Bug#1109207: bookworm-pu: package openssl/3.0.17-1~deb12u1

[Sebastian Andrzej Siewior <sebastian@breakpoint.cc>]

On 2025-07-13 15:10:50 [+0200], Simon Josefsson wrote:
> Sebastian Andrzej Siewior <sebastian@breakpoint.cc> writes:
> 
> > --- openssl-3.0.16/CHANGES.md	2025-02-11 15:47:41.000000000 +0100
> > +++ openssl-3.0.17/CHANGES.md	2025-07-01 14:11:11.000000000 +0200
> ...
> > + * SSLv3 is by default disabled at build-time. Builds that are not
> > +   configured with "enable-ssl3" will not support SSLv3.
> 
> I'm all for disabling SSLv3, but could you clarify if this package
> update actually disable SSLv3 by default or merely fix the CHANGES to
> accurately describe a change of defaults that happened earlier?

SSLv3 is disabled in Debian since 1.0.2d-2.

> /Simon

Sebastian