[ubuntu/focal-proposed] openssl 1.1.1d-2ubuntu2 (Accepted)

[Dimitri John Ledkov]

openssl (1.1.1d-2ubuntu2) focal; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Replace duplicate files in the doc directory with symlinks.
    - debian/libssl1.1.postinst:
      + Display a system restart required notification on libssl1.1
        upgrade on servers.
      + Use a different priority for libssl1.1/restart-services depending
        on whether a desktop, or server dist-upgrade is being performed.
      + Bump version check to to 1.1.1.
      + Import libraries/restart-without-asking template as used by above.
    - Revert "Enable system default config to enforce TLS1.2 as a
      minimum" & "Increase default security level from 1 to 2".
    - Reword the NEWS entry, as applicable on Ubuntu.
    - Cherrypick s390x SIMD acceleration patches for poly1305 and chacha20
      from master.

  * Set OPENSSL_TLS_SECURITY_LEVEL=2 as compiled-in minimum security
    level. Change meaning of SECURITY_LEVEL=2 to prohibit TLS versions
    below 1.2 and update documentation. Previous default of 1, can be set
    by calling SSL_CTX_set_security_level(), SSL_set_security_level() or
    using ':@SECLEVEL=1' CipherString value in openssl.cfg.

Date: Wed, 08 Jan 2020 17:17:41 +0000
Changed-By: Dimitri John Ledkov <xnox at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/openssl/1.1.1d-2ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 08 Jan 2020 17:17:41 +0000
Source: openssl
Architecture: source
Version: 1.1.1d-2ubuntu2
Distribution: focal
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Dimitri John Ledkov <xnox at ubuntu.com>
Changes:
 openssl (1.1.1d-2ubuntu2) focal; urgency=low
 .
   * Merge from Debian unstable.  Remaining changes:
     - Replace duplicate files in the doc directory with symlinks.
     - debian/libssl1.1.postinst:
       + Display a system restart required notification on libssl1.1
         upgrade on servers.
       + Use a different priority for libssl1.1/restart-services depending
         on whether a desktop, or server dist-upgrade is being performed.
       + Bump version check to to 1.1.1.
       + Import libraries/restart-without-asking template as used by above.
     - Revert "Enable system default config to enforce TLS1.2 as a
       minimum" & "Increase default security level from 1 to 2".
     - Reword the NEWS entry, as applicable on Ubuntu.
     - Cherrypick s390x SIMD acceleration patches for poly1305 and chacha20
       from master.
 .
   * Set OPENSSL_TLS_SECURITY_LEVEL=2 as compiled-in minimum security
     level. Change meaning of SECURITY_LEVEL=2 to prohibit TLS versions
     below 1.2 and update documentation. Previous default of 1, can be set
     by calling SSL_CTX_set_security_level(), SSL_set_security_level() or
     using ':@SECLEVEL=1' CipherString value in openssl.cfg.
Checksums-Sha1:
 0e9ee0606811566a3daf022d19c53d1f8149d1de 2724 openssl_1.1.1d-2ubuntu2.dsc
 e91fc47ff9431d039542670dfe38ea8233a56b97 146860 openssl_1.1.1d-2ubuntu2.debian.tar.xz
 b36914fa68ba5511cd800510924bc09021c9a690 6566 openssl_1.1.1d-2ubuntu2_source.buildinfo
Checksums-Sha256:
 5e331ee38266aa208f0e93eced4ddfa9af20466161d627f94d79ad853b930c6d 2724 openssl_1.1.1d-2ubuntu2.dsc
 7f3c47f0d1416e4fff6427e8339d78731b2c08c1b5897127b7bfbfe44d152d18 146860 openssl_1.1.1d-2ubuntu2.debian.tar.xz
 95c59143da222f409e4950a69e8eb341e811ccf970442ba10a71a000ab0b4677 6566 openssl_1.1.1d-2ubuntu2_source.buildinfo
Files:
 f6285b31e8b7e5662306f686da2c08fb 2724 utils optional openssl_1.1.1d-2ubuntu2.dsc
 326bc265e9fa484823a3eba139964dbf 146860 utils optional openssl_1.1.1d-2ubuntu2.debian.tar.xz
 06cb62165ab10b0f67830bc30aae128d 6566 utils optional openssl_1.1.1d-2ubuntu2_source.buildinfo
Original-Maintainer: Debian OpenSSL Team <pkg-openssl-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
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=7r5H
-----END PGP SIGNATURE-----