Nru openssl-3.0.7/debian/po/nb.po openssl-3.0.7/debian/po/nb.po --- openssl-3.0.7/debian/po/nb.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/nb.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,117 @@ +# translation of openssl_0.9.8c-4_templates.po to Norwegian Bokmål +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# +# Bjørn Steensrud , 2007. +# Bjørn Steensrud , 2011. +msgid "" +msgstr "" +"Project-Id-Version: openssl_0.9.8c-4_templates\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2011-12-29 14:19+0100\n" +"Last-Translator: Bjørn Steensrud \n" +"Language-Team: Norwegian Bokmål \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: Lokalize 1.2\n" +"Plural-Forms: nplurals=2; plural=n != 1;\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "" +"Tjenester som skal startes på nytt slik at de bruker de nye bibliotekene." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Denne utgaven av OpenSSL retter noen sikkerhetsproblemer. Tjenester kan ikke " +"bruke disse rettelsene før de er startet på nytt. Merk: om sshd startes på " +"nytt blir antakelig ingen eksisterende tilkoblinger påvirket." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Kontroller lista over funne tjenester som trenger omstart. Rett på lista om " +"den er feil. Tjenestenavnene må være lik skript-navnene i /etc/init.d, og " +"være atskilt med mellomrom. Hvis du tømmer lista blir ingen tjenester " +"omstartet." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Hvis andre tjenester begynner å svikte på mystisk måte etter denne " +"oppgraderingen, så blir det anbefalt at maskinen stoppes og startes for å " +"unngå vansker i forbindelse med SSL." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "Noen tjenester kunne ikke restartes for OpenSSL-oppgradering" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Følgende tjenester kunne ikke restartes for oppgradering av OpenSSL-" +"biblioteket:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "Du må starte disse manuelt ved å kjøre «/etc/init.d/ start»." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "Skal tjenester restartes uten spørsmål under pakkeoppgraderinger?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"På systemet ditt finnes det tjenester som må startes på nytt når visse " +"biblioteker, slik som libpam, libc og libssl, oppgraderes. Slike omstarter " +"kan avbryte tjenester på systemet, og normalt blir du spurt ved hver " +"oppgradering om hvilke tjenester du vil starte på nytt. Du kan slå på dette " +"valget for å slippe å bli spurt, da blir i stedet alle nødvendige omstarter " +"gjort automatisk slik at du ikke får spørsmål ved hver " +"biblioteksoppgradering." diff -Nru openssl-3.0.7/debian/po/nl.po openssl-3.0.7/debian/po/nl.po --- openssl-3.0.7/debian/po/nl.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/nl.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,130 @@ +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans +# +# Developers do not need to manually edit POT or PO files. +# +msgid "" +msgstr "" +"Project-Id-Version: openssl\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2007-11-14 20:03+0100\n" +"Last-Translator: Bart Cornelis \n" +"Language-Team: debian-l10n-dutch \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=utf-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Poedit-Language: Dutch\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "" +"Welke diensten moeten herstart worden (zodat ze de nieuwe bibliotheken " +"gebruiken)?" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Deze uitgave van OpenSSL dicht een aantal veiligheidslekken. Andere " +"achtergronddiensten maken pas gebruik van de nieuwe versie eens ze herstart " +"zijn. Herstarten van de SSH-server (sshd) heeft normaal geen gevolgen voor " +"bestande verbindingen." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Hierna volgt een lijst van gedetecteerde diensten die herstart moeten " +"worden. Verbeter de lijst, als u denkt dat ze incorrect is. De namen moeten " +"overeenkomen met de script-namen in /etc/init.d en moeten gescheiden worden " +"door spaties. Als de lijst leeg is worden er geen diensten herstart." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Als er andere diensten mysterieus beginnen te falen na deze opwaardering, " +"dient u deze te herstarten. Er wordt u ten zeerste aanbevolen uw machine te " +"herstarten om SSL-gerelateerde problemen te vermijden." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "Herstarten van sommige diensten na de OpenSSL-opwaardering is mislukt." + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"De volgende diensten konden niet herstart worden na de opwaardering van de " +"OpenSSL-bibliotheek:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"U zult deze handmatig moeten herstarten via het commando '/etc/init.d/" +" start'." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "Diensten zonder vragen herstarten bij het opwaarderen van pakketten?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"Er zijn diensten op uw systeem geïnstalleerd die moeten worden herstart " +"wanneer bepaalde bibliotheken, zoals libpam, libc en libssl, worden " +"opgewaardeerd. Omdat deze herstarts dienstonderbrekingen op uw systeem " +"kunnen veroorzaken, wordt u normaal gesproken bij elke opwaardering gevraagd " +"welke diensten u wilt herstarten. Als u voor deze optie kiest wordt dit niet " +"meer aan u gevraagd. In plaats daarvan worden alle noodzakelijke herstarts " +"automatisch gedaan zodat u geen vragen krijgt bij elke opwaardering van een " +"bibliotheek." + +#~ msgid "${services}" +#~ msgstr "${services}" diff -Nru openssl-3.0.7/debian/po/pl.po openssl-3.0.7/debian/po/pl.po --- openssl-3.0.7/debian/po/pl.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/pl.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,120 @@ +# Copyright (C) 2010 +# This file is distributed under the same license as the openssl package. +# +# Michał Kułach , 2012. +msgid "" +msgstr "" +"Project-Id-Version: \n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2012-01-31 18:52+0100\n" +"Last-Translator: Michał Kułach \n" +"Language-Team: Polish \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: Lokalize 1.2\n" +"Plural-Forms: nplurals=3; plural=(n==1 ? 0 : n%10>=2 && n%10<=4 && (n%100<10 " +"|| n%100>=20) ? 1 : 2);\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "" +"Usługi które mają być zrestartowane, aby mogły używać nowych bibliotek:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"To wydanie OpenSSL naprawia kilka problemów bezpieczeństwa. Usługi nie będą " +"mogły skorzystać z tych poprawek, dopóki nie zostaną zrestartowane. Proszę " +"zauważyć, że zrestartowanie serwera SSH (sshd) nie powinno mieć wpływu na " +"istniejące połączenia." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Proszę sprawdzić listę wykrytych usług, które powinny zostać zrestartowane, " +"i poprawić ją, jeśli to konieczne. Nazwy usług muszą się zgadzać z nazwami " +"skryptów startowych w /etc/init.d i muszą być rozdzielone spacjami. Jeśli " +"lista będzie pusta, żadne usługi nie zostaną zrestartowane." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Każda usługa w której wystąpi nieoczekiwany błąd po tej aktualizacji, " +"powinna zostać zrestartowana. Zaleca się ponowne uruchomienie komputera, co " +"umożliwi uniknięcie wszystkich problemów związanych z SSL." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "" +"Zrestartowanie niektórych usług podczas aktualizacji OpenSSL nie powiodło się" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Następujące usługi nie mogły zostać zrestartowane w celu aktualizacji " +"biblioteki OpenSSL:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"Należy zrestartować te usługi ręcznie, przez wykonanie \"/etc/init.d/" +" start\"" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "Zrestartować usługi podczas aktualizacji pakietu bez pytania?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"Niektóre z zainstalowanych usług wymagają restartu, gdy są aktualizowane " +"określone biblioteki (np. libpam, libc i libss1). Ponieważ restarty mogą " +"spowodować przerwanie tych usług, użytkownik jest zwykle pytany podczas " +"każdej aktualizacji o listę usług, które chce zrestartować. Można wybrać tę " +"opcję, aby zapobiec takim pytaniom; wtedy wszystkie potrzebne restarty " +"odbędą się automatycznie, a użytkownik uniknie pytania przy każdej " +"aktualizacji biblioteki." diff -Nru openssl-3.0.7/debian/po/pt_BR.po openssl-3.0.7/debian/po/pt_BR.po --- openssl-3.0.7/debian/po/pt_BR.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/pt_BR.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,131 @@ +# +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans +# +# Developers do not need to manually edit POT or PO files. +# Flamarion Jorge , 2010. +# +msgid "" +msgstr "" +"Project-Id-Version: openssl\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2010-07-18 15:03-0300\n" +"Last-Translator: Flamarion Jorge \n" +"Language-Team: Brazilian Portuguese \n" +"Language: pt_BR\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=2; plural=(n > 1);\n" +"pt_BR utf-8\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "" +"Serviços a serem reiniciados para que possam utilizar as novas bibliotecas:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Esta versão do OpenSSL corrige alguns problemas de segurança. Os serviços " +"não utilizarão essas correções até que sejam reiniciados. Por favor, note " +"que reiniciar o servidor SSH (sshd) não deve afetar nenhuma conexão " +"existente." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Por favor, confira a lista de serviços detectados que precisam ser " +"reiniciados e a corrija, caso necessário. Os nomes dos serviços devem ser " +"idênticos aos nomes dos scripts de inicialização em /etc/init.d e devem ser " +"separados por espaços. Nenhum serviço será reiniciado caso a lista esteja " +"vazia." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Qualquer serviço que falhar inesperadamente após esta atualização deverá ser " +"reiniciado. É recomendado reinicializar este host para evitar qualquer " +"problema relacionado a SSL." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "Falha ao reiniciar alguns serviços para a atualização do OpenSSL" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Os seguintes serviços não puderam ser reiniciados para a atualização da " +"biblioteca OpenSSL:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"Você terá que iniciá-los manualmente executando '/etc/init.d/ " +"start'." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "Reiniciar serviços durante a atualização de pacotes sem perguntar?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"Existem serviços instalados no seu sistema que precisam ser reiniciados " +"quando determinadas bibliotecas, tais como libpam, libc e libssl são " +"atualizadas. Uma vez que essas reinicializações podem causar interrupções de " +"serviços para o sistema, normalmente você terá que responder a cada " +"atualização qual será a lista de serviços que quiser reiniciar. Você pode " +"escolher esta opção para evitar novas solicitações; ao invés disso, todas as " +"reinicializações necessárias serão realizadas automaticamente, para evitar " +"que você responda a cada atualização de biblioteca." diff -Nru openssl-3.0.7/debian/po/pt.po openssl-3.0.7/debian/po/pt.po --- openssl-3.0.7/debian/po/pt.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/pt.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,115 @@ +# Portuguese translation for openssl's debconf messages +# Copyright (C) 2007, Carlos Lisboa +# This file is distributed under the same license as the openssl package. +# Carlos Lisboa , 2007. +# +msgid "" +msgstr "" +"Project-Id-Version: openssl\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2008-04-10 20:36+0100\n" +"Last-Translator: Carlos Lisboa \n" +"Language-Team: Portuguese \n" +"Language: pt\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "Serviços a reiniciar para que usem as novas bibliotecas:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Este lançamento do OpenSSL resolve alguns problemas de segurança. Os " +"serviços podem não usar as correcções até que sejam reiniciados. Note que " +"reiniciar o servidor SSH (sshd) não deve afectar quaisquer ligações " +"existentes." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Por favor verifique a lista de serviços detectados que necessitam de ser " +"reiniciados e corrija-a, se necessário. Os nomes dos serviços devem ser " +"idênticos aos nomes dos scripts de inicialização em /etc/init.d e separados " +"por espaços. Nennhum serviço será reiniciado se a lista estiver vazia." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Qualquer serviço que mais tarde falhe de forma inesperada após esta " +"actualização deverá ser reiniciado. É recomendado que reinicie este " +"computador para evitar qualquer problema relacionado como SSL." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "Falha ao reiniciar alguns serviços para a actualização do OpenSSL" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Os seguintes serviços não poderam ser reiniciados para a actualização da " +"biblioteca OpenSSL:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"Terá que iniciá-los manualmente correndo '/etc/init.d/ start'." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "Reiniciar serviços sem perguntar durante a actualização do pacote?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"Há serviços instalados no seu sistema que necessitam de ser reiniciados " +"quando são actualizadas certas bibliotecas, como libpam, libc e libssl. Uma " +"vez que estes reinícios podem causar interrupção de serviços no sistema, é-" +"lhe normalmente perguntado em cada actualização que serviços deseja " +"reiniciar. Pode escolher esta opção para que os reinícios necessários sejam " +"automaticamente tratados pelo processo de actualização em vez de lhe serem " +"colocadas questões." diff -Nru openssl-3.0.7/debian/po/ro.po openssl-3.0.7/debian/po/ro.po --- openssl-3.0.7/debian/po/ro.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/ro.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,115 @@ +# translation of ro.po to Romanian +# Romanian translation of openssl. +# Copyright (C) 2006 THE openssl'S COPYRIGHT HOLDER +# This file is distributed under the same license as the openssl package. +# +# Stan Ioan-Eugen , 2006. +# Eddy Petrișor , 2007, 2008. +msgid "" +msgstr "" +"Project-Id-Version: ro\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2008-06-30 02:26+0300\n" +"Last-Translator: Eddy Petrișor \n" +"Language-Team: Romanian \n" +"Language: ro\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" +"Plural-Forms: nplurals=3; plural=n==1 ? 0 : (n==0 || (n%100 > 0 && n%100 < " +"20)) ? 1 : 2;\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "Serviciile repornite pentru a asigura folosirea noilor biblioteci:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Cu această nouă versiune s-au rezolvat probleme de securitate. Serviciile nu " +"vor folosi aceste îmbunătățiri dacă nu sunt repornite. A se reține că " +"repornirea serverului SSH (sshd) nu ar trebui să afecteze conexiunile deja " +"existente." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Verificați și corectați, dacă este nevoie, lista cu serviciile detectate " +"care ar trebui repornite. Numele serviciilor trebuie să fie identice cu " +"numele scripturilor de inițializare din /etc/init.d și trebuie să fie " +"separate prin spații. Dacă lista este goală, nu va fi repornit nici un " +"serviciu." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Orice alt serviciu care prezintă probleme neașteptate după această " +"actualizare, ar trebui repornit. Recomandăm să reporniți calculatorul pentru " +"a evita probleme legate de SSL." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "Eșec la repornirea unor servicii pentru actualizarea lui OpenSSL" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Următoarele servicii nu au putut fi repornite pentru actualizarea " +"bibliotecii OpenSSL:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"Va trebui să le porniți manual cu o comandă de tipul „/etc/init.d/ " +"start'." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" diff -Nru openssl-3.0.7/debian/po/ru.po openssl-3.0.7/debian/po/ru.po --- openssl-3.0.7/debian/po/ru.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/ru.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,119 @@ +# translation of openssl_0.9.8g-10.1_ru.po to Russian +# This file is distributed under the same license as the PACKAGE package. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER. +# +# Yuriy Talakan' , 2006. +# Yuriy Talakan' , 2007. +# Yuri Kozlov , 2008. +msgid "" +msgstr "" +"Project-Id-Version: openssl 0.9.8g-10.1\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2008-06-03 21:21+0400\n" +"Last-Translator: Yuri Kozlov \n" +"Language-Team: Russian \n" +"Language: ru\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" +"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n" +"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "Перезапускаемые службы для использования новой библиотеки:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Этот выпуск OpenSSL исправляет некоторые проблемы безопасности. Службы не " +"могут использовать эти исправления, пока не будут перезапущены. Обратите " +"внимание, что перезапуск сервера SSH (sshd) не повлияет на существующие " +"соединения." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Проверьте список обнаруженных служб, которые надо перезапустить и поправьте " +"его, если необходимо. Имена служб должны соответствовать именам сценариев " +"запуска в /etc/init.d и должны быть разделены пробелами. Если список пустой, " +"службы не будут перезапущены." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Надо перезапустить любую службу, которая после этого обновления неожиданно " +"начнёт работать с ошибками. Рекомендуется перегрузить машину во избежание " +"проблем, связанных с SSL." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "Не удалось перезапустить некоторые службы при обновлении OpenSSL" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Следующие службы не удалось перезапустить при обновлении библиотеки OpenSSL:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"Вам нужно будет перезапустить их вручную с помощью команд '/etc/init.d/" +"<служба> start'." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "Перезапускать службы при обновлении пакета без подтверждения?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"В системе установлены службы, которые требуют перезапуска после обновления " +"определённых библиотек (например, libpam, libc и libssl). Так как это может " +"вызвать перерыв в работе службы, то обычно при каждом обновлении " +"запрашивается подтверждение списка служб, которые нужно перезапустить. Чтобы " +"этот вопрос не задавался, вы можете ответить утвердительно; в этом случае " +"все необходимые службы будут перезапущены автоматически." diff -Nru openssl-3.0.7/debian/po/sk.po openssl-3.0.7/debian/po/sk.po --- openssl-3.0.7/debian/po/sk.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/sk.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,113 @@ +msgid "" +msgstr "" +"Project-Id-Version: openssl 0.9.8e-5\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2008-01-21 11:41+0100\n" +"Last-Translator: Ivan Masár \n" +"Language-Team: Slovak \n" +"Language: sk\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=utf-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "Služby, ktoré sa majú reštartovať, aby začali používať nové knižnice:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Táto verzia OpenSSL opravuje niektoré bezpečnostné problémy. Služby nezačnú " +"používať tieto opravy až pokým nebudú reštartované. Prosím, pamätajte, že " +"reštartovanie SSH servera (sshd) by nemalo mať vplyv na žiadne už nadviazané " +"spojenia." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Prosím, skontrolujte zoznam zistených služieb, ktoré sa majú reštartovať a " +"ak je to potrebné, opravte ho. Názvy služieb musia byť rovnaké ako názvy " +"inicializačných skriptov v /etc/init.d a oddelené medzerami. Ak tento zoznam " +"bude prázdny, žiadne služby sa nebudú reštartovať." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Každá služba, ktorá po vykonaní tejto aktualizácie zlyhá, by mala byť " +"reštartovaná. Odporúča sa reštartovať tento počítač, aby ste sa vyhli " +"akýmkoľvek problémom týkajúcim sa SSL." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "" +"Počas aktualizácie knižnice OpenSSL sa nepodarilo sa reštartovať niektoré " +"služby." + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Nasledovné služby nebolo možné reštartovať počas aktualizácie knižnice " +"OpenSSL:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"Budete ich musieť reštartovať ručne spustením „/etc/init.d/ start“." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "Reštartovať služby počas aktualizácie balíka bez pýtania sa?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"Na vašom systéme sú nainštalované služby, ktoré je potrebné reštartovať pri " +"aktualizácii určitých knižníc ako libpam, libc, a libssl. Keďže tieto " +"reštarty môžu spôsobiť prerušenie služby systému, za bežných okolností sa " +"vám systém správy balíkov pri každej aktualizácii ponúkne zoznam služieb, " +"ktoré chcete reštartovať. Môžete zvoliť, aby sa vás systém správy balíkov už " +"viac nepýtal, ale aby sa namiesto toho všetky potrebné reštarty vykonávali " +"automaticky, takže sa vyhnete kladeniu otázok pri každej aktualizácii " +"knižnice." diff -Nru openssl-3.0.7/debian/po/sv.po openssl-3.0.7/debian/po/sv.po --- openssl-3.0.7/debian/po/sv.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/sv.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,126 @@ +# translation of openssl_0.9.8g-10_sv.po to swedish +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans +# Developers do not need to manually edit POT or PO files. +# +# Martin Bagge , 2008. +msgid "" +msgstr "" +"Project-Id-Version: openssl_0.9.8g-10_sv\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2008-05-23 00:17+0200\n" +"Last-Translator: Martin Bagge \n" +"Language-Team: swedish \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=ISO-8859-1\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "" +"Tjnster som ska startas om fr att f dem att anvnda de nya biblioteken:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Den hr utgvan av OpenSSL rttar till ett antal skerhetsproblem. " +"Tjnsterna kommer inte att anvnda dessa rttningar frrn de har startats " +"om. Observera att omstart av SSH-servern (sshd) inte kommer att pverka " +"befintliga anslutningar." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Undersk listan ver identifierade tjnster som behver startas om och gr " +"ndringar i den om det behvs. Tjnstenamnen mste vara identiska fr " +"initieringsskripten i /etc/init.d och mste separeras med blanksteg. Inga " +"tjnster kommer att startas om om listan r tom." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Om andra tjnster senare brjar att f underliga problem efter denna " +"uppgradering br de startas om. Vi rekommenderar att du startar om din " +"dator fr att undvika SSL-relaterade problem." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "Misslyckades med att starta om tjnster fr uppgraderingen av OpenSSL" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Fljande tjnster kunde inte startas om vid uppgraderingen av OpenSSL " +"biblioteket:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"Du mste starta om dessa tjnster manuellt genom att kra '/etc/init.d/" +" start'" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" +"Ska tjänster startas om vid paketuppgraderingar utan att först fråga?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"Det finns tjänster installerade på systemet som behöver startas om när " +"vissa bibliotek, exempelvis libpam, libc och libssl, uppgraderas. Eftersom " +"dessa omstarter kan orsaka avbrott i tjänsten ställs normalt en fråga vid " +"varje uppgradering där en lista med tjänster som ska startas om " +"presenteras. Du kan välja att aktivera detta alternativ för att undvika " +"att frågan ställs. Istället kommer alla nödvändiga omstarter att göras " +"automatiskt." diff -Nru openssl-3.0.7/debian/po/ta.po openssl-3.0.7/debian/po/ta.po --- openssl-3.0.7/debian/po/ta.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/ta.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,95 @@ +# translation of glibc.po to TAMIL +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# +# Dr.T.Vasudevan , 2007. +msgid "" +msgstr "" +"Project-Id-Version: glibc\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2019-06-20 17:58+0100\n" +"PO-Revision-Date: 2007-04-24 19:42+0530\n" +"Last-Translator: Dr.T.Vasudevan \n" +"Language-Team: TAMIL \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" + +#. Type: error +#. Description +#: ../libssl1.1.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.1.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" + +#. Type: error +#. Description +#: ../libssl1.1.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" diff -Nru openssl-3.0.7/debian/po/templates.pot openssl-3.0.7/debian/po/templates.pot --- openssl-3.0.7/debian/po/templates.pot 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/templates.pot 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,95 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# FIRST AUTHOR , YEAR. +# +#, fuzzy +msgid "" +msgstr "" +"Project-Id-Version: PACKAGE VERSION\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" +"Last-Translator: FULL NAME \n" +"Language-Team: LANGUAGE \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=CHARSET\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" diff -Nru openssl-3.0.7/debian/po/tr.po openssl-3.0.7/debian/po/tr.po --- openssl-3.0.7/debian/po/tr.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/tr.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,118 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# Atila KOÇ , 2012. +# +msgid "" +msgstr "" +"Project-Id-Version: openssl\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2012-02-20 11:55+0200\n" +"Last-Translator: Atila KOÇ \n" +"Language-Team: Turkish \n" +"Language: tr\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=utf-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "Yeni kitaplıkları kullanmaları için yeniden başlatılacak hizmetler:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"OpenSSL paketinin bu sürümü bazı güvenlik sorunlarını düzeltmiştir. " +"Hizmetler yeniden başlatılmadıkça bu düzeltmeleri kullanamayacaklar. SSH " +"sunucusunun (sshd) yeniden başlatılması kurulu bağlantıları etkilemeyecektir." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Yeniden başlatılması gerektiği algılanan hizmetleri gözden geçiriniz ve " +"gerekirse düzeltiniz. Hizmetlerin adları boşluklarla ayrılmalı ve /etc/init." +"d dizinindeki başlatma betikleri ile özdeş olmalıdır. Bu liste boş ise " +"hiçbir hizmetin yeniden başlatılmasına gerek yoktur." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Bu yükseltmeden sonra beklenmedik bir şekilde duran herhangi bir hizmet " +"yeniden başlatılmalıdır. SSL ile bağlantılı bir sorun yaşamamak için en " +"doğrusu bu sunucunun yeniden başlatılmasıdır." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "OpenSSL yükseltmesi sırasında bazı hizmetler yeniden başlatılamadı" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Aşağıdaki hizmetler OpenSSL kitaplıkları yükseltilirken yeniden " +"başlatılamadı:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +" '/etc/init.d/ start' komutunu çalıştırarak bu hizmetleri elle " +"başlatmalısınız." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" +"Hizmetler paket yükseltme işlemi esnasında size sorulmadan yeniden " +"başlatılsın mı?" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" +"Sisteminizde libpam, libc ve libssl gibi bazı kitaplıklar yükseltildiğinde " +"yeniden başlatılması gereken bazı hizmetler kurulu. Yeniden başlatma " +"işlemleri sisteminizin sunduğu hizmetlerde kesintilere neden olabileceğinden " +"dolayı her yükseltme işlemi esnasında yeniden başlatmak istediğiniz " +"hizmetler size sorulacaktır. Eğer bu sorunun sorulmasını istemiyorsanız bu " +"seçeneği kullanabilirsiniz. Bu seçenek seçildiği takdirde bir kitaplık " +"yükseltmesi yapılırken gereken tüm yeniden başlatma işlemleri size " +"sorulmaksızın otomatik olarak yapılacaktır." diff -Nru openssl-3.0.7/debian/po/uk.po openssl-3.0.7/debian/po/uk.po --- openssl-3.0.7/debian/po/uk.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/uk.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,105 @@ +# translation of uk.po to Ukrainian +# +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans# +# Developers do not need to manually edit POT or PO files. +# +# Eugeniy Meshcheryakov , 2004, 2006. +msgid "" +msgstr "" +"Project-Id-Version: uk\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2019-06-20 17:58+0100\n" +"PO-Revision-Date: 2006-02-21 10:12+0200\n" +"Last-Translator: Eugeniy Meshcheryakov \n" +"Language-Team: Ukrainian\n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.2\n" +"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n" +"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" + +#. Type: error +#. Description +#: ../libssl1.1.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.1.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" + +#. Type: error +#. Description +#: ../libssl1.1.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" diff -Nru openssl-3.0.7/debian/po/vi.po openssl-3.0.7/debian/po/vi.po --- openssl-3.0.7/debian/po/vi.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/vi.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,107 @@ +# Vietnamese translation for OpenSSL. +# Copyright © 2010 Free Software Foundation, Inc. +# Clytie Siddall , 2005-2010. +# +msgid "" +msgstr "" +"Project-Id-Version: openssl 0.9.8o-2\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2010-10-27 15:40+1030\n" +"Last-Translator: Clytie Siddall \n" +"Language-Team: Vietnamese \n" +"Language: vi\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=1; plural=0;\n" +"X-Generator: LocFactoryEditor 1.8\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "Dịch vụ cần khởi chạy lại để sử dụng thư viện mới:" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"Phiên bản OpenSSL này sửa chữa một số vấn đề bảo mật. Dịch vụ sẽ chỉ sử dụng " +"những sự sửa này sau khi khởi chạy lại. Ghi chú rằng việc khởi chạy lại " +"trình phục vụ SSH (sshd) không nên ảnh hưởng đến kết nối đã có." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"Hãy kiểm tra danh sách các dịch vụ đã phát hiện cần khởi chạy lại, và sửa " +"chữa nếu cần thiết. Tên mỗi dịch vụ phải trùng với tên văn lệnh sơ khởi " +"trong « /etc/init.d », các tên dịch vụ cũng định giới bằng dấu cách. Bỏ " +"trống trường này thì không khời chạy dịch vụ nào." + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"Dịch vụ nào bị lỗi bất thường sau khi nâng cấp thì nên được khởi chạy lại. " +"Khuyên bạn khởi động lại máy này để tránh vấn đề liên quan đến SSL." + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "Lỗi khởi chạy lại một số dịch vụ để nâng cấp OpenSSL" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" +"Những dịch vụ theo đây không khởi chạy lại được để nâng cấp thư viện OpenSSL:" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" +"Vì thế bạn cần phải khởi chạy bằng tay, bằng cách chạy câu lệnh « /etc/init." +"d/ start »." + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" diff -Nru openssl-3.0.7/debian/po/zh_CN.po openssl-3.0.7/debian/po/zh_CN.po --- openssl-3.0.7/debian/po/zh_CN.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/zh_CN.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,106 @@ +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans +# +# Developers do not need to manually edit POT or PO files. +# +# Hiei Xu , 2004. +# Carlos Z.F. Liu , 2004. +# LI Daobing , 2007, 2008. +# +# +msgid "" +msgstr "" +"Project-Id-Version: glibc 2.7-9\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2019-06-20 17:58+0100\n" +"PO-Revision-Date: 2008-02-28 23:44+0800\n" +"Last-Translator: LI Daobing \n" +"Language-Team: Chinese (Simplified) \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" + +#. Type: string +#. Description +#: ../libssl1.1.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" + +#. Type: error +#. Description +#: ../libssl1.1.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.1.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" + +#. Type: error +#. Description +#: ../libssl1.1.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" diff -Nru openssl-3.0.7/debian/po/zh_TW.po openssl-3.0.7/debian/po/zh_TW.po --- openssl-3.0.7/debian/po/zh_TW.po 1970-01-01 01:00:00.000000000 +0100 +++ openssl-3.0.7/debian/po/zh_TW.po 2022-12-06 15:11:40.000000000 +0100 @@ -0,0 +1,98 @@ +msgid "" +msgstr "" +"Project-Id-Version: openssl\n" +"Report-Msgid-Bugs-To: openssl@packages.debian.org\n" +"POT-Creation-Date: 2010-12-13 20:31+0100\n" +"PO-Revision-Date: 2007-04-18 01:10+0800\n" +"Last-Translator: Tetralet \n" +"Language-Team: Debian-user in Chinese [Big5] \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "Services to restart to make them use the new libraries:" +msgstr "必須重新啟動才能使用新函式庫的服務程式：" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"This release of OpenSSL fixes some security issues. Services will not use " +"these fixes until they are restarted. Please note that restarting the SSH " +"server (sshd) should not affect any existing connections." +msgstr "" +"這個 OpenSSL 的釋出版修正了一些安全上的問題。這些服務程式必須重新啟動否則無法" +"套用這些修正。請注意到，重新啟動 SSH 服務程式 (sshd) 並不會影響到任何現有的連" +"線。" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Please check the list of detected services that need to be restarted and " +"correct it, if needed. The services names must be identical to the " +"initialization script names in /etc/init.d and separated by spaces. No " +"services will be restarted if the list is empty." +msgstr "" +"請檢視被偵測到需重新啟動的服務程式之列表，有必要時請加以修正。這些服務程式名" +"稱必須和 /etc/init.d 裡的初始化 Script 名稱一致，並以空白分隔。如果列表裡空無" +"一物，就表示沒有服務程式會被重新啟動。" + +#. Type: string +#. Description +#: ../libssl1.0.0.templates:1001 +msgid "" +"Any service that later fails unexpectedly after this upgrade should be " +"restarted. It is recommended to reboot this host to avoid any SSL-related " +"trouble." +msgstr "" +"在此更新之後，必須將任何預料之外無法成功運行的服務程式重新啟動。建議重新啟動" +"這台主機以避免發生任何 SSL 相關的問題。" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "Failure restarting some services for OpenSSL upgrade" +msgstr "" + +#. Type: error +#. Description +#. This paragraph is followed by a (non translatable) paragraph containing +#. a list of services that could not be restarted +#: ../libssl1.0.0.templates:2001 +msgid "" +"The following services could not be restarted for the OpenSSL library " +"upgrade:" +msgstr "" + +#. Type: error +#. Description +#: ../libssl1.0.0.templates:2001 +msgid "" +"You will need to start these manually by running '/etc/init.d/ " +"start'." +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "Restart services during package upgrades without asking?" +msgstr "" + +#. Type: boolean +#. Description +#: ../libssl1.1.templates:3001 +msgid "" +"There are services installed on your system which need to be restarted when " +"certain libraries, such as libpam, libc, and libssl, are upgraded. Since " +"these restarts may cause interruptions of service for the system, you will " +"normally be prompted on each upgrade for the list of services you wish to " +"restart. You can choose this option to avoid being prompted; instead, all " +"necessary restarts will be done for you automatically so you can avoid being " +"asked questions on each library upgrade." +msgstr "" diff -Nru openssl-3.0.7/debian/README.debian openssl-3.0.7/debian/README.debian --- openssl-3.0.7/debian/README.debian 2022-12-13 16:47:17.000000000 +0100 +++ openssl-3.0.7/debian/README.debian 2022-12-06 15:11:40.000000000 +0100 @@ -11,14 +11,6 @@ eg: instead of `req` please call `openssl req` -TLS protovol version and RSA key size -------------------------------------- -The default system global policy is to support TLSv1.2+ and security level two. -Please see - https://www.openssl.org/docs/man1.1.1/man5/config.html - https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_security_level.html#DEFAULT-CALLBACK-BEHAVIOUR -for configurations details of `MinProtocol' and `CipherString' in -/etc/ssl/openssl.cnf case you really require to support legacy systems. PATENT ISSUES ------------- diff -Nru openssl-3.0.7/debian/rules openssl-3.0.7/debian/rules --- openssl-3.0.7/debian/rules 2022-12-13 16:47:17.000000000 +0100 +++ openssl-3.0.7/debian/rules 2022-12-06 15:11:40.000000000 +0100 @@ -111,6 +111,8 @@ fi override_dh_auto_install-arch: + # We need the -udeb directories now! + dh_installdirs $(MAKE) -C build_shared install DESTDIR=`pwd`/debian/tmp # pic static libraries, nobody should need them cp -pf build_static/libcrypto.a debian/tmp/usr/lib/$(DEB_HOST_MULTIARCH)/libcrypto.a @@ -119,10 +121,12 @@ mv debian/tmp/usr/lib/ssl/{certs,openssl.cnf,private} debian/tmp/etc/ssl/ ln -s /etc/ssl/{certs,openssl.cnf,private} debian/tmp/usr/lib/ssl/ ln -s /etc/ssl/certs/ca-certificates.crt debian/tmp/usr/lib/ssl/cert.pem +ifeq (,$(filter noudeb,$(DEB_BUILD_PROFILES))) cp -pf debian/tmp/usr/lib/$(DEB_HOST_MULTIARCH)/libcrypto.so.* debian/libcrypto3-udeb/usr/lib/ cp -pf debian/tmp/usr/lib/$(DEB_HOST_MULTIARCH)/ossl-modules/*.so debian/libcrypto3-udeb/usr/lib/ossl-modules cp -pf debian/tmp/etc/ssl/openssl.cnf debian/libcrypto3-udeb/usr/lib/ssl/openssl.cnf cp -pf debian/tmp/usr/lib/$(DEB_HOST_MULTIARCH)/libssl.so.* debian/libssl3-udeb/usr/lib/ +endif cp -auv build_shared/lib*.so* debian/tmp/usr/lib/$(DEB_HOST_MULTIARCH)/ for opt in $(OPTS); \ do set -xe; \ @@ -142,6 +146,15 @@ fi dh_fixperms -a -X etc/ssl/private +override_dh_compress: + dh_compress + # symlink doc files + for p in openssl libssl-dev; do \ + for f in changelog.Debian.gz changelog.gz copyright; do \ + ln -sf ../libssl3/$$f debian/$$p/usr/share/doc/$$p/$$f; \ + done; \ + done + override_dh_perl: dh_perl -d diff -Nru openssl-3.0.7/debian/tests/control openssl-3.0.7/debian/tests/control --- openssl-3.0.7/debian/tests/control 2022-12-13 16:47:17.000000000 +0100 +++ openssl-3.0.7/debian/tests/control 2022-12-06 15:11:40.000000000 +0100 @@ -1,3 +1,3 @@ Tests: run-25-test-verify -Depends: openssl, perl +Depends: openssl, perl:native Restrictions: rw-build-tree, allow-stderr