Merge ~ravi-sharma/ubuntu/+source/openssl:fix-lp2137464 into ubuntu/+source/openssl:ubuntu/devel

[Ravi Kant Sharma]

[Ravi Kant Sharma (ravi-sharma)]

PPA: https://launchpad.net/~ravi-sharma/+archive/ubuntu/fix-lp2137464/+packages

* Results:
  - openssl: resolute/openssl/3.5.3-1ubuntu3 [amd64]
    + ✅ openssl on resolute for amd64 @ 06.01.26 15:02:37
      • Log: https://autopkgtest.ubuntu.com/results/autopkgtest-resolute-ravi-sharma-fix-lp2137464/resolute/amd64/o/openssl/20260106_150237_40d5f@/log.gz
  - openssl: resolute/openssl/3.5.3-1ubuntu3 [arm64]
    + ✅ openssl on resolute for arm64 @ 06.01.26 14:31:33
      • Log: https://autopkgtest.ubuntu.com/results/autopkgtest-resolute-ravi-sharma-fix-lp2137464/resolute/arm64/o/openssl/20260106_143133_04843@/log.gz
  - openssl: resolute/openssl/3.5.3-1ubuntu3 [armhf]
    + ✅ openssl on resolute for armhf @ 06.01.26 14:33:31
      • Log: https://autopkgtest.ubuntu.com/results/autopkgtest-resolute-ravi-sharma-fix-lp2137464/resolute/armhf/o/openssl/20260106_143331_ff30e@/log.gz
  - openssl: resolute/openssl/3.5.3-1ubuntu3 [i386]
    + ✅ openssl on resolute for i386 @ 06.01.26 15:04:31
      • Log: https://autopkgtest.ubuntu.com/results/autopkgtest-resolute-ravi-sharma-fix-lp2137464/resolute/i386/o/openssl/20260106_150431_3f822@/log.gz
  - openssl: resolute/openssl/3.5.3-1ubuntu3 [ppc64el]
    + ✅ openssl on resolute for ppc64el @ 06.01.26 14:32:26
      • Log: https://autopkgtest.ubuntu.com/results/autopkgtest-resolute-ravi-sharma-fix-lp2137464/resolute/ppc64el/o/openssl/20260106_143226_24fd4@/log.gz
  - openssl: resolute/openssl/3.5.3-1ubuntu3 [s390x]
    + ✅ openssl on resolute for s390x @ 06.01.26 14:31:50
      • Log: https://autopkgtest.ubuntu.com/results/autopkgtest-resolute-ravi-sharma-fix-lp2137464/resolute/s390x/o/openssl/20260106_143150_bf3ca@/log.gz

bf873a2... by Ravi Kant Sharma on 2026-01-06

match last filename for output in ecp_nistp521-ppc64.pl

Unmerged commits

aa4876a... by Ravi Kant Sharma on 2026-01-06

changelog for 3.5.3-1ubuntu3

bf873a2... by Ravi Kant Sharma on 2026-01-06

match last filename for output in ecp_nistp521-ppc64.pl

diff --git a/debian/changelog b/debian/changelog
index f96665e..4052112 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+openssl (3.5.3-1ubuntu3) resolute; urgency=medium
+
+  * match last filename for output in ecp_nistp521-ppc64.pl (LP: #2137464)
+    - debian/patches/regex_match_ecp_nistp521-ppc64.patch
+
+ -- Ravi Kant Sharma <[e-mail]>  Tue, 06 Jan 2026 14:39:05 +0100
+
 openssl (3.5.3-1ubuntu2) questing; urgency=medium
 
   * SECURITY UPDATE: Out-of-bounds read & write in RFC 3211 KEK Unwrap
diff --git a/debian/patches/regex_match_ecp_nistp521-ppc64.patch b/debian/patches/regex_match_ecp_nistp521-ppc64.patch
new file mode 100644
index 0000000..74085ab
--- /dev/null
+++ b/debian/patches/regex_match_ecp_nistp521-ppc64.patch
@@ -0,0 +1,30 @@
+Description: match last filename for output in ecp_nistp521-ppc64.pl
+
+ ecp_nistp521-ppc64.pl matches the incorrect param for output instead of
+ crypto/ec/ecp_nistp521-ppc64.s This leads to ecp_nistp521-ppc64.pl writing
+ output to STDOUT instead of the file crypto/ec/ecp_nistp521-ppc64.s. The
+ missing .s file leads Missing .s file leads to gcc erroring out and build
+ failure.  Makefile generates command with crypto/ec/ecp_nistp521-ppc64.s as
+ the last param. This page matches the last filename instead of first.
+
+Author: Ravi Kant Sharma <[e-mail]>
+Bug-Ubuntu: https://launchpad.net/bugs/2137464
+
+---
+Forwarded: https://github.com/openssl/openssl/pull/29417
+Last-Update: 2025-12-17
+
+--- openssl-3.0.13.orig/crypto/ec/asm/ecp_nistp521-ppc64.pl
++++ openssl-3.0.13/crypto/ec/asm/ecp_nistp521-ppc64.pl
+@@ -19,7 +19,10 @@ use warnings;
+ 
+ my $flavour = shift;
+ my $output = "";
+-while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
++my $arg;
++while ($arg = shift) {
++    $output = $arg if $arg =~ /\w[\w\-]*\.\w+$/;
++}
+ if (!$output) {
+ 	$output = "-";
+ }
diff --git a/debian/patches/series b/debian/patches/series
index 22b53ff..05e7109 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -7,6 +7,7 @@ conf-Serialize-allocation-free-of-ssl_names.patch
 # Ubuntu patches
 
 default-configuration-read-dropins-and-crypto-config.patch
+regex_match_ecp_nistp521-ppc64.patch
 
 # Ubuntu FIPS patches
 fips/crypto-Add-kernel-FIPS-mode-detection.patch